health: drop hair_progress; owner = Stan's account email only

Regenerated the (not yet deployed) health migration without hair_progress.

.env.example

@@ -1,5 +1,9 @@
-# PostgreSQL connection (server only)
-DB_URL=postgresql://postgres:postgres@localhost:5432/personal_dev
+# PostgreSQL connections (server only). Never commit real passwords.
+# DB_URL: the app role (personal_app: DML only, no DDL).
+DB_URL=postgresql://personal_app:CHANGE_ME@localhost:5432/personal_dev
+# DB_MIGRATE_URL: the schema owner (personal), used only by drizzle-kit,
+# scripts/db-migrate.ts, the seed scripts and deploy backups.
+DB_MIGRATE_URL=postgresql://personal:CHANGE_ME@localhost:5432/personal_dev
 
 # Use the exact public origin, including scheme and port. Set the same value for both.
 ORIGIN=http://localhost:5173

.gitea/workflows/build.yml

@@ -1,44 +0,0 @@
-name: Test and deploy staging
-on:
-  push:
-    branches: [staging]
-
-jobs:
-  staging:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      # Build once. The same SHA-tagged image stays on the deployment host for
-      # one-click promotion to production; the production workflow never rebuilds it.
-      - uses: docker/build-push-action@v5
-        with:
-          context: .
-          push: false
-          load: true
-          tags: git.stanrunge.dev/stan/personal-website:${{ github.sha }}
-          build-args: |
-            GIT_SHA=${{ github.sha }}
-
-      - name: Configure deployment SSH key
-        env:
-          DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
-        run: |
-          set -euo pipefail
-          install -d -m 700 ~/.ssh
-          printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts
-
-      - name: Transfer tested image
-        run: |
-          set -euo pipefail
-          image="git.stanrunge.dev/stan/personal-website:${{ github.sha }}"
-          docker save "$image" | ssh -o BatchMode=yes deploy@172.17.0.1 'sudo docker load'
-
-      - name: Deploy staging
-        run: |
-          set -euo pipefail
-          ssh -o BatchMode=yes deploy@172.17.0.1 \
-            "bash -s -- '${{ github.sha }}' '/opt/personal-website-staging' 'https://staging.stanrunge.dev'" \
-            < scripts/deploy-remote.sh

.gitea/workflows/deploy-production.yml

@@ -1,33 +0,0 @@
-name: Deploy production
-on:
-  workflow_dispatch:
-
-jobs:
-  promote:
-    runs-on: ubuntu-latest
-    steps:
-      # Always test the staging branch, regardless of which branch the button
-      # appears on in Gitea's Actions UI.
-      - uses: actions/checkout@v4
-        with:
-          ref: staging
-
-      - name: Configure deployment SSH key
-        env:
-          DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
-        run: |
-          set -euo pipefail
-          install -d -m 700 ~/.ssh
-          printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts
-
-      - name: Promote the exact staging image
-        run: |
-          set -euo pipefail
-          commit=$(git rev-parse HEAD)
-          ssh -o BatchMode=yes deploy@172.17.0.1 "bash -s -- '$commit'" \
-            < scripts/verify-staging-image.sh
-          ssh -o BatchMode=yes deploy@172.17.0.1 \
-            "bash -s -- '$commit' '/opt/personal-website' 'https://stanrunge.dev'" \
-            < scripts/deploy-remote.sh

.gitea/workflows/deploy.yml

@@ -0,0 +1,70 @@
+name: Deploy production
+# Two environments only: local dev (see README "Development") and prod.
+# A push/merge to main builds and tests the image, backs up prod (pg_dump via
+# postgres:17-alpine), runs Drizzle migrations, then switches the container.
+# Pushes to any other branch (e.g. db-schemas) do not match and run nothing.
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+    inputs:
+      rollback_tag:
+        description: 'Roll back: redeploy this earlier image SHA (skips migrations/seeds)'
+        required: true
+
+concurrency:
+  group: deploy-production
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    # Belt and braces: a manual dispatch from another branch does nothing either.
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Configure deployment SSH key
+        env:
+          DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
+        run: |
+          set -euo pipefail
+          install -d -m 700 ~/.ssh
+          printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts
+
+      # The Dockerfile runs bun install --frozen-lockfile, unit tests and the build,
+      # so a failing test never produces a deployable image.
+      - if: github.event_name == 'push'
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: false
+          load: true
+          tags: git.stanrunge.dev/stan/website:${{ github.sha }}
+          build-args: |
+            GIT_SHA=${{ github.sha }}
+
+      - name: Transfer image
+        if: github.event_name == 'push'
+        run: |
+          set -euo pipefail
+          image="git.stanrunge.dev/stan/website:${{ github.sha }}"
+          docker save "$image" | ssh -o BatchMode=yes deploy@172.17.0.1 'sudo docker load'
+
+      - name: Back up, migrate and deploy
+        if: github.event_name == 'push'
+        run: |
+          set -euo pipefail
+          ssh -o BatchMode=yes deploy@172.17.0.1 \
+            "bash -s -- '${{ github.sha }}' deploy" < scripts/deploy-remote.sh
+
+      - name: Roll back to an earlier image
+        if: github.event_name == 'workflow_dispatch'
+        env:
+          TAG: ${{ inputs.rollback_tag }}
+        run: |
+          set -euo pipefail
+          case "$TAG" in *[!0-9a-f]*|'') echo 'Invalid image tag' >&2; exit 2 ;; esac
+          ssh -o BatchMode=yes deploy@172.17.0.1 "bash -s -- '$TAG' rollback" < scripts/deploy-remote.sh

Dockerfile

@@ -13,6 +13,7 @@ ENV APP_VERSION=$GIT_SHA
 COPY --from=builder /app/node_modules ./node_modules
 COPY --from=builder /app/build ./build
 COPY --from=builder /app/scripts ./scripts
+COPY --from=builder /app/drizzle ./drizzle
 COPY --from=builder /app/data ./data
 COPY --from=builder /app/src/lib/server/db/schema ./src/lib/server/db/schema
 COPY --from=builder /app/src/lib/cs-prices ./src/lib/cs-prices

README.md

@@ -227,25 +227,14 @@ progress and warns about them.
 
 ### Database
 
-For an existing database using the current domain schemas:
-
-```sh
-npm run db:migrate:auth
-npm run db:migrate:foundation
-npm run db:migrate:money-tracker
-npm run db:migrate:game-tracker
-npm run db:seed
-npm run db:seed:cod
-```
-
-For a fresh database, run `npm run db:push` followed by both seeds.
-The migrations are additive and repeatable; they do not reset tables. The
-game-tracker migration adds the `evolve`/`breed` availability values, the entry
-`source` column (marking pre-existing hand-edited notes as `manual`), and the
-location, encounter, evolution and `tracker_*` tables. Unknown legacy OAuth
-providers cause the auth migration to fail for explicit review instead of
-guessing an issuer. Back up a production database before any schema migration.
-The scripts use `DB_URL` from `.env` via Bun.
+The schema is managed by Drizzle (`src/lib/server/db/schema/`, migrations in
+`drizzle/`). Postgres schemas: `auth`, `money`, `house`, `ref`, `games`, `cs`,
+`animaldex`, `site`, `meta` (Drizzle-managed) and `lists` (one real table per list,
+created at runtime through the `meta.create_list` family of SQL functions, so it is
+excluded from Drizzle via `schemaFilter`). See [Development](#development) for the
+local database and migrations, and `db/reorg/README.md` for the one-time move of the
+old flat schema to this layout. Catalog seeds (`npm run db:seed`, `db:seed:cod`, …)
+upsert reference data and run on every production deploy.
 
 ## Money tracker
 
@@ -317,112 +306,87 @@ registered callback URL. The integration follows the installed Better Auth APIs;
 see [SvelteKit integration](https://better-auth.com/docs/integrations/svelte-kit)
 and [Generic OAuth](https://better-auth.com/docs/plugins/generic-oauth).
 
-## Staging and production rollout
+## Development
 
-Use `staging` as the working branch and set it as the repository's default branch
-in Gitea after the first push. A direct push to `staging` runs unit tests, builds
-the site and a SHA-tagged Docker image, and deploys that image to
-`https://staging.stanrunge.dev`. After checking staging, use Gitea Actions →
-**Deploy production** → **Run workflow**. That action retests the current staging
-commit, verifies that staging runs its exact image, and starts the **same image**
-at `https://stanrunge.dev`. It does not rebuild the image or need a PR. Pushes to
-`main` no longer deploy production; once `staging` is the default branch, its
-current manual workflow is also the one shown in Gitea's Actions UI.
+There are two environments: local dev and production. Prod is the source of truth
+for data; the dev database is a disposable copy of it.
 
-The staging Docker build runs `bun install --frozen-lockfile`, unit tests, and
-the production build, so a failed test never produces a deployable image. The
-production button verifies the exact tested staging image before switching
-production. Browser/database tests need a
-dedicated test database and are not part of this gate yet. `npm run check` and
-full lint are also not gates while the repository has existing unrelated
-diagnostics; add them after those are fixed. A failed test, build, or preflight
-prevents the switch; a failed post-deploy health check attempts to restore the
-previous image tag. Deployment never migrates or seeds either database. The
-Gitea runner needs Docker CLI/socket access and the existing `DEPLOY_KEY` secret.
+```sh
+cp .env.example .env            # DB_URL (app role) + DB_MIGRATE_URL (owner role) -> local personal_dev
+scripts/db-refresh-dev.sh       # fresh prod dump -> personal_dev (sessions cleared)
+bun run db:migrate              # apply this branch's pending Drizzle migrations
+bun run dev
+```
 
-Before either push, configure the existing private environment file on that
-host. Staging uses `/etc/personal-website-staging/staging.env`; production uses
-`/etc/personal-website/prod.env`. Each file needs `DB_URL`, a unique random
-`BETTER_AUTH_SECRET` of at least 32 characters, and both `ORIGIN` and
-`BETTER_AUTH_URL` set exactly to its public HTTPS origin. Add the Google and
-osu! client ID/secret pairs for whichever sign-in buttons should be enabled.
-List and Animaldex picture uploads reuse the existing R2 bucket; set the five
-`R2_*` values from `.env.example`. The app server uploads images to R2, so the
-bucket does not need browser CORS rules for these forms. Each image is limited
-to 5 MB; the container sets `BODY_SIZE_LIMIT=6M` for multipart requests.
-Their provider console callback URLs must use that environment's origin:
+`db-refresh-dev.sh` reads `PROD_DB_URL` (a role that can read everything, e.g.
+`personal`) and `DEV_ADMIN_URL` (superuser on the dev cluster) from the environment
+or `.env.dev-refresh` (git-ignored, never commit it). It refuses to overwrite the
+source database or any database named `personal`. `PG_DOCKER=1` uses the
+`postgres:17-alpine` image when local `pg_dump` 17 isn't installed.
+
+Schema changes: edit `src/lib/server/db/schema/`, run `bun run db:generate --name
+<change>`, review the SQL in `drizzle/`, then `bun run db:migrate`. Never edit an
+applied migration; never use `db:push` against prod.
+
+`scripts/preview.sh <branch> [port]` runs a branch against a throwaway copy of the
+dev database (migrated with that branch's migrations) and cleans everything up on
+Ctrl-C.
+
+### Database roles
+
+| env var          | role           | used for                                                        |
+| ---------------- | -------------- | --------------------------------------------------------------- |
+| `DB_URL`         | `personal_app` | the app at runtime: DML only, calls the `meta.*` list functions |
+| `DB_MIGRATE_URL` | `personal`     | Drizzle migrations, seeds, backups (`pg_dump`)                  |
+
+`personal_ddl` owns the `lists` schema (only reachable through the SECURITY DEFINER
+`meta.*` functions); `personal_ro` is read-only. The deploy preflight fails if
+`DB_URL` can create objects, i.e. if it isn't the app role.
+
+## Production
+
+Push or merge to `main` → Gitea Actions (`.gitea/workflows/deploy.yml`) builds a
+SHA-tagged image (unit tests + production build run inside the Docker build),
+transfers it, and runs `scripts/deploy-remote.sh <sha> deploy` on the host:
+
+1. checks the image and that `DB_MIGRATE_URL` is set in `/etc/personal-website/prod.env`;
+2. `pg_dump` of prod (postgres:17-alpine) into the backup directory;
+3. `bun scripts/db-migrate.ts` (Drizzle migrations) and the catalog seeds;
+4. preflight (tables, column types, app-role privileges), switch the container, health checks.
+
+A failed health check restores the previous image tag automatically. Manual
+rollback: Gitea Actions → **Deploy production** → **Run workflow** with
+`rollback_tag=<previous sha>`; this redeploys that image without migrating or
+seeding. Database changes are not rolled back with the image; restore the
+pre-deploy dump if a migration has to be undone. Only `main` deploys; other
+branches never trigger the workflow. The runner needs Docker CLI/socket access
+and the `DEPLOY_KEY` secret.
+
+`/etc/personal-website/prod.env` needs `DB_URL`, `DB_MIGRATE_URL`, a unique random
+`BETTER_AUTH_SECRET` (32+ characters), and `ORIGIN`/`BETTER_AUTH_URL` set to
+`https://stanrunge.dev`, plus the Google and osu! client ID/secret pairs and the five
+`R2_*` values from `.env.example`. Picture uploads (lists, Animaldex) go through the
+app server to R2 (5 MB per image; the container sets `BODY_SIZE_LIMIT=6M`). OAuth
+callback URLs:
 
 ```text
-https://staging.stanrunge.dev/api/auth/callback/google
-https://staging.stanrunge.dev/api/auth/callback/osu
 https://stanrunge.dev/api/auth/callback/google
 https://stanrunge.dev/api/auth/callback/osu
 ```
 
-For this first rollout, review the SQL and back up each database. The first push
-to `staging` may pass **Transfer tested image** but fail **Deploy staging** at
-the database preflight. That is expected if the database has not been migrated:
-the image is then available on the deployment host for you to run the migrations
-yourself. If `animals`, `sightings`, and `photos` still have UUID IDs, first apply
-`scripts/animaldex-uuid-to-serial.sql` with `psql` once. If the database has the
-legacy singular tables `game`, `pokemon_game_entry`, `user_entry`, and `user_game`,
-then apply `scripts/legacy-schema-migration.sql` with `psql` once. That migration
-renames those tables without discarding their rows and creates the empty base
-`lists` and `list_items` tables. Run both reviewed SQL files before the container
-commands below. On the deployment host, use the SHA from the staging Actions run:
+After registering, promote your account (ID shown on `/account`):
 
 ```sh
-release_image=git.stanrunge.dev/stan/personal-website:<staging-sha>
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/migrate-auth-catalog.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/migrate-foundation.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/migrate-money-tracker.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/migrate-game-tracker.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/migrate-tracker-journal.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/seed-catalog.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/seed-cod-catalog.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/seed-pokemon-research.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/seed-cod-challenges.ts
-sudo docker run --rm --network backend --env-file /etc/personal-website-staging/staging.env "$release_image" bun scripts/seed-cod-art.ts
+sudo docker run --rm --network backend --env-file /etc/personal-website/prod.env \
+  git.stanrunge.dev/stan/website:<deployed-sha> bun scripts/set-admin.ts <account-id> admin
 ```
 
-These catalog seeds use the reviewed files in `data/` and upsert catalog rows;
-they preserve user accounts, catches, ranks, and saved challenge progress. Do not
-copy or restore the entire development database over staging or production.
-Repeat the same migration and seed commands for staging first, replacing the
-environment file with `/etc/personal-website/prod.env` only after staging has
-passed its preflight and been reviewed. Back up production before applying its
-migrations. Rerun the same staging Actions run after the staging migration and
-seed complete. Click the production button only after production migration and
-seed complete. Future releases without database changes need only a staging push
-and the production button.
-
-The foundation migration gives lists slugs, progress, pictures, and blog tags;
-gives site-owned join/settings rows numeric IDs; and adds `created_at`/
-`updated_at` with a database update trigger. Blog posts already had numeric IDs
-and timestamps. Better Auth's account/session IDs stay as text because they are
-provider-managed identities. The deploy script verifies the migrations and
-catalog before switching the image, then checks `/login` and Catchemall. A
-failed app health check attempts to restore the previous image tag. Database
-changes are not rolled back with the app image.
-
-The release image contains `scripts/`, `data/`, and the schema files needed by
-the migration tools. After registration in each environment, promote your own
-account using the host's matching environment file, for example:
-
-```sh
-sudo docker run --rm --network backend \
-  --env-file /etc/personal-website-staging/staging.env \
-  git.stanrunge.dev/stan/personal-website:<deployed-sha> \
-  bun scripts/set-admin.ts <account-id> admin
-```
-
-Use `/etc/personal-website/prod.env` and its deployed image SHA for production.
-The account ID is shown on `/account`. No public signup grants admin privileges.
+No public signup grants admin privileges.
 
 # CS prices
 
 `/projects/cs-prices` reads only from Postgres. Each Steam market hash name is an
-individual listing. The separate `cs_item_dimensions` table makes it possible to
+individual listing. The separate `cs.item_dimensions` table makes it possible to
 compare or group by weapon type, weapon name, weapon plus skin, skin, wear, StatTrak, Souvenir, and
 additional imported dimensions such as collection or rarity. Group chart points
 average the available per-listing prices equally within each time bucket. Raw
@@ -431,10 +395,9 @@ volume. Chart responses use up to roughly 240 time buckets per series and allow
 up to 1,000 selected series; actual response time still depends on database size
 and hardware.
 
-With `DB_URL` pointed at a running Postgres database:
+With `DB_URL` pointed at a migrated database:
 
 ```sh
-npm run db:migrate:cs-prices
 npm run cs-prices:ingest -- catalog
 STEAM_SESSIONID=... STEAM_LOGIN_SECURE=... npm run cs-prices:ingest -- history
 ```

db/reorg/01_roles.sql

@@ -0,0 +1,17 @@
+-- 01_roles.sql: cluster-level roles. Run as a superuser (postgres). Idempotent.
+-- In prod: needs `sudo docker exec -i <pg-container> psql -U postgres`; set passwords separately (\password), never in this file.
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'personal_app') THEN
+    CREATE ROLE personal_app LOGIN;            -- app, ned-collector, house worker
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'personal_ddl') THEN
+    CREATE ROLE personal_ddl NOLOGIN;          -- owns schema lists; only reachable via SECURITY DEFINER fns
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'personal_ro') THEN
+    CREATE ROLE personal_ro LOGIN;             -- read-only for audits/agents/pgAdmin
+  END IF;
+END $$;
+ALTER ROLE personal_ro SET default_transaction_read_only = on;
+ALTER ROLE personal_app SET search_path = '$user';   -- force schema-qualified names in app SQL
+ALTER ROLE personal_ro  SET search_path = '$user';

db/reorg/02_schemas_move.sql

@@ -0,0 +1,142 @@
+-- 02_schemas_move.sql: create schemas, snapshot counts, move + rename all 58 public tables.
+SET ROLE personal;
+
+CREATE SCHEMA auth;     CREATE SCHEMA money;  CREATE SCHEMA house;  CREATE SCHEMA ref;
+CREATE SCHEMA games;    CREATE SCHEMA cs;     CREATE SCHEMA animaldex; CREATE SCHEMA site;
+CREATE SCHEMA meta;     CREATE SCHEMA hardware; CREATE SCHEMA energy; CREATE SCHEMA legacy;
+COMMENT ON SCHEMA legacy IS 'Pre-reorg list tables + reorg bookkeeping. Drop 30 days after cutover.';
+COMMENT ON SCHEMA ref IS 'Seeded third-party catalog data (Pokemon, CoD tracker definitions). Read-only in the GUI; seeders own it.';
+COMMENT ON SCHEMA games IS 'Stan''s own game progress.';
+
+-- exact row counts of every public table before anything moves
+CREATE TABLE legacy.reorg_counts_before (table_name text PRIMARY KEY, n bigint NOT NULL);
+DO $$
+DECLARE t text; c bigint;
+BEGIN
+  FOR t IN SELECT tablename FROM pg_tables WHERE schemaname = 'public' LOOP
+    EXECUTE format('SELECT count(*) FROM public.%I', t) INTO c;
+    INSERT INTO legacy.reorg_counts_before VALUES (t, c);
+  END LOOP;
+END $$;
+
+CREATE TABLE legacy.reorg_table_map (
+  old_name   text PRIMARY KEY,
+  old_prefix text NOT NULL,      -- prefix used by its index/constraint/sequence names
+  new_schema text NOT NULL,
+  new_name   text NOT NULL,
+  UNIQUE (new_schema, new_name)
+);
+INSERT INTO legacy.reorg_table_map (old_name, old_prefix, new_schema, new_name) VALUES
+ ('user','user','auth','user'), ('session','session','auth','session'),
+ ('account','account','auth','account'), ('verification','verification','auth','verification'),
+ ('money_accounts','money_accounts','money','accounts'), ('money_transactions','money_transactions','money','transactions'),
+ ('money_recurring','money_recurring','money','recurring'), ('money_forecasts','money_forecasts','money','forecasts'),
+ ('money_insurances','money_insurances','money','insurances'), ('money_wishlist','money_wishlist','money','wishlist'),
+ ('money_projection_settings','money_projection_settings','money','projection_settings'),
+ ('money_utility_settings','money_utility_settings','money','utility_settings'),
+ ('money_utility_readings','money_utility_readings','money','utility_readings'),
+ ('house_listings','house_listings','house','listings'), ('house_price_history','house_price_history','house','price_history'),
+ ('house_searches','house_searches','house','searches'), ('house_worker_runs','house_worker_runs','house','worker_runs'),
+ ('house_alert_rules','house_alert_rules','house','alert_rules'),
+ ('pokemon','pokemon','ref','pokemon'), ('games','game','ref','pokemon_games'),
+ ('pokemon_game_entries','pokemon_game_entry','ref','pokemon_game_entries'),
+ ('pokemon_locations','pokemon_locations','ref','pokemon_locations'), ('pokemon_encounters','pokemon_encounters','ref','pokemon_encounters'),
+ ('pokemon_evolutions','pokemon_evolutions','ref','pokemon_evolutions'), ('pokemon_dex_numbers','pokemon_dex_numbers','ref','pokemon_dex_numbers'),
+ ('pokemon_moves','pokemon_moves','ref','pokemon_moves'), ('pokemon_learnsets','pokemon_learnsets','ref','pokemon_learnsets'),
+ ('pokemon_research','pokemon_research','ref','pokemon_research'), ('pokemon_game_research','pokemon_game_research','ref','pokemon_game_research'),
+ ('tracker_games','tracker_games','ref','tracker_games'), ('tracker_items','tracker_items','ref','tracker_items'),
+ ('tracker_challenges','tracker_challenges','ref','tracker_challenges'),
+ ('user_games','user_game','games','catch_em_all_games'), ('user_entries','user_entry','games','catch_em_all_entries'),
+ ('catch_em_all_settings','catch_em_all_settings','games','catch_em_all_settings'),
+ ('pokemon_journeys','pokemon_journeys','games','pokemon_journeys'), ('pokemon_seen','pokemon_seen','games','pokemon_seen'),
+ ('pokemon_catches','pokemon_catches','games','pokemon_catches'), ('pokemon_milestones','pokemon_milestones','games','pokemon_milestones'),
+ ('tracker_progress','tracker_progress','games','tracker_progress'), ('tracker_ranks','tracker_ranks','games','tracker_ranks'),
+ ('tracker_weapon_ranks','tracker_weapon_ranks','games','tracker_weapon_ranks'),
+ ('tracker_challenge_progress','tracker_challenge_progress','games','tracker_challenge_progress'),
+ ('osu_entries','osu_entries','games','osu_entries'),
+ ('cs_market_items','cs_market_items','cs','items'), ('cs_price_observations','cs_price_observations','cs','price_observations'),
+ ('cs_item_dimensions','cs_item_dimensions','cs','item_dimensions'), ('cs_price_streams','cs_price_streams','cs','price_streams'),
+ ('animals','animals','animaldex','animals'), ('sightings','sightings','animaldex','sightings'),
+ ('photos','photos','animaldex','sighting_photos'),
+ ('blog_articles','blog_articles','site','blog_articles'), ('tasks','tasks','site','tasks'),
+ ('topics','topics','site','topics'), ('tasks_to_topics','tasks_to_topics','site','task_topics'),
+ ('lists','lists','legacy','lists'), ('list_items','list_items','legacy','list_items'),
+ ('list_item_completions','list_item_completions','legacy','list_item_completions');
+
+DO $$
+DECLARE
+  missing text;
+BEGIN
+  SELECT string_agg(tablename, ', ') INTO missing FROM pg_tables
+   WHERE schemaname = 'public' AND tablename NOT IN (SELECT old_name FROM legacy.reorg_table_map);
+  IF missing IS NOT NULL THEN RAISE EXCEPTION 'unmapped public tables: %', missing; END IF;
+END $$;
+
+-- types + shared trigger function
+ALTER TYPE public.availability SET SCHEMA ref;
+ALTER TYPE public.blog_article_status SET SCHEMA site;
+ALTER FUNCTION public.site_touch_updated_at() SET SCHEMA meta;
+ALTER FUNCTION meta.site_touch_updated_at() RENAME TO touch_updated_at;
+
+-- Duplicate indexes (hand SQL + Drizzle both created one). Keep Drizzle's `_index` / constraint-backed `_key`.
+DROP INDEX public.games_source_id_unique;              -- dup of constraint games_source_id_key
+DROP INDEX public.pokemon_number_unique;               -- dup of constraint pokemon_number_key
+DROP INDEX public.catch_em_all_settings_user_id_unique;-- dup of constraint ..._user_id_key
+DROP INDEX public.money_accounts_user_id_idx;
+DROP INDEX public.money_forecasts_user_date_idx;
+DROP INDEX public.money_insurances_user_id_idx;
+DROP INDEX public.money_recurring_user_id_idx;
+DROP INDEX public.money_transactions_account_id_idx;
+DROP INDEX public.money_transactions_user_date_idx;
+DROP INDEX public.money_wishlist_user_id_idx;
+DROP INDEX public.lists_slug_unique;                   -- dup of lists_slug_key (legacy table, tidy anyway)
+
+-- Move + rename tables; rename their constraints, indexes and owned sequences to the new prefix.
+CREATE FUNCTION pg_temp.reprefix(name text, old_name text, old_prefix text, new_name text) RETURNS text
+LANGUAGE sql IMMUTABLE AS $$
+  SELECT CASE
+    WHEN name LIKE old_name   || '\_%' THEN new_name || substr(name, length(old_name) + 1)
+    WHEN name LIKE old_prefix || '\_%' THEN new_name || substr(name, length(old_prefix) + 1)
+    ELSE NULL END
+$$;
+
+DO $$
+DECLARE
+  m record; r record; tbl regclass; newn text;
+BEGIN
+  FOR m IN SELECT * FROM legacy.reorg_table_map ORDER BY old_name LOOP
+    EXECUTE format('ALTER TABLE public.%I SET SCHEMA %I', m.old_name, m.new_schema);
+    IF m.old_name <> m.new_name THEN
+      EXECUTE format('ALTER TABLE %I.%I RENAME TO %I', m.new_schema, m.old_name, m.new_name);
+    END IF;
+    tbl := format('%I.%I', m.new_schema, m.new_name)::regclass;
+    -- constraints (renaming a pk/unique constraint renames its index too)
+    FOR r IN SELECT conname AS n FROM pg_constraint WHERE conrelid = tbl LOOP
+      newn := pg_temp.reprefix(r.n, m.old_name, m.old_prefix, m.new_name);
+      IF newn IS NOT NULL AND newn <> r.n THEN
+        EXECUTE format('ALTER TABLE %s RENAME CONSTRAINT %I TO %I', tbl, r.n, newn);
+      END IF;
+    END LOOP;
+    -- remaining plain indexes
+    FOR r IN SELECT i.relname AS n FROM pg_index x JOIN pg_class i ON i.oid = x.indexrelid
+              WHERE x.indrelid = tbl
+                AND NOT EXISTS (SELECT 1 FROM pg_constraint c WHERE c.conindid = x.indexrelid AND c.conrelid = tbl) LOOP
+      newn := pg_temp.reprefix(r.n, m.old_name, m.old_prefix, m.new_name);
+      IF newn IS NOT NULL AND newn <> r.n THEN
+        EXECUTE format('ALTER INDEX %I.%I RENAME TO %I', m.new_schema, r.n, newn);
+      END IF;
+    END LOOP;
+    -- owned sequences
+    FOR r IN SELECT s.relname AS n FROM pg_class s JOIN pg_depend d ON d.objid = s.oid AND d.deptype IN ('a','i')
+              WHERE s.relkind = 'S' AND d.refobjid = tbl LOOP
+      newn := pg_temp.reprefix(r.n, m.old_name, m.old_prefix, m.new_name);
+      IF newn IS NOT NULL AND newn <> r.n THEN
+        EXECUTE format('ALTER SEQUENCE %I.%I RENAME TO %I', m.new_schema, r.n, newn);
+      END IF;
+    END LOOP;
+  END LOOP;
+  IF EXISTS (SELECT 1 FROM pg_tables WHERE schemaname = 'public') THEN
+    RAISE EXCEPTION 'public still has tables';
+  END IF;
+END $$;
+RESET ROLE;

db/reorg/03_fixes.sql

@@ -0,0 +1,32 @@
+-- 03_fixes.sql: missing PKs, type fixes, CHECKs, updated_at columns.
+SET ROLE personal;
+
+-- missing primary keys (promote the existing unique indexes)
+ALTER TABLE cs.item_dimensions ADD CONSTRAINT item_dimensions_pkey PRIMARY KEY USING INDEX item_dimensions_unique_idx;
+ALTER TABLE cs.price_streams   ADD CONSTRAINT price_streams_pkey   PRIMARY KEY USING INDEX price_streams_unique_idx;
+ALTER TABLE house.price_history ADD CONSTRAINT price_history_pkey PRIMARY KEY (listing_id, observed_at);
+DROP INDEX house.price_history_listing_idx;   -- now covered by the PK
+
+-- include_recurring was an int used as a boolean (app code: charts.ts `!== 0`)
+ALTER TABLE money.projection_settings ALTER COLUMN include_recurring DROP DEFAULT;
+ALTER TABLE money.projection_settings ALTER COLUMN include_recurring TYPE boolean USING include_recurring <> 0;
+ALTER TABLE money.projection_settings ALTER COLUMN include_recurring SET DEFAULT true;
+
+-- osu numbers stored as text (0 rows in prod)
+ALTER TABLE games.osu_entries ALTER COLUMN pp TYPE numeric USING nullif(pp, '')::numeric;
+ALTER TABLE games.osu_entries ALTER COLUMN accuracy TYPE numeric USING nullif(replace(accuracy, '%', ''), '')::numeric;
+ALTER TABLE games.osu_entries ALTER COLUMN rate DROP DEFAULT;
+ALTER TABLE games.osu_entries ALTER COLUMN rate TYPE numeric(4,2) USING nullif(rate, '')::numeric;
+ALTER TABLE games.osu_entries ALTER COLUMN rate SET DEFAULT 1.00;
+
+-- CHECKs matching the values the app already enforces (src/lib/server/money-tracker.ts, money page)
+ALTER TABLE money.recurring        ADD CONSTRAINT recurring_cadence_check  CHECK (cadence IN ('weekly','monthly','yearly'));
+ALTER TABLE money.insurances       ADD CONSTRAINT insurances_cadence_check CHECK (cadence IN ('weekly','monthly','yearly'));
+ALTER TABLE money.accounts         ADD CONSTRAINT accounts_kind_check      CHECK (kind IN ('spendable','investment'));
+ALTER TABLE money.utility_settings ADD CONSTRAINT utility_settings_kind_check CHECK (kind IN ('electricity','gas','water'));
+ALTER TABLE money.utility_readings ADD CONSTRAINT utility_readings_kind_check CHECK (kind IN ('electricity','gas','water'));
+ALTER TABLE money.projection_settings ADD CONSTRAINT projection_settings_contribution_mode_check CHECK (contribution_mode IN ('excess','fixed'));
+
+-- user-editable tables without updated_at
+ALTER TABLE house.alert_rules ADD COLUMN updated_at timestamptz NOT NULL DEFAULT now();
+RESET ROLE;

db/reorg/04_meta.sql

@@ -0,0 +1,224 @@
+-- 04_meta.sql: GUI registry (meta.tables / meta.columns), runtime-DDL functions, schema `lists`.
+SET ROLE personal;
+
+CREATE TABLE meta.tables (
+  id            integer GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+  schema_name   text NOT NULL,
+  table_name    text NOT NULL,
+  slug          text NOT NULL UNIQUE CHECK (slug ~ '^[a-z0-9][a-z0-9-]{0,62}$'),
+  display_name  text NOT NULL,
+  description   text,
+  icon          text,
+  picture_url   text,
+  kind          text NOT NULL CHECK (kind IN ('list','core','ref')),
+  editable      boolean NOT NULL DEFAULT true,
+  has_done      boolean NOT NULL DEFAULT false,
+  default_sort  text,
+  sort_order    integer NOT NULL DEFAULT 0,
+  archived_at   timestamptz,
+  created_at    timestamptz NOT NULL DEFAULT now(),
+  updated_at    timestamptz NOT NULL DEFAULT now(),
+  UNIQUE (schema_name, table_name)
+);
+COMMENT ON TABLE meta.tables IS 'One row per GUI-visible table (runtime lists + core + ref). Structure truth stays in pg_catalog; this is presentation.';
+
+CREATE TABLE meta.columns (
+  id          integer GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+  table_id    integer NOT NULL REFERENCES meta.tables(id) ON DELETE CASCADE,
+  column_name text NOT NULL,
+  label       text,
+  ui_type     text NOT NULL CHECK (ui_type IN ('text','longtext','url','image','number','cents','date','datetime','bool','select','multiselect','fk','json')),
+  options     jsonb NOT NULL DEFAULT '{}'::jsonb,
+  position    integer NOT NULL DEFAULT 0,
+  hidden      boolean NOT NULL DEFAULT false,
+  help_text   text,
+  created_at  timestamptz NOT NULL DEFAULT now(),
+  updated_at  timestamptz NOT NULL DEFAULT now(),
+  UNIQUE (table_id, column_name)
+);
+CREATE INDEX columns_table_id_index ON meta.columns (table_id);
+
+CREATE TRIGGER touch_updated_at BEFORE UPDATE ON meta.tables  FOR EACH ROW EXECUTE FUNCTION meta.touch_updated_at();
+CREATE TRIGGER touch_updated_at BEFORE UPDATE ON meta.columns FOR EACH ROW EXECUTE FUNCTION meta.touch_updated_at();
+
+RESET ROLE;
+-- schema for runtime lists, owned by personal_ddl (not by the migration owner)
+CREATE SCHEMA lists AUTHORIZATION personal_ddl;
+COMMENT ON SCHEMA lists IS 'Runtime-created user lists. Never touched by Drizzle migrations (excluded via schemaFilter). Create/alter only via meta.* functions.';
+GRANT USAGE, CREATE ON SCHEMA meta TO personal_ddl;
+GRANT SELECT, INSERT, UPDATE, DELETE ON meta.tables, meta.columns TO personal_ddl;
+SET ROLE personal_ddl;
+
+-- guess a ui_type from a column's catalog type (format_type output) and name
+CREATE FUNCTION meta.guess_ui_type(p_type text, p_col text, p_is_enum boolean DEFAULT false) RETURNS text
+LANGUAGE sql IMMUTABLE SET search_path = pg_catalog AS $$
+  SELECT CASE
+    WHEN p_is_enum THEN 'select'
+    WHEN p_type LIKE '%[]' THEN 'multiselect'
+    WHEN p_col IN ('picture_url','image_url','icon_url','image') THEN 'image'
+    WHEN p_col LIKE '%\_url' OR p_col = 'url' THEN 'url'
+    WHEN p_col LIKE '%\_cents' THEN 'cents'
+    WHEN p_col IN ('notes','description','content','note') THEN 'longtext'
+    WHEN p_type IN ('smallint','integer','bigint','real','double precision') OR p_type LIKE 'numeric%' THEN 'number'
+    WHEN p_type = 'boolean' THEN 'bool'
+    WHEN p_type = 'date' THEN 'date'
+    WHEN p_type LIKE 'timestamp%' THEN 'datetime'
+    WHEN p_type IN ('json','jsonb') THEN 'json'
+    ELSE 'text' END
+$$;
+
+-- reconcile meta.columns with pg_catalog for one table (or all registered tables).
+-- Uses pg_attribute (not information_schema, which hides tables the caller has no grants on).
+CREATE FUNCTION meta.sync(p_table_id integer DEFAULT NULL) RETURNS integer
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE k integer;
+BEGIN
+  IF to_regclass('pg_temp._meta_cols') IS NULL THEN CREATE TEMP TABLE _meta_cols ON COMMIT DROP AS SELECT 1::integer AS table_id, ''::text AS col, ''::text AS typ, false AS is_enum, 0::integer AS pos, NULL::jsonb AS vals LIMIT 0; END IF;
+  TRUNCATE _meta_cols;
+  INSERT INTO _meta_cols
+  SELECT t.id, a.attname, format_type(a.atttypid, a.atttypmod), ty.typtype = 'e', a.attnum,
+         CASE WHEN ty.typtype = 'e' THEN (SELECT jsonb_agg(e.enumlabel ORDER BY e.enumsortorder) FROM pg_enum e WHERE e.enumtypid = ty.oid) END
+    FROM meta.tables t
+    JOIN pg_class c ON c.relname = t.table_name
+    JOIN pg_namespace n ON n.oid = c.relnamespace AND n.nspname = t.schema_name
+    JOIN pg_attribute a ON a.attrelid = c.oid AND a.attnum > 0 AND NOT a.attisdropped
+    JOIN pg_type ty ON ty.oid = a.atttypid
+   WHERE p_table_id IS NULL OR t.id = p_table_id;
+  DELETE FROM meta.columns mc
+   WHERE (p_table_id IS NULL OR mc.table_id = p_table_id)
+     AND NOT EXISTS (SELECT 1 FROM _meta_cols x WHERE x.table_id = mc.table_id AND x.col = mc.column_name);
+  INSERT INTO meta.columns (table_id, column_name, label, ui_type, options, position, hidden)
+  SELECT x.table_id, x.col, initcap(replace(x.col, '_', ' ')), meta.guess_ui_type(x.typ, x.col, x.is_enum),
+         CASE WHEN x.vals IS NOT NULL THEN jsonb_build_object('values', x.vals) ELSE '{}'::jsonb END,
+         x.pos, x.col IN ('id','created_at','updated_at','user_id','sort_order')
+    FROM _meta_cols x
+  ON CONFLICT (table_id, column_name) DO NOTHING;
+  GET DIAGNOSTICS k = ROW_COUNT;
+  RETURN k;
+END $$;
+
+-- allowed column types for runtime lists -> SQL type
+CREATE FUNCTION meta.sql_type(p_ui_type text) RETURNS text
+LANGUAGE sql IMMUTABLE SET search_path = pg_catalog AS $$
+  SELECT CASE p_ui_type
+    WHEN 'text' THEN 'text' WHEN 'longtext' THEN 'text' WHEN 'url' THEN 'text' WHEN 'image' THEN 'text'
+    WHEN 'select' THEN 'text' WHEN 'number' THEN 'numeric' WHEN 'cents' THEN 'integer'
+    WHEN 'date' THEN 'date' WHEN 'datetime' THEN 'timestamptz' WHEN 'bool' THEN 'boolean'
+    WHEN 'multiselect' THEN 'text[]' WHEN 'json' THEN 'jsonb' END
+$$;
+
+CREATE FUNCTION meta.assert_ident(p text) RETURNS void
+LANGUAGE plpgsql IMMUTABLE SET search_path = pg_catalog AS $$
+BEGIN
+  IF p IS NULL OR p !~ '^[a-z][a-z0-9_]{0,62}$' THEN
+    RAISE EXCEPTION 'invalid identifier: %', p USING ERRCODE = '22023';
+  END IF;
+END $$;
+
+-- add one column to a runtime list. p_col: {"name","ui_type","label"?,"options"?,"default"?}
+CREATE FUNCTION meta.add_column(p_slug text, p_col jsonb) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE
+  t meta.tables; c text := p_col->>'name'; u text := coalesce(p_col->>'ui_type', 'text');
+  st text := meta.sql_type(u); vals jsonb := p_col->'options'->'values'; ddl text;
+BEGIN
+  SELECT * INTO t FROM meta.tables WHERE slug = p_slug AND kind = 'list';
+  IF NOT FOUND THEN RAISE EXCEPTION 'no runtime list %', p_slug; END IF;
+  PERFORM meta.assert_ident(c);
+  IF c IN ('id','name','notes','picture_url','done_at','sort_order','created_at','updated_at') THEN
+    RAISE EXCEPTION 'column % is a standard column', c; END IF;
+  IF st IS NULL THEN RAISE EXCEPTION 'unsupported ui_type %', u; END IF;
+  ddl := format('ALTER TABLE lists.%I ADD COLUMN %I %s', t.table_name, c, st);
+  IF p_col ? 'default' THEN ddl := ddl || format(' DEFAULT %L', p_col->>'default'); END IF;
+  IF u = 'select' AND jsonb_typeof(vals) = 'array' THEN
+    ddl := ddl || format(' CONSTRAINT %I CHECK (%I IN (%s))', t.table_name || '_' || c || '_check', c,
+                         (SELECT string_agg(quote_literal(v), ',') FROM jsonb_array_elements_text(vals) v));
+  END IF;
+  EXECUTE ddl;
+  INSERT INTO meta.columns (table_id, column_name, label, ui_type, options, position)
+  VALUES (t.id, c, coalesce(p_col->>'label', initcap(replace(c, '_', ' '))), u,
+          coalesce(p_col->'options', '{}'::jsonb),
+          (SELECT coalesce(max(position), 0) + 1 FROM meta.columns WHERE table_id = t.id));
+END $$;
+
+-- create a runtime list table with the standard columns + extras
+CREATE FUNCTION meta.create_list(
+  p_slug text, p_table text, p_display_name text,
+  p_has_done boolean DEFAULT true, p_columns jsonb DEFAULT '[]'::jsonb,
+  p_picture_url text DEFAULT NULL, p_description text DEFAULT NULL, p_icon text DEFAULT NULL,
+  p_sort_order integer DEFAULT 0
+) RETURNS integer
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE tid integer; col jsonb;
+BEGIN
+  PERFORM meta.assert_ident(p_table);
+  IF EXISTS (SELECT 1 FROM pg_tables WHERE schemaname = 'lists' AND tablename = p_table) THEN
+    RAISE EXCEPTION 'lists.% already exists', p_table; END IF;
+  EXECUTE format($f$CREATE TABLE lists.%1$I (
+      id          integer GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+      name        text NOT NULL CHECK (btrim(name) <> ''),
+      notes       text,
+      picture_url text,
+      %2$s
+      sort_order  integer NOT NULL DEFAULT 0,
+      created_at  timestamptz NOT NULL DEFAULT now(),
+      updated_at  timestamptz NOT NULL DEFAULT now())$f$,
+    p_table, CASE WHEN p_has_done THEN 'done_at timestamptz,' ELSE '' END);
+  EXECUTE format('CREATE TRIGGER touch_updated_at BEFORE UPDATE ON lists.%I FOR EACH ROW EXECUTE FUNCTION meta.touch_updated_at()', p_table);
+  INSERT INTO meta.tables (schema_name, table_name, slug, display_name, description, icon, picture_url, kind, editable, has_done, default_sort, sort_order)
+  VALUES ('lists', p_table, p_slug, p_display_name, p_description, p_icon, p_picture_url, 'list', true, p_has_done,
+          CASE WHEN p_has_done THEN 'done_at nulls first, sort_order, name' ELSE 'sort_order, name' END, p_sort_order)
+  RETURNING id INTO tid;
+  PERFORM meta.sync(tid);
+  UPDATE meta.columns SET label = 'Done', ui_type = 'datetime' WHERE table_id = tid AND column_name = 'done_at';
+  FOR col IN SELECT * FROM jsonb_array_elements(p_columns) LOOP
+    PERFORM meta.add_column(p_slug, col);
+  END LOOP;
+  RETURN tid;
+END $$;
+
+CREATE FUNCTION meta.rename_column(p_slug text, p_old text, p_new text) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE t meta.tables;
+BEGIN
+  SELECT * INTO t FROM meta.tables WHERE slug = p_slug AND kind = 'list';
+  IF NOT FOUND THEN RAISE EXCEPTION 'no runtime list %', p_slug; END IF;
+  PERFORM meta.assert_ident(p_new);
+  IF p_old IN ('id','name','done_at','created_at','updated_at') THEN RAISE EXCEPTION 'standard column'; END IF;
+  EXECUTE format('ALTER TABLE lists.%I RENAME COLUMN %I TO %I', t.table_name, p_old, p_new);
+  UPDATE meta.columns SET column_name = p_new WHERE table_id = t.id AND column_name = p_old;
+END $$;
+
+CREATE FUNCTION meta.drop_column(p_slug text, p_col text) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE t meta.tables;
+BEGIN
+  SELECT * INTO t FROM meta.tables WHERE slug = p_slug AND kind = 'list';
+  IF NOT FOUND THEN RAISE EXCEPTION 'no runtime list %', p_slug; END IF;
+  IF p_col IN ('id','name','notes','picture_url','done_at','sort_order','created_at','updated_at') THEN
+    RAISE EXCEPTION 'standard column'; END IF;
+  EXECUTE format('ALTER TABLE lists.%I DROP COLUMN %I', t.table_name, p_col);
+  DELETE FROM meta.columns WHERE table_id = t.id AND column_name = p_col;
+END $$;
+
+CREATE FUNCTION meta.archive_list(p_slug text) RETURNS void
+LANGUAGE sql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+  UPDATE meta.tables SET archived_at = now() WHERE slug = p_slug AND kind = 'list' AND archived_at IS NULL
+$$;
+
+-- real DROP only after 7 days in the archive (backups cover the rest)
+CREATE FUNCTION meta.drop_list(p_slug text) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER SET search_path = pg_catalog, meta AS $$
+DECLARE t meta.tables;
+BEGIN
+  SELECT * INTO t FROM meta.tables WHERE slug = p_slug AND kind = 'list';
+  IF NOT FOUND THEN RAISE EXCEPTION 'no runtime list %', p_slug; END IF;
+  IF t.archived_at IS NULL OR t.archived_at > now() - interval '7 days' THEN
+    RAISE EXCEPTION 'archive % first and wait 7 days', p_slug; END IF;
+  EXECUTE format('DROP TABLE lists.%I', t.table_name);
+  DELETE FROM meta.tables WHERE id = t.id;
+END $$;
+
+RESET ROLE;
+REVOKE EXECUTE ON ALL FUNCTIONS IN SCHEMA meta FROM PUBLIC;
+GRANT EXECUTE ON FUNCTION meta.touch_updated_at() TO PUBLIC;   -- trigger fn, must stay callable

db/reorg/05_lists.sql

@@ -0,0 +1,176 @@
+-- 05_lists.sql: the 22 legacy lists become real tables in schema `lists`.
+-- legacy.* stays untouched (rollback reference); typo fixes + dedupes are applied to a temp working copy.
+-- Runs as superuser (inserts into personal_ddl-owned tables); tables are created via meta.create_list.
+
+CREATE TEMP TABLE src ON COMMIT DROP AS
+SELECT i.id, i.list_id, btrim(i.name) AS name, nullif(btrim(i.description), '') AS notes, i.picture_url,
+       c.created_at AS done_at, i.created_at, i.updated_at
+  FROM legacy.list_items i
+  LEFT JOIN legacy.list_item_completions c ON c.item_id = i.id;
+
+CREATE TEMP TABLE fix_log (item_id integer, list_id integer, action text, before text, after text) ON COMMIT DROP;
+
+-- ---- dedupes: keep the lower id, carry over done_at / picture / notes, delete the other ----
+CREATE TEMP TABLE dedupe (keep_id integer, drop_id integer, new_name text) ON COMMIT DROP;
+INSERT INTO dedupe VALUES
+  (165, 323, NULL),                                                  -- places: New York x2
+  (168, 331, NULL),                                                  -- places: France x2
+  (156, 271, 'Advanced Programming in the UNIX Environment'),        -- books: "...UNIX® Environment" dup
+  (139, 287, 'Building Knowledge Graphs: A Practitioner''s Guide');  -- books: short + full title
+UPDATE src k SET done_at = coalesce(k.done_at, d.done_at), picture_url = coalesce(k.picture_url, d.picture_url),
+                 notes = coalesce(k.notes, d.notes), name = coalesce(x.new_name, k.name)
+  FROM dedupe x JOIN src d ON d.id = x.drop_id WHERE k.id = x.keep_id;
+INSERT INTO fix_log SELECT s.id, s.list_id, 'dedupe-drop', s.name, 'merged into ' || x.keep_id FROM src s JOIN dedupe x ON x.drop_id = s.id;
+DELETE FROM src WHERE id IN (SELECT drop_id FROM dedupe);
+
+-- ---- typo / naming fixes ----
+CREATE TEMP TABLE renames (id integer PRIMARY KEY, new_name text NOT NULL) ON COMMIT DROP;
+INSERT INTO renames VALUES
+  -- vinyls (kept as "Artist - Album" here; split below)
+  (343, 'Pearl Jam - Ten'), (346, 'Amy Winehouse - Back to Black'),
+  (27,  'Slipknot - Vol. 3: (The Subliminal Verses)'), (6, 'Them Crooked Vultures - Them Crooked Vultures'),
+  (39,  'Various Artists - Katamari Damacy (OST)'),
+  (40,  'Gojira - The Way of All Flesh'), (370, 'Gojira - The Link'),
+  (80,  'Deftones - Private Music'), (308, 'Kendrick Lamar - DAMN.'),
+  -- movies/shows
+  (98, 'Kim''s Convenience'), (394, 'Azuki-chan'), (111, 'A Minecraft Movie'),
+  -- books
+  (150, 'Domain-Driven Design: Tackling Complexity in the Heart of Software'),
+  (285, 'Molecular Biology of the Cell'), (288, 'Building Microservices'),
+  (147, 'Scrum: The Art of Doing Twice the Work in Half the Time'),
+  -- places
+  (325, 'Curaçao'),
+  -- cars
+  (322, 'Mazda MX-5 Miata'),
+  -- leetcode
+  (217, 'Two Sum'),
+  -- foods
+  (221, 'Sotteok Sotteok'), (230, 'Bibim Naengmyeon'), (240, 'Doenjang Jjigae'), (241, 'Kimchi Jjigae'),
+  -- papers
+  (190, 'Order Matters: Sequence to Sequence for Sets'),
+  (200, 'GPipe: Easy Scaling with Micro-Batch Pipeline Parallelism'),
+  (203, 'Attention Is All You Need'),
+  (201, 'Deep Speech 2: End-to-End Speech Recognition in English and Mandarin'),
+  -- games
+  (385, 'Chrono Trigger');
+DO $$ BEGIN
+  IF (SELECT count(*) FROM renames r JOIN src s ON s.id = r.id) <> (SELECT count(*) FROM renames) THEN
+    RAISE EXCEPTION 'rename list references missing item ids'; END IF;
+END $$;
+INSERT INTO fix_log SELECT s.id, s.list_id, 'rename', s.name, r.new_name FROM src s JOIN renames r ON r.id = s.id WHERE s.name <> r.new_name;
+UPDATE src s SET name = r.new_name FROM renames r WHERE r.id = s.id;
+
+-- helper: copy standard columns for one list into lists.<t> and return the row count
+CREATE FUNCTION pg_temp.copy_std(p_list integer, p_table text, p_has_done boolean) RETURNS bigint LANGUAGE plpgsql AS $$
+DECLARE n bigint;
+BEGIN
+  EXECUTE format('INSERT INTO lists.%I (id, name, notes, picture_url, %s sort_order, created_at, updated_at)
+                  SELECT id, name, notes, picture_url, %s row_number() OVER (ORDER BY id), created_at, updated_at
+                    FROM src WHERE list_id = %s', p_table,
+                 CASE WHEN p_has_done THEN 'done_at,' ELSE '' END,
+                 CASE WHEN p_has_done THEN 'done_at,' ELSE '' END, p_list);
+  GET DIAGNOSTICS n = ROW_COUNT;
+  EXECUTE format('SELECT setval(pg_get_serial_sequence(%L, ''id''), (SELECT max(id) FROM lists.%I))', 'lists.' || p_table, p_table);
+  RETURN n;
+END $$;
+
+CREATE TEMP TABLE list_map (list_id integer PRIMARY KEY, tbl text NOT NULL, has_done boolean NOT NULL, cols jsonb NOT NULL) ON COMMIT DROP;
+INSERT INTO list_map VALUES
+ (1,  'vinyls',             true,  '[{"name":"artist","ui_type":"text"}]'),
+ (2,  'watchlist',          true,  '[{"name":"kind","ui_type":"select","options":{"values":["movie","show","anime","documentary"]}}]'),
+ (3,  'books',              true,  '[{"name":"author","ui_type":"text"}]'),
+ (4,  'side_projects',      false, '[{"name":"status","ui_type":"select","default":"idea","options":{"values":["idea","active","paused","done","dropped"]}}]'),
+ (5,  'artists_to_see',     true,  '[]'),
+ (6,  'osu_maps',           true,  '[{"name":"mods","ui_type":"text"},{"name":"goal","ui_type":"select","options":{"values":["pass","fc"]}}]'),
+ (7,  'animals_to_spot',    true,  '[]'),
+ (8,  'vehicles_to_spot',   true,  '[{"name":"kind","ui_type":"select","default":"car","options":{"values":["car","train","plane"]}}]'),
+ (9,  'leetcode',           true,  '[{"name":"kind","ui_type":"select","default":"problem","options":{"values":["problem","topic"]}},{"name":"url","ui_type":"url"}]'),
+ (10, 'restaurants',        true,  '[{"name":"city","ui_type":"text"}]'),
+ (11, 'recipes',            true,  '[{"name":"cuisine","ui_type":"text"},{"name":"recipe_url","ui_type":"url"}]'),
+ (12, 'places',             true,  '[{"name":"kind","ui_type":"select","options":{"values":["country","region","city","island"]}}]'),
+ (13, 'papers',             false, '[{"name":"authors","ui_type":"text"},{"name":"year","ui_type":"number"},{"name":"url","ui_type":"url"}]'),
+ (14, 'piano_songs',        true,  '[{"name":"artist","ui_type":"text"},{"name":"reference_url","ui_type":"url"}]'),
+ (15, 'games_to_complete',  true,  '[{"name":"platform","ui_type":"text"}]'),
+ (22, 'things_to_learn',    true,  '[]'),
+ (23, 'build_from_scratch', true,  '[]'),
+ (24, 'tools_to_try',       true,  '[{"name":"url","ui_type":"url"}]'),
+ (25, 'setup_upgrades',     true,  '[]'),
+ (26, 'bucket_list',        true,  '[]'),
+ (27, 'docs_to_read',       true,  '[{"name":"rfc_number","ui_type":"number"},{"name":"topic","ui_type":"text"},{"name":"starter_pack","ui_type":"bool","default":"false"},{"name":"url","ui_type":"url"}]'),
+ (28, 'banger_songs',       false, '[{"name":"artist","ui_type":"text"},{"name":"kind","ui_type":"select","default":"song","options":{"values":["song","playlist"]}},{"name":"url","ui_type":"url"}]');
+
+DO $$ BEGIN
+  IF EXISTS (SELECT 1 FROM legacy.lists l WHERE NOT EXISTS (SELECT 1 FROM list_map m WHERE m.list_id = l.id))
+     OR EXISTS (SELECT 1 FROM list_map m JOIN legacy.lists l ON l.id = m.list_id WHERE l.is_progress <> m.has_done AND m.list_id NOT IN (4)) THEN
+    RAISE EXCEPTION 'list_map does not cover legacy.lists / has_done mismatch';
+  END IF;
+END $$;
+
+-- create tables (as personal_ddl via SECURITY DEFINER) and copy standard columns
+DO $$
+DECLARE m record; l record; n bigint;
+BEGIN
+  FOR m IN SELECT * FROM list_map ORDER BY list_id LOOP
+    SELECT * INTO l FROM legacy.lists WHERE id = m.list_id;
+    PERFORM meta.create_list(l.slug, m.tbl, l.name, m.has_done, m.cols, l.picture_url, NULL, NULL, m.list_id);
+    UPDATE meta.tables SET created_at = l.created_at WHERE slug = l.slug;
+    n := pg_temp.copy_std(m.list_id, m.tbl, m.has_done);
+    RAISE NOTICE 'lists.%: % rows', m.tbl, n;
+  END LOOP;
+END $$;
+
+-- parsing must not bump updated_at: suppress user triggers for these UPDATEs (superuser only)
+SET LOCAL session_replication_role = replica;
+-- ---- per-list parsing into the extra columns (only where it parses cleanly) ----
+-- vinyls: "Artist - Album"
+UPDATE lists.vinyls SET artist = split_part(name, ' - ', 1), name = substr(name, strpos(name, ' - ') + 3)
+ WHERE strpos(name, ' - ') > 0;
+-- books: "Author - Title" only for the 3 personal-name ones (others contain ':' subtitles, never ' - ')
+UPDATE lists.books SET author = split_part(name, ' - ', 1), name = substr(name, strpos(name, ' - ') + 3)
+ WHERE id IN (28, 29, 306);
+-- side projects: everything starts as an idea
+UPDATE lists.side_projects SET status = 'idea';
+-- osu: trailing mods
+UPDATE lists.osu_maps SET name = 'Lonely Go', mods = 'HR' WHERE id = 310;
+UPDATE lists.osu_maps SET name = 'Imagination', mods = 'HR' WHERE id = 317;
+-- vehicles: all current entries are cars
+UPDATE lists.vehicles_to_spot SET kind = 'car';
+-- leetcode
+UPDATE lists.leetcode SET kind = CASE WHEN name IN ('Two Sum','3Sum') THEN 'problem' ELSE 'topic' END;
+UPDATE lists.leetcode SET url = 'https://leetcode.com/problems/two-sum/' WHERE name = 'Two Sum';
+UPDATE lists.leetcode SET url = 'https://leetcode.com/problems/3sum/' WHERE name = '3Sum';
+-- restaurants: "Name (City)"
+UPDATE lists.restaurants SET city = substring(name from '\(([^)]+)\)\s*$'), name = btrim(regexp_replace(name, '\s*\([^)]+\)\s*$', ''))
+ WHERE name ~ '\([^)]+\)\s*$';
+-- recipes
+UPDATE lists.recipes SET cuisine = CASE WHEN name = 'Yogurt, honey & cruesli' THEN NULL ELSE 'korean' END;
+-- places
+UPDATE lists.places SET kind = CASE
+  WHEN name IN ('London','Seattle','Miami','Dubai','New York') THEN 'city'
+  WHEN name IN ('California','Texas') THEN 'region'
+  WHEN name IN ('Curaçao','Aruba','Bonaire') THEN 'island'
+  ELSE 'country' END;
+-- piano: "artist - title" + URL in notes
+UPDATE lists.piano_songs SET artist = 'ryo (supercell)', name = 'odds & ends', reference_url = notes, notes = NULL
+ WHERE name = 'ryo/supercell - odds & ends';
+-- tools: notes that are a bare URL become url
+UPDATE lists.tools_to_try SET url = notes, notes = NULL WHERE notes ~ '^https?://\S+$';
+-- docs/RFCs: "RFC n – Title", notes "Topic · starter pack"
+UPDATE lists.docs_to_read SET
+   rfc_number = substring(name from '^RFC (\d+)')::integer,
+   topic = btrim(split_part(notes, '·', 1)),
+   starter_pack = notes LIKE '%starter pack%',
+   url = 'https://www.rfc-editor.org/rfc/rfc' || substring(name from '^RFC (\d+)'),
+   notes = NULL
+ WHERE name ~ '^RFC \d+';
+-- banger songs: "Artist - Title" + URL notes; the 2 YT mixes are playlists
+UPDATE lists.banger_songs SET url = notes, notes = NULL WHERE notes ~ '^https?://\S+$';
+UPDATE lists.banger_songs SET artist = split_part(name, ' - ', 1), name = substr(name, strpos(name, ' - ') + 3), kind = 'song'
+ WHERE strpos(name, ' - ') > 0;
+UPDATE lists.banger_songs SET kind = 'playlist' WHERE artist IS NULL;
+
+SET LOCAL session_replication_role = origin;
+
+-- persist the fix log for review (legacy schema, dropped with it)
+CREATE TABLE legacy.reorg_list_fixes AS SELECT * FROM fix_log;
+ALTER TABLE legacy.reorg_list_fixes OWNER TO personal;  -- so `personal` can pg_dump everything

db/reorg/06_hardware_energy_cs.sql

@@ -0,0 +1,148 @@
+-- 06_hardware_energy_cs.sql: bring hardware + energy + CS prices over from dev.
+-- Expects schemas import_hardware / import_energy / import_cs, staged by run.sh from dumps/dev-import-staged.dump.
+SET ROLE personal;
+
+-- ---------- energy (DDL identical to ned-collector/collect.py so its IF NOT EXISTS is a no-op) ----------
+CREATE TABLE energy.gas_storage_daily (
+  gas_day    date NOT NULL,
+  site       text NOT NULL,
+  point_name text,
+  volume_twh numeric(12,4),
+  fill_pct   numeric(7,3),
+  source     text NOT NULL DEFAULT 'ned-json',
+  first_seen timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (gas_day, site)
+);
+CREATE TABLE energy.ned_utilization (
+  valid_from timestamptz NOT NULL, valid_to timestamptz NOT NULL,
+  point text NOT NULL, type text NOT NULL, activity text NOT NULL, classification text NOT NULL, granularity text NOT NULL,
+  capacity_kw numeric, volume_kwh numeric, percentage numeric, emission_kg numeric, emission_factor numeric,
+  source_file text,
+  first_seen timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  PRIMARY KEY (valid_from, point, type, activity, classification, granularity)
+);
+CREATE INDEX ned_utilization_type_time ON energy.ned_utilization (type, granularity, valid_from DESC);
+CREATE TABLE energy.collector_runs (
+  id bigserial PRIMARY KEY,
+  started_at timestamptz NOT NULL DEFAULT now(), finished_at timestamptz,
+  mode text NOT NULL, ok boolean, rows_upserted integer, errors text
+);
+CREATE VIEW energy.gas_storage_latest AS
+  SELECT DISTINCT ON (site) site, gas_day, volume_twh, fill_pct, updated_at
+    FROM energy.gas_storage_daily ORDER BY site, gas_day DESC;
+CREATE VIEW energy.electricity_hourly AS
+  SELECT valid_from AT TIME ZONE 'Europe/Amsterdam' AS hour_local, type, classification,
+         round(volume_kwh / 1000.0, 1) AS mwh, percentage, emission_factor AS kg_co2_per_kwh
+    FROM energy.ned_utilization WHERE granularity = 'Hour';
+
+INSERT INTO energy.gas_storage_daily SELECT * FROM import_energy.gas_storage_daily;
+INSERT INTO energy.ned_utilization  SELECT * FROM import_energy.ned_utilization;
+INSERT INTO energy.collector_runs   SELECT * FROM import_energy.collector_runs;
+SELECT setval('energy.collector_runs_id_seq', coalesce((SELECT max(id) FROM energy.collector_runs), 1));
+
+-- ---------- hardware (prices -> integer cents) ----------
+CREATE TABLE hardware.devices (
+  id         bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+  name       text NOT NULL UNIQUE,
+  kind       text NOT NULL CHECK (kind IN ('desktop','laptop','phone','vm','monitor')),
+  notes      text,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+CREATE TABLE hardware.components (
+  id                bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
+  device_id         bigint NOT NULL REFERENCES hardware.devices(id) ON DELETE CASCADE,
+  category          text NOT NULL CHECK (category IN ('case','cpu','motherboard','ram','cpu_cooler','gpu','psu','storage','fan','monitor','lighting','accessory')),
+  brand             text,
+  model             text NOT NULL,
+  quantity          integer NOT NULL DEFAULT 1 CHECK (quantity > 0),
+  specs             jsonb NOT NULL DEFAULT '{}'::jsonb,
+  unit_price_cents  integer CHECK (unit_price_cents >= 0),
+  total_price_cents integer CHECK (total_price_cents >= 0),
+  shop              text,
+  order_number      text,
+  order_date        date,
+  warranty_until    date,
+  invoice_number    text,
+  status            text NOT NULL DEFAULT 'in_use' CHECK (status IN ('in_use','retired','sold')),
+  verified          boolean NOT NULL DEFAULT true,
+  notes             text,
+  source            text,
+  created_at        timestamptz NOT NULL DEFAULT now(),
+  updated_at        timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX components_category_idx ON hardware.components (category);
+CREATE INDEX components_device_idx ON hardware.components (device_id);
+CREATE UNIQUE INDEX components_dedupe_uq ON hardware.components (device_id, model, order_number) NULLS NOT DISTINCT;
+CREATE INDEX components_specs_gin ON hardware.components USING gin (specs);
+COMMENT ON SCHEMA hardware IS 'Stan''s hardware inventory: devices (PCs, laptops, phones, VMs, monitors) and their components/peripherals with purchase + warranty details.';
+COMMENT ON TABLE hardware.devices IS 'A physical or virtual machine Stan owns/uses (e.g. stan-pc). Components hang off a device.';
+COMMENT ON TABLE hardware.components IS 'One line item (part or peripheral) belonging to a device, with purchase, price and warranty info.';
+COMMENT ON COLUMN hardware.components.unit_price_cents IS 'Price per unit in EUR cents incl. VAT.';
+COMMENT ON COLUMN hardware.components.total_price_cents IS 'unit price * quantity in EUR cents incl. VAT (excl. shipping).';
+COMMENT ON COLUMN hardware.components.verified IS 'false = purchase is real but unconfirmed whether it is (still) part of this setup, or some details are guessed. See notes.';
+COMMENT ON COLUMN hardware.components.source IS 'Where the data came from: user_list, gmail, manual.';
+
+INSERT INTO hardware.devices (id, name, kind, notes, created_at, updated_at) OVERRIDING SYSTEM VALUE
+  SELECT id, name, kind, notes, created_at, created_at FROM import_hardware.devices;
+INSERT INTO hardware.components (id, device_id, category, brand, model, quantity, specs, unit_price_cents, total_price_cents,
+  shop, order_number, order_date, warranty_until, invoice_number, status, verified, notes, source, created_at, updated_at)
+  OVERRIDING SYSTEM VALUE
+  SELECT id, device_id, category, brand, model, quantity, specs, round(unit_price_eur * 100)::integer, round(total_price_eur * 100)::integer,
+         shop, order_number, order_date, warranty_until, invoice_number, status, verified, notes, source, created_at, updated_at
+    FROM import_hardware.components;
+SELECT setval(pg_get_serial_sequence('hardware.devices', 'id'), (SELECT max(id) FROM hardware.devices));
+SELECT setval(pg_get_serial_sequence('hardware.components', 'id'), (SELECT max(id) FROM hardware.components));
+DO $$ BEGIN
+  IF (SELECT sum(total_price_cents) FROM hardware.components) <> (SELECT round(sum(total_price_eur) * 100) FROM import_hardware.components) THEN
+    RAISE EXCEPTION 'hardware cents conversion mismatch'; END IF;
+END $$;
+
+CREATE VIEW hardware.setup_overview AS
+ SELECT d.name AS device, d.kind AS device_kind, c.category, c.brand, c.model, c.quantity,
+        c.total_price_cents, round(c.total_price_cents / 100.0, 2) AS total_price_eur,
+        c.shop, c.order_date, c.warranty_until, (c.warranty_until >= CURRENT_DATE) AS under_warranty,
+        c.status, c.verified, c.specs, c.notes, c.order_number, c.invoice_number, c.source, c.id AS component_id
+   FROM hardware.components c JOIN hardware.devices d ON d.id = c.device_id
+  ORDER BY d.name, array_position(ARRAY['case','cpu','motherboard','ram','cpu_cooler','gpu','psu','storage','fan','lighting','monitor','accessory'], c.category),
+           c.order_date, c.model;
+COMMENT ON VIEW hardware.setup_overview IS 'Flat view of every component per device, build order, live under_warranty flag. Filter status = ''in_use'' for the current setup.';
+
+-- ---------- CS prices (prod tables are empty; copy dev) ----------
+DO $$ BEGIN
+  IF EXISTS (SELECT 1 FROM cs.items) OR EXISTS (SELECT 1 FROM cs.price_observations)
+     OR EXISTS (SELECT 1 FROM cs.item_dimensions) OR EXISTS (SELECT 1 FROM cs.price_streams) THEN
+    RAISE EXCEPTION 'cs.* not empty in target; refusing to merge dev data'; END IF;
+END $$;
+INSERT INTO cs.items (id, market_hash_name, name, icon_url, item_type, first_seen_at, last_seen_at)
+  SELECT id, market_hash_name, name, icon_url, item_type, first_seen_at, last_seen_at FROM import_cs.cs_market_items;
+INSERT INTO cs.item_dimensions (item_id, key, value) SELECT item_id, key, value FROM import_cs.cs_item_dimensions;
+INSERT INTO cs.price_streams (source, currency, kind) SELECT source, currency, kind FROM import_cs.cs_price_streams;
+INSERT INTO cs.price_observations (id, item_id, source, currency, observed_at, price_cents, volume, kind, imported_at) OVERRIDING SYSTEM VALUE
+  SELECT id, item_id, source, currency, observed_at, price_cents, volume, kind, imported_at FROM import_cs.cs_price_observations;
+SELECT setval(pg_get_serial_sequence('cs.items', 'id'), coalesce((SELECT max(id) FROM cs.items), 1));
+SELECT setval(pg_get_serial_sequence('cs.price_observations', 'id'), coalesce((SELECT max(id) FROM cs.price_observations), 1));
+
+CREATE TABLE legacy.reorg_imports (dst text PRIMARY KEY, src text NOT NULL, n bigint NOT NULL);
+-- ---------- verify imports against the staged dev copies, then drop staging ----------
+RESET ROLE;
+DO $$
+DECLARE r record; a bigint; b bigint;
+BEGIN
+  FOR r IN SELECT * FROM (VALUES
+     ('energy.gas_storage_daily','import_energy.gas_storage_daily'), ('energy.ned_utilization','import_energy.ned_utilization'),
+     ('energy.collector_runs','import_energy.collector_runs'), ('hardware.devices','import_hardware.devices'),
+     ('hardware.components','import_hardware.components'), ('cs.items','import_cs.cs_market_items'),
+     ('cs.item_dimensions','import_cs.cs_item_dimensions'), ('cs.price_streams','import_cs.cs_price_streams'),
+     ('cs.price_observations','import_cs.cs_price_observations')) v(dst, srct) LOOP
+    EXECUTE 'SELECT count(*) FROM ' || r.dst INTO a;
+    EXECUTE 'SELECT count(*) FROM ' || r.srct INTO b;
+    IF a <> b THEN RAISE EXCEPTION '% has % rows, dev % has %', r.dst, a, r.srct, b; END IF;
+    INSERT INTO legacy.reorg_imports VALUES (r.dst, r.srct, a);
+  END LOOP;
+END $$;
+DROP SCHEMA import_energy CASCADE;
+DROP SCHEMA import_hardware CASCADE;
+DROP SCHEMA import_cs CASCADE;

db/reorg/07_triggers_meta_grants.sql

@@ -0,0 +1,79 @@
+-- 07_triggers_meta_grants.sql: updated_at triggers everywhere, register core tables in meta, grants.
+SET ROLE personal;
+
+-- 1) updated_at trigger on every table that has the column but no trigger (27 pre-existing + new ones)
+DO $$
+DECLARE r record; n integer := 0;
+BEGIN
+  FOR r IN
+    SELECT n.nspname AS s, c.relname AS t
+      FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+      JOIN pg_attribute a ON a.attrelid = c.oid AND a.attname = 'updated_at' AND NOT a.attisdropped
+     WHERE c.relkind = 'r'
+       AND n.nspname IN ('auth','money','house','ref','games','cs','animaldex','site','hardware','energy')
+       AND NOT EXISTS (SELECT 1 FROM pg_trigger tg WHERE tg.tgrelid = c.oid AND NOT tg.tgisinternal
+                         AND tg.tgfoid = 'meta.touch_updated_at()'::regprocedure)
+  LOOP
+    EXECUTE format('CREATE TRIGGER touch_updated_at BEFORE UPDATE ON %I.%I FOR EACH ROW EXECUTE FUNCTION meta.touch_updated_at()', r.s, r.t);
+    n := n + 1;
+  END LOOP;
+  RAISE NOTICE 'added updated_at triggers: %', n;
+END $$;
+-- the 16 old triggers were all named site_touch_updated_at; normalise the name
+DO $$
+DECLARE r record;
+BEGIN
+  FOR r IN SELECT tg.tgname, tg.tgrelid::regclass AS rel FROM pg_trigger tg WHERE tg.tgname = 'site_touch_updated_at' LOOP
+    EXECUTE format('ALTER TRIGGER site_touch_updated_at ON %s RENAME TO touch_updated_at', r.rel);
+  END LOOP;
+END $$;
+RESET ROLE;
+
+-- 2) register core + ref tables in meta (GUI visibility); auth + bookkeeping are not exposed
+INSERT INTO meta.tables (schema_name, table_name, slug, display_name, kind, editable, has_done, sort_order)
+SELECT n.nspname, c.relname,
+       replace(n.nspname || '-' || c.relname, '_', '-'),
+       initcap(replace(c.relname, '_', ' ')),
+       CASE WHEN n.nspname = 'ref' THEN 'ref' ELSE 'core' END,
+       n.nspname <> 'ref', false, 1000
+  FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+ WHERE c.relkind IN ('r','v')
+   AND n.nspname IN ('money','house','ref','games','cs','animaldex','site','hardware','energy')
+ON CONFLICT DO NOTHING;
+UPDATE meta.tables SET editable = false WHERE kind = 'core' AND (schema_name, table_name) IN
+  (SELECT n.nspname, c.relname FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace WHERE c.relkind = 'v');
+SELECT meta.sync();
+
+-- 3) grants
+GRANT USAGE ON SCHEMA auth, money, house, ref, games, cs, animaldex, site, meta, hardware, energy, lists TO personal_app, personal_ro;
+-- app: full DML on its own data, read-only on ref
+GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA auth, money, house, games, cs, animaldex, site, hardware, energy, lists TO personal_app;
+GRANT SELECT ON ALL TABLES IN SCHEMA ref, meta TO personal_app;
+GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA auth, money, house, games, cs, animaldex, site, hardware, energy, lists TO personal_app;
+-- app may edit presentation fields of the registry directly
+GRANT UPDATE (slug, display_name, description, icon, picture_url, default_sort, sort_order) ON meta.tables TO personal_app;  -- slug: URL only, table name stays
+GRANT UPDATE (label, ui_type, options, position, hidden, help_text) ON meta.columns TO personal_app;
+GRANT EXECUTE ON FUNCTION meta.create_list(text, text, text, boolean, jsonb, text, text, text, integer),
+                          meta.add_column(text, jsonb), meta.rename_column(text, text, text), meta.drop_column(text, text),
+                          meta.archive_list(text), meta.drop_list(text), meta.sync(integer) TO personal_app;
+-- ro: everything readable
+GRANT SELECT ON ALL TABLES IN SCHEMA auth, money, house, ref, games, cs, animaldex, site, meta, hardware, energy, lists TO personal_ro;
+-- future objects
+ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA auth, money, house, games, cs, animaldex, site, hardware, energy
+  GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO personal_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA auth, money, house, games, cs, animaldex, site, hardware, energy
+  GRANT USAGE, SELECT ON SEQUENCES TO personal_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA ref, meta GRANT SELECT ON TABLES TO personal_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA auth, money, house, ref, games, cs, animaldex, site, meta, hardware, energy
+  GRANT SELECT ON TABLES TO personal_ro;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal_ddl IN SCHEMA lists GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO personal_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal_ddl IN SCHEMA lists GRANT USAGE, SELECT ON SEQUENCES TO personal_app;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal_ddl IN SCHEMA lists GRANT SELECT ON TABLES TO personal_ro;
+-- migration owner can read the runtime lists, so deploy backups (pg_dump as `personal`) cover everything
+GRANT USAGE ON SCHEMA lists TO personal;
+GRANT SELECT ON ALL TABLES IN SCHEMA lists TO personal;
+GRANT SELECT ON ALL SEQUENCES IN SCHEMA lists TO personal;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal_ddl IN SCHEMA lists GRANT SELECT ON TABLES TO personal;
+ALTER DEFAULT PRIVILEGES FOR ROLE personal_ddl IN SCHEMA lists GRANT SELECT ON SEQUENCES TO personal;
+-- nobody creates in public anymore
+REVOKE CREATE ON SCHEMA public FROM PUBLIC;

db/reorg/08_verify.sql

@@ -0,0 +1,68 @@
+-- 08_verify.sql: hard assertions; any failure aborts the whole transaction.
+DO $$
+DECLARE r record; a bigint; bad text := '';
+BEGIN
+  -- every moved table keeps its exact row count
+  -- expected = prod count before + rows imported from dev (cs.* only; prod cs was empty)
+  FOR r IN SELECT m.*, b.n + coalesce(i.n, 0) AS n FROM legacy.reorg_table_map m
+             JOIN legacy.reorg_counts_before b ON b.table_name = m.old_name
+             LEFT JOIN legacy.reorg_imports i ON i.dst = m.new_schema || '.' || m.new_name LOOP
+    EXECUTE format('SELECT count(*) FROM %I.%I', r.new_schema, r.new_name) INTO a;
+    IF a <> r.n THEN bad := bad || format('%s.%s %s<>%s; ', r.new_schema, r.new_name, a, r.n); END IF;
+  END LOOP;
+  IF bad <> '' THEN RAISE EXCEPTION 'row count mismatch: %', bad; END IF;
+  IF (SELECT count(*) FROM legacy.reorg_counts_before) <> 58 THEN RAISE EXCEPTION 'expected 58 source tables'; END IF;
+  IF EXISTS (SELECT 1 FROM pg_tables WHERE schemaname = 'public') THEN RAISE EXCEPTION 'public not empty'; END IF;
+END $$;
+
+-- lists: every legacy item is in exactly one lists.* table, except the 4 merged duplicates; done count preserved
+DO $$
+DECLARE t record; n bigint; total bigint := 0; done bigint := 0; d bigint;
+  dropped bigint := (SELECT count(*) FROM legacy.reorg_list_fixes WHERE action = 'dedupe-drop');
+BEGIN
+  FOR t IN SELECT * FROM meta.tables WHERE kind = 'list' LOOP
+    EXECUTE format('SELECT count(*) FROM lists.%I', t.table_name) INTO n;
+    total := total + n;
+    IF t.has_done THEN EXECUTE format('SELECT count(*) FROM lists.%I WHERE done_at IS NOT NULL', t.table_name) INTO d; done := done + d; END IF;
+  END LOOP;
+  IF total + dropped <> (SELECT count(*) FROM legacy.list_items) THEN
+    RAISE EXCEPTION 'lists total % + % dropped <> legacy %', total, dropped, (SELECT count(*) FROM legacy.list_items); END IF;
+  -- expected done = legacy completions minus dedupe pairs where BOTH copies were done (they collapse to one)
+  d := (SELECT count(*) FROM legacy.list_item_completions)
+     - (SELECT count(*) FROM dedupe x
+         WHERE EXISTS (SELECT 1 FROM legacy.list_item_completions c WHERE c.item_id = x.keep_id)
+           AND EXISTS (SELECT 1 FROM legacy.list_item_completions c WHERE c.item_id = x.drop_id));
+  IF done <> d THEN RAISE EXCEPTION 'done count % <> expected %', done, d; END IF;
+  IF (SELECT count(*) FROM meta.tables WHERE kind = 'list') <> (SELECT count(*) FROM legacy.lists) THEN
+    RAISE EXCEPTION 'list count mismatch'; END IF;
+  RAISE NOTICE 'lists OK: % rows (+% merged dupes), % done', total, dropped, done;
+END $$;
+
+-- every table with updated_at has the trigger
+DO $$
+DECLARE missing text;
+BEGIN
+  SELECT string_agg(n.nspname || '.' || c.relname, ', ') INTO missing
+    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+    JOIN pg_attribute a ON a.attrelid = c.oid AND a.attname = 'updated_at' AND NOT a.attisdropped
+   WHERE c.relkind = 'r' AND n.nspname NOT IN ('legacy','pg_catalog','information_schema') AND n.nspname !~ '^pg_'
+     AND NOT EXISTS (SELECT 1 FROM pg_trigger tg WHERE tg.tgrelid = c.oid AND tg.tgfoid = 'meta.touch_updated_at()'::regprocedure);
+  IF missing IS NOT NULL THEN RAISE EXCEPTION 'missing updated_at trigger: %', missing; END IF;
+  -- every table has a PK
+  SELECT string_agg(n.nspname || '.' || c.relname, ', ') INTO missing
+    FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
+   WHERE c.relkind = 'r' AND n.nspname NOT IN ('legacy','pg_catalog','information_schema') AND n.nspname !~ '^pg_'
+     AND NOT EXISTS (SELECT 1 FROM pg_constraint k WHERE k.conrelid = c.oid AND k.contype = 'p');
+  IF missing IS NOT NULL THEN RAISE EXCEPTION 'tables without PK: %', missing; END IF;
+END $$;
+
+-- list rows keep their original timestamps
+DO $$
+DECLARE t record; n bigint; bad bigint := 0;
+BEGIN
+  FOR t IN SELECT table_name FROM meta.tables WHERE kind = 'list' LOOP
+    EXECUTE format('SELECT count(*) FROM lists.%I x JOIN legacy.list_items i ON i.id = x.id WHERE x.updated_at <> i.updated_at OR x.created_at <> i.created_at', t.table_name) INTO n;
+    bad := bad + n;
+  END LOOP;
+  IF bad > 0 THEN RAISE EXCEPTION '% list rows lost their original timestamps', bad; END IF;
+END $$;

db/reorg/09_drizzle_names.sql

@@ -0,0 +1,58 @@
+-- 09_drizzle_names.sql: rename constraints/indexes to the names Drizzle generates, so future
+-- drizzle-kit migrations (which address objects by name) match the database. Pure renames, no data change.
+-- Generated from a diff of the rehearsed DB against the Drizzle baseline (2026-10-23).
+SET ROLE personal;
+ALTER TABLE cs.item_dimensions RENAME CONSTRAINT item_dimensions_item_id_cs_market_items_id_fkey TO item_dimensions_item_id_items_id_fkey;
+ALTER TABLE cs.price_observations RENAME CONSTRAINT price_observations_item_id_cs_market_items_id_fkey TO price_observations_item_id_items_id_fkey;
+ALTER TABLE games.catch_em_all_entries RENAME CONSTRAINT catch_em_all_entries_pokemon_game_entry_id_pokemon_game_entry_i TO "catch_em_all_entries_HeABXvGNiB6D_fkey";
+ALTER TABLE games.catch_em_all_games RENAME CONSTRAINT catch_em_all_games_game_id_game_id_fkey TO catch_em_all_games_game_id_pokemon_games_id_fkey;
+ALTER TABLE games.catch_em_all_settings RENAME CONSTRAINT catch_em_all_settings_user_id_fkey TO catch_em_all_settings_user_id_user_id_fkey;
+ALTER TABLE games.osu_entries RENAME CONSTRAINT osu_entries_user_id_fkey TO osu_entries_user_id_user_id_fkey;
+ALTER TABLE games.pokemon_catches RENAME CONSTRAINT pokemon_catches_game_id_fkey TO pokemon_catches_game_id_pokemon_games_id_fkey;
+ALTER TABLE games.pokemon_catches RENAME CONSTRAINT pokemon_catches_pokemon_id_fkey TO pokemon_catches_pokemon_id_pokemon_id_fkey;
+ALTER TABLE games.pokemon_catches RENAME CONSTRAINT pokemon_catches_user_id_fkey TO pokemon_catches_user_id_user_id_fkey;
+ALTER TABLE games.pokemon_catches RENAME CONSTRAINT pokemon_catches_user_id_game_id_party_slot_key TO pokemon_catches_user_id_game_id_party_slot_unique;
+ALTER TABLE games.pokemon_journeys RENAME CONSTRAINT pokemon_journeys_game_id_fkey TO pokemon_journeys_game_id_pokemon_games_id_fkey;
+ALTER TABLE games.pokemon_journeys RENAME CONSTRAINT pokemon_journeys_user_id_fkey TO pokemon_journeys_user_id_user_id_fkey;
+ALTER TABLE games.pokemon_journeys RENAME CONSTRAINT pokemon_journeys_user_id_game_id_key TO pokemon_journeys_user_id_game_id_unique;
+ALTER TABLE games.pokemon_milestones RENAME CONSTRAINT pokemon_milestones_game_id_fkey TO pokemon_milestones_game_id_pokemon_games_id_fkey;
+ALTER TABLE games.pokemon_milestones RENAME CONSTRAINT pokemon_milestones_user_id_fkey TO pokemon_milestones_user_id_user_id_fkey;
+ALTER TABLE games.pokemon_milestones RENAME CONSTRAINT pokemon_milestones_user_id_game_id_key_key TO pokemon_milestones_user_id_game_id_key_unique;
+ALTER TABLE games.pokemon_seen RENAME CONSTRAINT pokemon_seen_game_id_fkey TO pokemon_seen_game_id_pokemon_games_id_fkey;
+ALTER TABLE games.pokemon_seen RENAME CONSTRAINT pokemon_seen_pokemon_id_fkey TO pokemon_seen_pokemon_id_pokemon_id_fkey;
+ALTER TABLE games.pokemon_seen RENAME CONSTRAINT pokemon_seen_user_id_fkey TO pokemon_seen_user_id_user_id_fkey;
+ALTER TABLE games.pokemon_seen RENAME CONSTRAINT pokemon_seen_user_id_game_id_pokemon_id_key TO pokemon_seen_user_id_game_id_pokemon_id_unique;
+ALTER TABLE games.tracker_challenge_progress RENAME CONSTRAINT tracker_challenge_progress_challenge_id_fkey TO "tracker_challenge_progress_HtzyFtOyUAhk_fkey";
+ALTER TABLE games.tracker_challenge_progress RENAME CONSTRAINT tracker_challenge_progress_user_id_challenge_id_key TO tracker_challenge_progress_user_id_challenge_id_unique;
+ALTER TABLE games.tracker_challenge_progress RENAME CONSTRAINT tracker_challenge_progress_user_id_fkey TO tracker_challenge_progress_user_id_user_id_fkey;
+ALTER TABLE games.tracker_ranks RENAME CONSTRAINT tracker_ranks_game_id_fkey TO tracker_ranks_game_id_tracker_games_id_fkey;
+ALTER TABLE games.tracker_ranks RENAME CONSTRAINT tracker_ranks_user_id_fkey TO tracker_ranks_user_id_user_id_fkey;
+ALTER TABLE games.tracker_ranks RENAME CONSTRAINT tracker_ranks_user_id_game_id_key TO tracker_ranks_user_id_game_id_unique;
+ALTER TABLE games.tracker_weapon_ranks RENAME CONSTRAINT tracker_weapon_ranks_item_id_fkey TO tracker_weapon_ranks_item_id_tracker_items_id_fkey;
+ALTER TABLE games.tracker_weapon_ranks RENAME CONSTRAINT tracker_weapon_ranks_user_id_fkey TO tracker_weapon_ranks_user_id_user_id_fkey;
+ALTER TABLE games.tracker_weapon_ranks RENAME CONSTRAINT tracker_weapon_ranks_user_id_item_id_key TO tracker_weapon_ranks_user_id_item_id_unique;
+ALTER TABLE house.price_history RENAME CONSTRAINT price_history_listing_id_fkey TO price_history_listing_id_listings_id_fkey;
+ALTER TABLE meta.columns RENAME CONSTRAINT columns_table_id_fkey TO columns_table_id_tables_id_fkey;
+ALTER TABLE money.forecasts RENAME CONSTRAINT forecasts_account_id_money_accounts_id_fkey TO forecasts_account_id_accounts_id_fkey;
+ALTER TABLE money.projection_settings RENAME CONSTRAINT "projection_settings_fqvzThdinM8E_fkey" TO projection_settings_investment_account_id_accounts_id_fkey;
+ALTER TABLE money.recurring RENAME CONSTRAINT recurring_account_id_money_accounts_id_fkey TO recurring_account_id_accounts_id_fkey;
+ALTER TABLE money.transactions RENAME CONSTRAINT transactions_account_id_money_accounts_id_fkey TO transactions_account_id_accounts_id_fkey;
+ALTER TABLE ref.pokemon_dex_numbers RENAME CONSTRAINT pokemon_dex_numbers_game_id_fkey TO pokemon_dex_numbers_game_id_pokemon_games_id_fkey;
+ALTER TABLE ref.pokemon_dex_numbers RENAME CONSTRAINT pokemon_dex_numbers_pokemon_id_fkey TO pokemon_dex_numbers_pokemon_id_pokemon_id_fkey;
+ALTER TABLE ref.pokemon_dex_numbers RENAME CONSTRAINT pokemon_dex_numbers_pokemon_id_game_id_dex_key TO pokemon_dex_numbers_pokemon_id_game_id_dex_unique;
+ALTER TABLE ref.pokemon_encounters RENAME CONSTRAINT pokemon_encounters_game_id_games_id_fkey TO pokemon_encounters_game_id_pokemon_games_id_fkey;
+ALTER TABLE ref.pokemon_evolutions RENAME CONSTRAINT pokemon_evolutions_game_id_games_id_fkey TO pokemon_evolutions_game_id_pokemon_games_id_fkey;
+ALTER TABLE ref.pokemon_game_entries RENAME CONSTRAINT pokemon_game_entries_game_id_game_id_fkey TO pokemon_game_entries_game_id_pokemon_games_id_fkey;
+ALTER TABLE ref.pokemon_game_research RENAME CONSTRAINT pokemon_game_research_game_id_fkey TO pokemon_game_research_game_id_pokemon_games_id_fkey;
+ALTER TABLE ref.pokemon_learnsets RENAME CONSTRAINT pokemon_learnsets_pokemon_id_fkey TO pokemon_learnsets_pokemon_id_pokemon_id_fkey;
+ALTER TABLE ref.pokemon_learnsets RENAME CONSTRAINT pokemon_learnsets_pokemon_id_version_group_key TO pokemon_learnsets_pokemon_id_version_group_unique;
+ALTER TABLE ref.pokemon_research RENAME CONSTRAINT pokemon_research_pokemon_id_fkey TO pokemon_research_pokemon_id_pokemon_id_fkey;
+ALTER TABLE ref.tracker_challenges RENAME CONSTRAINT tracker_challenges_game_id_fkey TO tracker_challenges_game_id_tracker_games_id_fkey;
+ALTER TABLE ref.tracker_challenges RENAME CONSTRAINT tracker_challenges_game_id_key_key TO tracker_challenges_game_id_key_unique;
+ALTER TABLE site.blog_articles RENAME CONSTRAINT blog_articles_slug_unique TO blog_articles_slug_key;
+ALTER INDEX games.osu_entries_owner_idx RENAME TO osu_entries_user_id_kind_index;
+ALTER INDEX games.pokemon_catches_owner_idx RENAME TO pokemon_catches_user_id_game_id_pokemon_id_index;
+ALTER INDEX games.pokemon_seen_user_idx RENAME TO pokemon_seen_user_id_index;
+ALTER INDEX money.utility_readings_user_kind_date_idx RENAME TO utility_readings_user_id_kind_date_index;
+ALTER INDEX ref.pokemon_dex_game_idx RENAME TO pokemon_dex_numbers_game_id_index;
+RESET ROLE;

db/reorg/README.md

@@ -0,0 +1,21 @@
+# One-time schema reorg (2026-10)
+
+Hand-written, reviewed SQL that moved the old flat `public.*` tables into the
+domain schemas (`auth`, `money`, `house`, `ref`, `games`, `cs`, `animaldex`,
+`site`, `meta`, `lists`, `hardware`, `energy`, `legacy`), created the roles
+(`personal`, `personal_app`, `personal_ddl`, `personal_ro`), the `meta.*`
+registry/API and the 22 runtime lists. It is the state that the Drizzle baseline
+in `drizzle/` describes.
+
+These files are kept for the record and for the cutover only. They were
+rehearsed on a copy of prod (PG17) and run in one transaction (`run.sh`,
+which refuses the real database names unless `ALLOW_REAL=yes`). After the
+cutover, record the baseline with `bun scripts/db-migrate.ts --init`; from then
+on every schema change is a normal Drizzle migration (`bun run db:generate`).
+
+Passwords are never in these files; set them with `\password` in psql.
+
+`09_drizzle_names.sql` runs just before `08_verify.sql` and only renames 48
+constraints and 5 indexes to Drizzle's generated names, so a catalog diff of the
+reorged DB against a DB built from the baseline is empty (columns, defaults,
+constraints, indexes, enums in the nine Drizzle schemas).

db/reorg/run.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# run.sh <target-db> : stage the dev import, then apply 01..08 in ONE transaction as superuser.
+# Rehearsal: runs against the private PG17 cluster in ~/dev/setup/db/rehearsal (port 5441, unix socket only).
+# Prod: same files, but psql = `sudo docker exec -i <pg-container> psql -U postgres -d personal` (see PLAN.md §4c).
+set -euo pipefail
+DB=${1:?target db}
+case "$DB" in personal|personal_dev|personal_staging) [ "${ALLOW_REAL:-}" = yes ] || { echo "refusing $DB without ALLOW_REAL=yes"; exit 3; };; esac
+D=~/dev/setup/db
+export LD_LIBRARY_PATH=$D/tools/root/usr/lib/x86_64-linux-gnu
+BIN=$D/tools/root/usr/lib/postgresql/17/bin
+CONN=(-h "${PGSOCK:-$D/rehearsal/sock}" -p "${PGPORT:-5441}" -U postgres)
+STAGED=${STAGED:-$D/dumps/dev-import-staged.dump}
+
+# 1) stage dev data as import_* schemas (owned by personal so 06 can read it)
+$BIN/psql "${CONN[@]}" -d "$DB" -v ON_ERROR_STOP=1 -qc "DROP SCHEMA IF EXISTS import_energy, import_hardware, import_cs CASCADE"
+$BIN/pg_restore "${CONN[@]}" -d "$DB" --no-owner --role=personal --single-transaction --exit-on-error "$STAGED"
+
+# 2) the migration, all-or-nothing
+cd "$D/migration"
+$BIN/psql "${CONN[@]}" -d "$DB" -v ON_ERROR_STOP=1 --single-transaction \
+  -c "SET lock_timeout = '5s'" -c "SET statement_timeout = '10min'" \
+  -f 01_roles.sql -f 02_schemas_move.sql -f 03_fixes.sql -f 04_meta.sql -f 05_lists.sql \
+  -f 06_hardware_energy_cs.sql -f 07_triggers_meta_grants.sql -f 09_drizzle_names.sql -f 08_verify.sql
+echo "migration committed on $DB"

docs/house-tracker.md

@@ -51,7 +51,7 @@ HOUSE_NTFY_TOKEN=            # only for a protected ntfy topic
 PUBLIC_MAPTILER_API_KEY=     # already set for Animaldex
 ```
 
-`scripts/migrate-house-tracker.ts` runs on every deploy (idempotent). Use
+The `house` schema is part of the Drizzle migrations that run on every deploy. Use
 "send test alert" on the page to check the alert channel.
 
 If Cloudflare Bot Fight Mode / WAF challenges are on for stanrunge.dev, add a
@@ -91,7 +91,7 @@ newer; older versions cannot read this repository's lockfile. Use `bun upgrade`
 if needed.
 
 ```sh
-git clone https://git.stanrunge.dev/stan/personal-website ~/house-worker
+git clone https://git.stanrunge.dev/stan/website ~/house-worker
 cd ~/house-worker && bun install --frozen-lockfile
 cat > house.env <<'EOF'
 HOUSE_API_URL=https://stanrunge.dev

drizzle.config.ts

@@ -1,12 +1,31 @@
 import { defineConfig } from 'drizzle-kit';
 
+// Drizzle owns the core schemas only. Deliberately excluded:
+//  - lists:  runtime tables created through meta.create_list() (owned by personal_ddl)
+//  - legacy: pre-reorg tables kept read-only for rollback
+//  - energy: owned by ned-collector
+//  - hardware: not modelled yet
+// Migrations run as the schema owner (`personal`), never as the app role.
 export default defineConfig({
 	dialect: 'postgresql',
 	schema: './src/lib/server/db/schema/index.ts',
 	out: './drizzle',
+	schemaFilter: [
+		'auth',
+		'money',
+		'house',
+		'ref',
+		'games',
+		'cs',
+		'animaldex',
+		'site',
+		'meta',
+		'health'
+	],
+	migrations: { schema: 'drizzle', table: '__drizzle_migrations' },
 	verbose: true,
 	strict: true,
 	dbCredentials: {
-		url: process.env.DB_URL!
+		url: (process.env.DB_MIGRATE_URL || process.env.DB_URL)!
 	}
 });

drizzle/20261023215112_baseline/migration.sql

@@ -0,0 +1,857 @@
+CREATE SCHEMA "animaldex";
+--> statement-breakpoint
+CREATE SCHEMA "auth";
+--> statement-breakpoint
+CREATE SCHEMA "cs";
+--> statement-breakpoint
+CREATE SCHEMA "games";
+--> statement-breakpoint
+CREATE SCHEMA "house";
+--> statement-breakpoint
+CREATE SCHEMA "meta";
+--> statement-breakpoint
+CREATE SCHEMA "money";
+--> statement-breakpoint
+CREATE SCHEMA "ref";
+--> statement-breakpoint
+CREATE SCHEMA "site";
+--> statement-breakpoint
+CREATE TYPE "site"."blog_article_status" AS ENUM('draft', 'published');--> statement-breakpoint
+CREATE TYPE "ref"."availability" AS ENUM('catchable', 'trade_only', 'transfer_only', 'event_only', 'unknown', 'evolve', 'breed');--> statement-breakpoint
+CREATE TABLE "auth"."account" (
+	"id" text PRIMARY KEY,
+	"account_id" text NOT NULL,
+	"issuer" text NOT NULL,
+	"provider_id" text NOT NULL,
+	"user_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"id_token" text,
+	"access_token_expires_at" timestamp with time zone,
+	"refresh_token_expires_at" timestamp with time zone,
+	"scope" text,
+	"password" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."session" (
+	"id" text PRIMARY KEY,
+	"expires_at" timestamp with time zone NOT NULL,
+	"token" text NOT NULL UNIQUE,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone NOT NULL,
+	"ip_address" text,
+	"user_agent" text,
+	"user_id" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."user" (
+	"id" text PRIMARY KEY,
+	"name" text NOT NULL,
+	"role" text DEFAULT 'user' NOT NULL,
+	"email" text NOT NULL UNIQUE,
+	"email_verified" boolean DEFAULT false NOT NULL,
+	"image" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "auth"."verification" (
+	"id" text PRIMARY KEY,
+	"identifier" text NOT NULL,
+	"value" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "site"."blog_articles" (
+	"id" serial PRIMARY KEY,
+	"title" text NOT NULL,
+	"slug" text NOT NULL UNIQUE,
+	"content" text DEFAULT '' NOT NULL,
+	"tags" text[] DEFAULT '{}'::text[] NOT NULL,
+	"status" "site"."blog_article_status" DEFAULT 'draft'::"site"."blog_article_status" NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "site"."tasks" (
+	"id" serial PRIMARY KEY,
+	"name" text NOT NULL,
+	"current_points" integer DEFAULT 0 NOT NULL,
+	"total_points" integer DEFAULT 1 NOT NULL,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "site"."task_topics" (
+	"id" serial PRIMARY KEY,
+	"task_id" integer NOT NULL,
+	"topic_id" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "task_topics_task_id_topic_id_unique" UNIQUE("task_id","topic_id")
+);
+--> statement-breakpoint
+CREATE TABLE "site"."topics" (
+	"id" serial PRIMARY KEY,
+	"name" text NOT NULL,
+	"emoji" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "games"."catch_em_all_settings" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL UNIQUE,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_games" (
+	"id" serial PRIMARY KEY,
+	"source_id" integer UNIQUE,
+	"slug" text UNIQUE,
+	"name" text NOT NULL,
+	"generation" integer DEFAULT 1 NOT NULL,
+	"sort_order" integer DEFAULT 0 NOT NULL,
+	"breeding" boolean DEFAULT true NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon" (
+	"id" serial PRIMARY KEY,
+	"number" integer NOT NULL UNIQUE,
+	"generation" integer DEFAULT 1 NOT NULL,
+	"name" text NOT NULL,
+	"type1" text NOT NULL,
+	"type2" text,
+	"hp" integer DEFAULT 0 NOT NULL,
+	"attack" integer DEFAULT 0 NOT NULL,
+	"defense" integer DEFAULT 0 NOT NULL,
+	"special_attack" integer DEFAULT 0 NOT NULL,
+	"special_defense" integer DEFAULT 0 NOT NULL,
+	"speed" integer DEFAULT 0 NOT NULL,
+	"evolves_from" integer,
+	"evolution_chain" integer,
+	"is_baby" boolean DEFAULT false NOT NULL,
+	"is_legendary" boolean DEFAULT false NOT NULL,
+	"is_mythical" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_encounters" (
+	"id" serial PRIMARY KEY,
+	"pokemon_id" integer NOT NULL,
+	"game_id" integer NOT NULL,
+	"location_id" integer NOT NULL,
+	"area" text,
+	"method" text NOT NULL,
+	"min_level" integer,
+	"max_level" integer,
+	"rarity" integer,
+	"form" text,
+	"conditions" text[] DEFAULT '{}'::text[] NOT NULL,
+	"note" text,
+	"source" text DEFAULT 'pokeapi' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_evolutions" (
+	"id" serial PRIMARY KEY,
+	"from_pokemon_id" integer NOT NULL,
+	"to_pokemon_id" integer NOT NULL,
+	"game_id" integer NOT NULL,
+	"method" text NOT NULL,
+	"source" text DEFAULT 'pokeapi' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_evolutions_from_pokemon_id_to_pokemon_id_game_id_method_unique" UNIQUE("from_pokemon_id","to_pokemon_id","game_id","method")
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_game_entries" (
+	"id" serial PRIMARY KEY,
+	"pokemon_id" integer NOT NULL,
+	"game_id" integer NOT NULL,
+	"availability" "ref"."availability" DEFAULT 'catchable'::"ref"."availability" NOT NULL,
+	"note" text,
+	"source" text DEFAULT 'pokeapi' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_game_entries_pokemon_id_game_id_unique" UNIQUE("pokemon_id","game_id")
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_locations" (
+	"id" serial PRIMARY KEY,
+	"source_id" integer UNIQUE,
+	"slug" text NOT NULL,
+	"name" text NOT NULL,
+	"region" text,
+	"description" text,
+	"image_key" text,
+	"image_credit" text,
+	"source" text DEFAULT 'pokeapi' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "games"."catch_em_all_entries" (
+	"id" serial PRIMARY KEY,
+	"pokemon_game_entry_id" integer NOT NULL,
+	"user_id" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "catch_em_all_entries_pokemon_game_entry_id_user_id_unique" UNIQUE("pokemon_game_entry_id","user_id")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."catch_em_all_games" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "catch_em_all_games_user_id_game_id_unique" UNIQUE("user_id","game_id")
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."tracker_games" (
+	"id" serial PRIMARY KEY,
+	"slug" text NOT NULL UNIQUE,
+	"franchise" text NOT NULL,
+	"name" text NOT NULL,
+	"short_name" text NOT NULL,
+	"release_year" integer,
+	"sort_order" integer DEFAULT 0 NOT NULL,
+	"rules" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."tracker_items" (
+	"id" serial PRIMARY KEY,
+	"game_id" integer NOT NULL,
+	"key" text NOT NULL,
+	"kind" text NOT NULL,
+	"category" text NOT NULL,
+	"name" text NOT NULL,
+	"description" text,
+	"icon" text,
+	"post_launch" boolean DEFAULT false NOT NULL,
+	"sort_order" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tracker_items_game_id_key_unique" UNIQUE("game_id","key")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."tracker_progress" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"item_id" integer NOT NULL,
+	"milestone" text DEFAULT 'done' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tracker_progress_user_id_item_id_milestone_unique" UNIQUE("user_id","item_id","milestone")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."osu_entries" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"title" text NOT NULL,
+	"mode" text DEFAULT 'osu' NOT NULL,
+	"beatmap_url" text,
+	"score_url" text,
+	"goal" text DEFAULT 'pass' NOT NULL,
+	"skill" text DEFAULT 'stamina' NOT NULL,
+	"bpm" integer,
+	"duration" integer,
+	"accuracy" numeric,
+	"combo" integer,
+	"misses" integer,
+	"pp" numeric,
+	"mods" text DEFAULT 'NM' NOT NULL,
+	"rate" numeric(4,2) DEFAULT 1.00 NOT NULL,
+	"achieved" boolean DEFAULT false NOT NULL,
+	"played_on" date NOT NULL,
+	"notes" text DEFAULT '' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "osu_entries_kind_check" CHECK ("kind" IN ('score','goal','training'))
+);
+--> statement-breakpoint
+CREATE TABLE "games"."pokemon_catches" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"pokemon_id" integer NOT NULL,
+	"nickname" text DEFAULT '' NOT NULL,
+	"level" integer DEFAULT 1 NOT NULL,
+	"moves" text[] DEFAULT '{}'::text[] NOT NULL,
+	"party_slot" integer,
+	"shiny" boolean DEFAULT false NOT NULL,
+	"nature" text,
+	"ability" text,
+	"ball" text,
+	"location" text,
+	"obtained" text DEFAULT 'caught' NOT NULL,
+	"stage" text DEFAULT 'story' NOT NULL,
+	"notes" text DEFAULT '' NOT NULL,
+	"caught_on" date,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_catches_user_id_game_id_party_slot_unique" UNIQUE("user_id","game_id","party_slot"),
+	CONSTRAINT "pokemon_catches_level_check" CHECK ("level" between 1 and 100),
+	CONSTRAINT "pokemon_catches_party_slot_check" CHECK ("party_slot" between 1 and 6),
+	CONSTRAINT "pokemon_catches_moves_check" CHECK (cardinality("moves") <= 4),
+	CONSTRAINT "pokemon_catches_stage_check" CHECK ("stage" IN ('story','postgame','collection'))
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_dex_numbers" (
+	"id" serial PRIMARY KEY,
+	"pokemon_id" integer NOT NULL,
+	"game_id" integer NOT NULL,
+	"dex" text NOT NULL,
+	"dex_name" text NOT NULL,
+	"number" integer NOT NULL,
+	CONSTRAINT "pokemon_dex_numbers_pokemon_id_game_id_dex_unique" UNIQUE("pokemon_id","game_id","dex")
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_game_research" (
+	"game_id" integer PRIMARY KEY,
+	"version_group" integer NOT NULL,
+	"regions" text[] NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "games"."pokemon_journeys" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"stage" text DEFAULT 'story' NOT NULL,
+	"location" text,
+	"completed" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_journeys_user_id_game_id_unique" UNIQUE("user_id","game_id"),
+	CONSTRAINT "pokemon_journeys_stage_check" CHECK ("stage" IN ('story','postgame','collection'))
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_learnsets" (
+	"id" serial PRIMARY KEY,
+	"pokemon_id" integer NOT NULL,
+	"version_group" integer NOT NULL,
+	"moves" jsonb NOT NULL,
+	CONSTRAINT "pokemon_learnsets_pokemon_id_version_group_unique" UNIQUE("pokemon_id","version_group")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."pokemon_milestones" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"key" text NOT NULL,
+	"title" text NOT NULL,
+	"category" text NOT NULL,
+	"stage" text DEFAULT 'story' NOT NULL,
+	"done" boolean DEFAULT false NOT NULL,
+	"notes" text DEFAULT '' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_milestones_user_id_game_id_key_unique" UNIQUE("user_id","game_id","key")
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_moves" (
+	"id" integer PRIMARY KEY,
+	"name" text NOT NULL,
+	"type" text NOT NULL,
+	"category" text NOT NULL,
+	"power" integer,
+	"accuracy" integer,
+	"pp" integer,
+	"priority" integer NOT NULL,
+	"target" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."pokemon_research" (
+	"pokemon_id" integer PRIMARY KEY,
+	"facts" jsonb NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "games"."pokemon_seen" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"pokemon_id" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "pokemon_seen_user_id_game_id_pokemon_id_unique" UNIQUE("user_id","game_id","pokemon_id")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."tracker_challenge_progress" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"challenge_id" integer NOT NULL,
+	"current" integer DEFAULT 0 NOT NULL,
+	"done" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tracker_challenge_progress_user_id_challenge_id_unique" UNIQUE("user_id","challenge_id"),
+	CONSTRAINT "tracker_challenge_progress_current_check" CHECK ("current" >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE "ref"."tracker_challenges" (
+	"id" serial PRIMARY KEY,
+	"game_id" integer NOT NULL,
+	"key" text NOT NULL,
+	"name" text NOT NULL,
+	"category" text NOT NULL,
+	"requirement" text NOT NULL,
+	"reward" text,
+	"icon" text,
+	"target" integer,
+	"source_url" text NOT NULL,
+	CONSTRAINT "tracker_challenges_game_id_key_unique" UNIQUE("game_id","key")
+);
+--> statement-breakpoint
+CREATE TABLE "games"."tracker_ranks" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"game_id" integer NOT NULL,
+	"level" integer DEFAULT 1 NOT NULL,
+	"prestige" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tracker_ranks_user_id_game_id_unique" UNIQUE("user_id","game_id"),
+	CONSTRAINT "tracker_ranks_level_check" CHECK ("level" between 1 and 10000),
+	CONSTRAINT "tracker_ranks_prestige_check" CHECK ("prestige" between 0 and 1000)
+);
+--> statement-breakpoint
+CREATE TABLE "games"."tracker_weapon_ranks" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"item_id" integer NOT NULL,
+	"level" integer DEFAULT 1 NOT NULL,
+	"prestige" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tracker_weapon_ranks_user_id_item_id_unique" UNIQUE("user_id","item_id"),
+	CONSTRAINT "tracker_weapon_ranks_level_check" CHECK ("level" between 1 and 10000),
+	CONSTRAINT "tracker_weapon_ranks_prestige_check" CHECK ("prestige" between 0 and 1000)
+);
+--> statement-breakpoint
+CREATE TABLE "animaldex"."animals" (
+	"id" serial PRIMARY KEY,
+	"species" text NOT NULL,
+	"breed" text,
+	"animal_name" text,
+	"description" text,
+	"ai_breed_suggestion" text,
+	"ai_breed_confidence" double precision,
+	"submitted_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"accepted_at" timestamp with time zone,
+	"denied_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "animaldex"."sighting_photos" (
+	"id" serial PRIMARY KEY,
+	"sighting_id" integer NOT NULL,
+	"r2_key" text NOT NULL,
+	"url" text NOT NULL,
+	"sort_order" integer DEFAULT 0 NOT NULL,
+	"uploaded_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "animaldex"."sightings" (
+	"id" serial PRIMARY KEY,
+	"animal_id" integer NOT NULL,
+	"reporter_name" text,
+	"seen_at" timestamp with time zone NOT NULL,
+	"lat" double precision NOT NULL,
+	"lng" double precision NOT NULL,
+	"submitted_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"accepted_at" timestamp with time zone,
+	"denied_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "meta"."columns" (
+	"id" integer PRIMARY KEY GENERATED BY DEFAULT AS IDENTITY (sequence name "meta"."columns_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 2147483647 START WITH 1 CACHE 1),
+	"table_id" integer NOT NULL,
+	"column_name" text NOT NULL,
+	"label" text,
+	"ui_type" text NOT NULL,
+	"options" jsonb DEFAULT '{}' NOT NULL,
+	"position" integer DEFAULT 0 NOT NULL,
+	"hidden" boolean DEFAULT false NOT NULL,
+	"help_text" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "columns_table_id_column_name_key" UNIQUE("table_id","column_name"),
+	CONSTRAINT "columns_ui_type_check" CHECK (ui_type IN ('text','longtext','url','image','number','cents','date','datetime','bool','select','multiselect','fk','json'))
+);
+--> statement-breakpoint
+CREATE TABLE "meta"."tables" (
+	"id" integer PRIMARY KEY GENERATED BY DEFAULT AS IDENTITY (sequence name "meta"."tables_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 2147483647 START WITH 1 CACHE 1),
+	"schema_name" text NOT NULL,
+	"table_name" text NOT NULL,
+	"slug" text NOT NULL CONSTRAINT "tables_slug_key" UNIQUE,
+	"display_name" text NOT NULL,
+	"description" text,
+	"icon" text,
+	"picture_url" text,
+	"kind" text NOT NULL,
+	"editable" boolean DEFAULT true NOT NULL,
+	"has_done" boolean DEFAULT false NOT NULL,
+	"default_sort" text,
+	"sort_order" integer DEFAULT 0 NOT NULL,
+	"archived_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "tables_schema_name_table_name_key" UNIQUE("schema_name","table_name"),
+	CONSTRAINT "tables_slug_check" CHECK (slug ~ '^[a-z0-9][a-z0-9-]{0,62}$'),
+	CONSTRAINT "tables_kind_check" CHECK (kind IN ('list','core','ref'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."accounts" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"name" text NOT NULL,
+	"opening_balance_cents" integer DEFAULT 0 NOT NULL,
+	"kind" text DEFAULT 'spendable' NOT NULL,
+	"color" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "accounts_user_id_name_unique" UNIQUE("user_id","name"),
+	CONSTRAINT "accounts_kind_check" CHECK (kind IN ('spendable','investment'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."forecasts" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"date" date NOT NULL,
+	"description" text NOT NULL,
+	"amount_cents" integer NOT NULL,
+	"account_id" integer,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "money"."insurances" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"name" text NOT NULL,
+	"provider" text,
+	"coverage" text,
+	"premium_cents" integer,
+	"cadence" text DEFAULT 'monthly' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "insurances_cadence_check" CHECK (cadence IN ('weekly','monthly','yearly'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."projection_settings" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL UNIQUE,
+	"investment_account_id" integer,
+	"reserve_cents" integer DEFAULT 100000 NOT NULL,
+	"annual_return_percent" numeric(5,2) DEFAULT '5.00' NOT NULL,
+	"contribution_mode" text DEFAULT 'excess' NOT NULL,
+	"include_recurring" boolean DEFAULT true NOT NULL,
+	"fixed_monthly_cents" integer DEFAULT 0 NOT NULL,
+	"end_date" date,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "projection_settings_contribution_mode_check" CHECK (contribution_mode IN ('excess','fixed'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."recurring" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"name" text NOT NULL,
+	"amount_cents" integer NOT NULL,
+	"cadence" text NOT NULL,
+	"starts_on" date,
+	"ends_on" date,
+	"account_id" integer,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "recurring_cadence_check" CHECK (cadence IN ('weekly','monthly','yearly'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."transactions" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"account_id" integer NOT NULL,
+	"date" date NOT NULL,
+	"description" text NOT NULL,
+	"amount_cents" integer NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "money"."utility_readings" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"date" date NOT NULL,
+	"reading" numeric(12,3) NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "utility_readings_kind_check" CHECK (kind IN ('electricity','gas','water'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."utility_settings" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"kind" text NOT NULL,
+	"rate_per_unit" numeric(12,4) DEFAULT '0' NOT NULL,
+	"monthly_advance_cents" integer DEFAULT 0 NOT NULL,
+	"billing_start" date,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "utility_settings_user_id_kind_unique" UNIQUE("user_id","kind"),
+	CONSTRAINT "utility_settings_kind_check" CHECK (kind IN ('electricity','gas','water'))
+);
+--> statement-breakpoint
+CREATE TABLE "money"."wishlist" (
+	"id" serial PRIMARY KEY,
+	"user_id" text NOT NULL,
+	"name" text NOT NULL,
+	"estimated_cents" integer,
+	"priority" integer DEFAULT 3 NOT NULL,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "cs"."item_dimensions" (
+	"item_id" integer,
+	"key" text,
+	"value" text NOT NULL,
+	CONSTRAINT "item_dimensions_pkey" PRIMARY KEY("item_id","key")
+);
+--> statement-breakpoint
+CREATE TABLE "cs"."items" (
+	"id" serial PRIMARY KEY,
+	"market_hash_name" text NOT NULL,
+	"name" text NOT NULL,
+	"icon_url" text,
+	"item_type" text,
+	"first_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "cs"."price_observations" (
+	"id" bigint PRIMARY KEY GENERATED ALWAYS AS IDENTITY (sequence name "cs"."price_observations_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+	"item_id" integer NOT NULL,
+	"source" text NOT NULL,
+	"currency" text NOT NULL,
+	"observed_at" timestamp with time zone NOT NULL,
+	"price_cents" integer NOT NULL,
+	"volume" integer,
+	"kind" text NOT NULL,
+	"imported_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "cs"."price_streams" (
+	"source" text,
+	"currency" text,
+	"kind" text,
+	CONSTRAINT "price_streams_pkey" PRIMARY KEY("source","currency","kind")
+);
+--> statement-breakpoint
+CREATE TABLE "house"."alert_rules" (
+	"id" serial PRIMARY KEY,
+	"name" text NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"offer" text DEFAULT 'rent' NOT NULL,
+	"min_price" integer,
+	"max_price" integer,
+	"min_area" integer,
+	"min_bedrooms" integer,
+	"cities" text[] DEFAULT '{}'::text[] NOT NULL,
+	"property_types" text[] DEFAULT '{}'::text[] NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "alert_rules_offer_check" CHECK (offer IN ('rent', 'buy'))
+);
+--> statement-breakpoint
+CREATE TABLE "house"."listings" (
+	"id" serial PRIMARY KEY,
+	"source" text NOT NULL,
+	"source_id" text NOT NULL,
+	"external_id" text,
+	"url" text NOT NULL,
+	"offer" text NOT NULL,
+	"property_type" text NOT NULL,
+	"title" text,
+	"street" text,
+	"postal_code" text,
+	"city" text,
+	"city_slug" text,
+	"neighbourhood" text,
+	"price_eur" integer,
+	"area_m2" integer,
+	"rooms" integer,
+	"bedrooms" integer,
+	"bathrooms" integer,
+	"construction_year" integer,
+	"energy_label" text,
+	"interior" text,
+	"deposit_eur" integer,
+	"available_from" text,
+	"contract_type" text,
+	"agent" text,
+	"image_url" text,
+	"description" text,
+	"features" jsonb DEFAULT '{}' NOT NULL,
+	"lat" double precision,
+	"lng" double precision,
+	"offered_at" timestamp with time zone,
+	"first_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"first_seen_lane" text DEFAULT 'slow' NOT NULL,
+	"last_seen_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"detail_fetched_at" timestamp with time zone,
+	"removed_at" timestamp with time zone,
+	"alerted_at" timestamp with time zone,
+	"status" text,
+	"notes" text,
+	CONSTRAINT "listings_offer_check" CHECK (offer IN ('rent', 'buy')),
+	CONSTRAINT "listings_price_eur_check" CHECK (price_eur IS NULL OR price_eur >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE "house"."price_history" (
+	"listing_id" integer,
+	"observed_at" timestamp with time zone DEFAULT now(),
+	"price_eur" integer NOT NULL,
+	CONSTRAINT "price_history_pkey" PRIMARY KEY("listing_id","observed_at")
+);
+--> statement-breakpoint
+CREATE TABLE "house"."searches" (
+	"search_url" text PRIMARY KEY,
+	"source" text NOT NULL,
+	"lane" text NOT NULL,
+	"first_synced_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_synced_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_found" integer DEFAULT 0 NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "house"."worker_runs" (
+	"id" bigint PRIMARY KEY GENERATED ALWAYS AS IDENTITY (sequence name "house"."worker_runs_id_seq" INCREMENT BY 1 MINVALUE 1 MAXVALUE 9223372036854775807 START WITH 1 CACHE 1),
+	"source" text NOT NULL,
+	"lane" text NOT NULL,
+	"url" text NOT NULL,
+	"status" text NOT NULL,
+	"http_status" integer,
+	"found" integer,
+	"duration_ms" integer,
+	"message" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX "account_userId_idx" ON "auth"."account" ("user_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "account_issuer_account_id_unique" ON "auth"."account" ("issuer","account_id");--> statement-breakpoint
+CREATE INDEX "session_userId_idx" ON "auth"."session" ("user_id");--> statement-breakpoint
+CREATE INDEX "verification_identifier_idx" ON "auth"."verification" ("identifier");--> statement-breakpoint
+CREATE INDEX "pokemon_encounters_pokemon_id_game_id_index" ON "ref"."pokemon_encounters" ("pokemon_id","game_id");--> statement-breakpoint
+CREATE INDEX "pokemon_encounters_location_id_index" ON "ref"."pokemon_encounters" ("location_id");--> statement-breakpoint
+CREATE INDEX "pokemon_evolutions_game_id_index" ON "ref"."pokemon_evolutions" ("game_id");--> statement-breakpoint
+CREATE INDEX "pokemon_game_entries_game_id_index" ON "ref"."pokemon_game_entries" ("game_id");--> statement-breakpoint
+CREATE INDEX "catch_em_all_entries_user_id_index" ON "games"."catch_em_all_entries" ("user_id");--> statement-breakpoint
+CREATE INDEX "catch_em_all_games_user_id_index" ON "games"."catch_em_all_games" ("user_id");--> statement-breakpoint
+CREATE INDEX "tracker_items_game_id_index" ON "ref"."tracker_items" ("game_id");--> statement-breakpoint
+CREATE INDEX "tracker_progress_user_id_index" ON "games"."tracker_progress" ("user_id");--> statement-breakpoint
+CREATE INDEX "osu_entries_user_id_kind_index" ON "games"."osu_entries" ("user_id","kind");--> statement-breakpoint
+CREATE INDEX "pokemon_catches_user_id_game_id_pokemon_id_index" ON "games"."pokemon_catches" ("user_id","game_id","pokemon_id");--> statement-breakpoint
+CREATE INDEX "pokemon_dex_numbers_game_id_index" ON "ref"."pokemon_dex_numbers" ("game_id");--> statement-breakpoint
+CREATE INDEX "pokemon_seen_user_id_index" ON "games"."pokemon_seen" ("user_id");--> statement-breakpoint
+CREATE INDEX "columns_table_id_index" ON "meta"."columns" ("table_id");--> statement-breakpoint
+CREATE INDEX "accounts_user_id_index" ON "money"."accounts" ("user_id");--> statement-breakpoint
+CREATE INDEX "forecasts_user_id_date_index" ON "money"."forecasts" ("user_id","date");--> statement-breakpoint
+CREATE INDEX "insurances_user_id_index" ON "money"."insurances" ("user_id");--> statement-breakpoint
+CREATE INDEX "recurring_user_id_index" ON "money"."recurring" ("user_id");--> statement-breakpoint
+CREATE INDEX "transactions_user_id_date_id_index" ON "money"."transactions" ("user_id","date","id");--> statement-breakpoint
+CREATE INDEX "transactions_account_id_index" ON "money"."transactions" ("account_id");--> statement-breakpoint
+CREATE INDEX "utility_readings_user_id_kind_date_index" ON "money"."utility_readings" ("user_id","kind","date");--> statement-breakpoint
+CREATE INDEX "wishlist_user_id_index" ON "money"."wishlist" ("user_id");--> statement-breakpoint
+CREATE INDEX "item_dimensions_filter_idx" ON "cs"."item_dimensions" ("key","value","item_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "items_hash_idx" ON "cs"."items" ("market_hash_name");--> statement-breakpoint
+CREATE INDEX "items_name_idx" ON "cs"."items" ("name");--> statement-breakpoint
+CREATE UNIQUE INDEX "price_observations_unique_idx" ON "cs"."price_observations" ("item_id","source","currency","observed_at","kind");--> statement-breakpoint
+CREATE INDEX "price_observations_lookup_idx" ON "cs"."price_observations" ("item_id","source","currency","observed_at");--> statement-breakpoint
+CREATE INDEX "price_observations_time_idx" ON "cs"."price_observations" ("observed_at");--> statement-breakpoint
+CREATE UNIQUE INDEX "listings_source_idx" ON "house"."listings" ("source","source_id");--> statement-breakpoint
+CREATE INDEX "listings_active_idx" ON "house"."listings" ("offer","first_seen_at" DESC) WHERE removed_at IS NULL;--> statement-breakpoint
+CREATE INDEX "listings_city_idx" ON "house"."listings" ("source","offer","city_slug");--> statement-breakpoint
+CREATE INDEX "listings_details_idx" ON "house"."listings" ("first_seen_at" DESC) WHERE detail_fetched_at IS NULL;--> statement-breakpoint
+CREATE INDEX "worker_runs_created_idx" ON "house"."worker_runs" ("created_at" DESC);--> statement-breakpoint
+ALTER TABLE "auth"."account" ADD CONSTRAINT "account_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "auth"."session" ADD CONSTRAINT "session_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "site"."task_topics" ADD CONSTRAINT "task_topics_task_id_tasks_id_fkey" FOREIGN KEY ("task_id") REFERENCES "site"."tasks"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "site"."task_topics" ADD CONSTRAINT "task_topics_topic_id_topics_id_fkey" FOREIGN KEY ("topic_id") REFERENCES "site"."topics"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."catch_em_all_settings" ADD CONSTRAINT "catch_em_all_settings_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_encounters" ADD CONSTRAINT "pokemon_encounters_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_encounters" ADD CONSTRAINT "pokemon_encounters_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_encounters" ADD CONSTRAINT "pokemon_encounters_location_id_pokemon_locations_id_fkey" FOREIGN KEY ("location_id") REFERENCES "ref"."pokemon_locations"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_evolutions" ADD CONSTRAINT "pokemon_evolutions_from_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("from_pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_evolutions" ADD CONSTRAINT "pokemon_evolutions_to_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("to_pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_evolutions" ADD CONSTRAINT "pokemon_evolutions_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_game_entries" ADD CONSTRAINT "pokemon_game_entries_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_game_entries" ADD CONSTRAINT "pokemon_game_entries_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."catch_em_all_entries" ADD CONSTRAINT "catch_em_all_entries_HeABXvGNiB6D_fkey" FOREIGN KEY ("pokemon_game_entry_id") REFERENCES "ref"."pokemon_game_entries"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."catch_em_all_entries" ADD CONSTRAINT "catch_em_all_entries_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."catch_em_all_games" ADD CONSTRAINT "catch_em_all_games_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."catch_em_all_games" ADD CONSTRAINT "catch_em_all_games_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."tracker_items" ADD CONSTRAINT "tracker_items_game_id_tracker_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."tracker_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_progress" ADD CONSTRAINT "tracker_progress_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_progress" ADD CONSTRAINT "tracker_progress_item_id_tracker_items_id_fkey" FOREIGN KEY ("item_id") REFERENCES "ref"."tracker_items"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."osu_entries" ADD CONSTRAINT "osu_entries_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_catches" ADD CONSTRAINT "pokemon_catches_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_catches" ADD CONSTRAINT "pokemon_catches_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_catches" ADD CONSTRAINT "pokemon_catches_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_dex_numbers" ADD CONSTRAINT "pokemon_dex_numbers_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_dex_numbers" ADD CONSTRAINT "pokemon_dex_numbers_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_game_research" ADD CONSTRAINT "pokemon_game_research_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_journeys" ADD CONSTRAINT "pokemon_journeys_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_journeys" ADD CONSTRAINT "pokemon_journeys_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_learnsets" ADD CONSTRAINT "pokemon_learnsets_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_milestones" ADD CONSTRAINT "pokemon_milestones_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_milestones" ADD CONSTRAINT "pokemon_milestones_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."pokemon_research" ADD CONSTRAINT "pokemon_research_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_seen" ADD CONSTRAINT "pokemon_seen_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_seen" ADD CONSTRAINT "pokemon_seen_game_id_pokemon_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."pokemon_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."pokemon_seen" ADD CONSTRAINT "pokemon_seen_pokemon_id_pokemon_id_fkey" FOREIGN KEY ("pokemon_id") REFERENCES "ref"."pokemon"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_challenge_progress" ADD CONSTRAINT "tracker_challenge_progress_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_challenge_progress" ADD CONSTRAINT "tracker_challenge_progress_HtzyFtOyUAhk_fkey" FOREIGN KEY ("challenge_id") REFERENCES "ref"."tracker_challenges"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "ref"."tracker_challenges" ADD CONSTRAINT "tracker_challenges_game_id_tracker_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."tracker_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_ranks" ADD CONSTRAINT "tracker_ranks_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_ranks" ADD CONSTRAINT "tracker_ranks_game_id_tracker_games_id_fkey" FOREIGN KEY ("game_id") REFERENCES "ref"."tracker_games"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_weapon_ranks" ADD CONSTRAINT "tracker_weapon_ranks_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "games"."tracker_weapon_ranks" ADD CONSTRAINT "tracker_weapon_ranks_item_id_tracker_items_id_fkey" FOREIGN KEY ("item_id") REFERENCES "ref"."tracker_items"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "animaldex"."sighting_photos" ADD CONSTRAINT "sighting_photos_sighting_id_sightings_id_fkey" FOREIGN KEY ("sighting_id") REFERENCES "animaldex"."sightings"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "animaldex"."sightings" ADD CONSTRAINT "sightings_animal_id_animals_id_fkey" FOREIGN KEY ("animal_id") REFERENCES "animaldex"."animals"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "meta"."columns" ADD CONSTRAINT "columns_table_id_tables_id_fkey" FOREIGN KEY ("table_id") REFERENCES "meta"."tables"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."accounts" ADD CONSTRAINT "accounts_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."forecasts" ADD CONSTRAINT "forecasts_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."forecasts" ADD CONSTRAINT "forecasts_account_id_accounts_id_fkey" FOREIGN KEY ("account_id") REFERENCES "money"."accounts"("id") ON DELETE SET NULL;--> statement-breakpoint
+ALTER TABLE "money"."insurances" ADD CONSTRAINT "insurances_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."projection_settings" ADD CONSTRAINT "projection_settings_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."projection_settings" ADD CONSTRAINT "projection_settings_investment_account_id_accounts_id_fkey" FOREIGN KEY ("investment_account_id") REFERENCES "money"."accounts"("id") ON DELETE SET NULL;--> statement-breakpoint
+ALTER TABLE "money"."recurring" ADD CONSTRAINT "recurring_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."recurring" ADD CONSTRAINT "recurring_account_id_accounts_id_fkey" FOREIGN KEY ("account_id") REFERENCES "money"."accounts"("id") ON DELETE SET NULL;--> statement-breakpoint
+ALTER TABLE "money"."transactions" ADD CONSTRAINT "transactions_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."transactions" ADD CONSTRAINT "transactions_account_id_accounts_id_fkey" FOREIGN KEY ("account_id") REFERENCES "money"."accounts"("id");--> statement-breakpoint
+ALTER TABLE "money"."utility_readings" ADD CONSTRAINT "utility_readings_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."utility_settings" ADD CONSTRAINT "utility_settings_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "money"."wishlist" ADD CONSTRAINT "wishlist_user_id_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "auth"."user"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "cs"."item_dimensions" ADD CONSTRAINT "item_dimensions_item_id_items_id_fkey" FOREIGN KEY ("item_id") REFERENCES "cs"."items"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "cs"."price_observations" ADD CONSTRAINT "price_observations_item_id_items_id_fkey" FOREIGN KEY ("item_id") REFERENCES "cs"."items"("id") ON DELETE CASCADE;--> statement-breakpoint
+ALTER TABLE "house"."price_history" ADD CONSTRAINT "price_history_listing_id_listings_id_fkey" FOREIGN KEY ("listing_id") REFERENCES "house"."listings"("id") ON DELETE CASCADE;

drizzle/20261024002120_health/migration.sql

@@ -0,0 +1,148 @@
+CREATE SCHEMA "health";
+--> statement-breakpoint
+CREATE TABLE "health"."appointments" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"date" date NOT NULL,
+	"type" text DEFAULT 'appointment' NOT NULL,
+	"provider" text,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "appointments_type_check" CHECK ("type" IN ('appointment','checkup','condition','test','procedure','other')),
+	CONSTRAINT "appointments_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE TABLE "health"."body_measurements" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"date" date NOT NULL,
+	"weight_kg" numeric(5,2),
+	"waist_cm" numeric(5,1),
+	"body_fat_pct" numeric(4,1),
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "body_measurements_any_check" CHECK ("weight_kg" IS NOT NULL OR "waist_cm" IS NOT NULL OR "body_fat_pct" IS NOT NULL),
+	CONSTRAINT "body_measurements_weight_check" CHECK ("weight_kg" IS NULL OR "weight_kg" BETWEEN 20 AND 400),
+	CONSTRAINT "body_measurements_waist_check" CHECK ("waist_cm" IS NULL OR "waist_cm" BETWEEN 30 AND 250),
+	CONSTRAINT "body_measurements_fat_check" CHECK ("body_fat_pct" IS NULL OR "body_fat_pct" BETWEEN 1 AND 75),
+	CONSTRAINT "body_measurements_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE TABLE "health"."medications" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"name" text NOT NULL,
+	"kind" text DEFAULT 'medication' NOT NULL,
+	"dose" text,
+	"frequency" text,
+	"start_date" date,
+	"stop_date" date,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "medications_name_check" CHECK (length(btrim("name")) > 0),
+	CONSTRAINT "medications_kind_check" CHECK ("kind" IN ('medication','supplement')),
+	CONSTRAINT "medications_dates_check" CHECK ("stop_date" IS NULL OR "start_date" IS NULL OR "stop_date" >= "start_date")
+);
+--> statement-breakpoint
+CREATE TABLE "health"."nutrition_daily" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"date" date NOT NULL CONSTRAINT "nutrition_daily_date_key" UNIQUE,
+	"kcal" integer,
+	"protein_g" numeric(5,1),
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "nutrition_daily_kcal_check" CHECK ("kcal" IS NULL OR "kcal" BETWEEN 0 AND 20000),
+	CONSTRAINT "nutrition_daily_protein_check" CHECK ("protein_g" IS NULL OR "protein_g" BETWEEN 0 AND 1000),
+	CONSTRAINT "nutrition_daily_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE TABLE "health"."sleep" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"date" date NOT NULL CONSTRAINT "sleep_date_key" UNIQUE,
+	"bedtime" timestamp with time zone NOT NULL,
+	"wake_time" timestamp with time zone NOT NULL,
+	"hours" numeric(4,2) GENERATED ALWAYS AS (round((extract(epoch from (wake_time - bedtime)) / 3600)::numeric, 2)) STORED,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "sleep_order_check" CHECK ("wake_time" > "bedtime"),
+	CONSTRAINT "sleep_length_check" CHECK ("wake_time" - "bedtime" <= interval '24 hours'),
+	CONSTRAINT "sleep_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE TABLE "health"."vaccinations" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"vaccine" text NOT NULL,
+	"target" text,
+	"dose_no" integer,
+	"date" date NOT NULL,
+	"batch_lot" text,
+	"provider" text,
+	"country" text,
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "vaccinations_vaccine_check" CHECK (length(btrim("vaccine")) > 0),
+	CONSTRAINT "vaccinations_dose_no_check" CHECK ("dose_no" IS NULL OR "dose_no" BETWEEN 1 AND 20),
+	CONSTRAINT "vaccinations_country_check" CHECK ("country" IS NULL OR "country" ~ '^[A-Z]{2}$'),
+	CONSTRAINT "vaccinations_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE TABLE "health"."workouts" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+	"date" date NOT NULL,
+	"session_id" uuid,
+	"exercise" text NOT NULL,
+	"sets" integer,
+	"reps" integer,
+	"load_kg" numeric(6,2),
+	"rpe" numeric(3,1),
+	"notes" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "workouts_exercise_check" CHECK (length(btrim("exercise")) > 0),
+	CONSTRAINT "workouts_sets_check" CHECK ("sets" IS NULL OR "sets" BETWEEN 1 AND 100),
+	CONSTRAINT "workouts_reps_check" CHECK ("reps" IS NULL OR "reps" BETWEEN 0 AND 1000),
+	CONSTRAINT "workouts_load_check" CHECK ("load_kg" IS NULL OR "load_kg" BETWEEN 0 AND 1000),
+	CONSTRAINT "workouts_rpe_check" CHECK ("rpe" IS NULL OR "rpe" BETWEEN 1 AND 10),
+	CONSTRAINT "workouts_date_check" CHECK ("date" >= DATE '1900-01-01')
+);
+--> statement-breakpoint
+CREATE INDEX "appointments_date_idx" ON "health"."appointments" ("date");--> statement-breakpoint
+CREATE INDEX "body_measurements_date_idx" ON "health"."body_measurements" ("date");--> statement-breakpoint
+CREATE INDEX "medications_start_date_idx" ON "health"."medications" ("start_date");--> statement-breakpoint
+CREATE INDEX "medications_stop_date_idx" ON "health"."medications" ("stop_date");--> statement-breakpoint
+CREATE INDEX "vaccinations_date_idx" ON "health"."vaccinations" ("date");--> statement-breakpoint
+CREATE INDEX "workouts_date_idx" ON "health"."workouts" ("date");--> statement-breakpoint
+CREATE INDEX "workouts_session_idx" ON "health"."workouts" ("session_id");
+-- Hand-written below this line (not generated by drizzle-kit).
+-- updated_at triggers, same as every other core table (07_triggers_meta_grants.sql).
+DO $$
+DECLARE t text;
+BEGIN
+  IF to_regprocedure('meta.touch_updated_at()') IS NOT NULL THEN
+    FOREACH t IN ARRAY ARRAY['vaccinations','body_measurements','workouts','nutrition_daily','sleep','medications','appointments'] LOOP
+      EXECUTE format('CREATE TRIGGER touch_updated_at BEFORE UPDATE ON health.%I FOR EACH ROW EXECUTE FUNCTION meta.touch_updated_at()', t);
+    END LOOP;
+  END IF;
+END $$;
+--> statement-breakpoint
+-- Privacy: health data is readable/writable by the app role only. Unlike the other core
+-- schemas it is deliberately NOT granted to personal_ro, and it is not registered in
+-- meta.tables (so the generic list/table GUI never shows it).
+-- Grants only run on prod (migrations run as the schema owner `personal`); the dev DB
+-- (owned by personal_dev) carries no prod grants, matching db-refresh-dev.sh.
+REVOKE ALL ON SCHEMA health FROM PUBLIC;
+--> statement-breakpoint
+DO $$
+BEGIN
+  IF current_user = 'personal' AND EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'personal_app') THEN
+    GRANT USAGE ON SCHEMA health TO personal_app;
+    GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA health TO personal_app;
+    ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA health
+      GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO personal_app;
+    ALTER DEFAULT PRIVILEGES FOR ROLE personal IN SCHEMA health
+      GRANT USAGE, SELECT ON SEQUENCES TO personal_app;
+  END IF;
+END $$;

package.json

@@ -15,23 +15,18 @@
 		"test:unit": "vitest",
 		"db:push": "drizzle-kit push",
 		"db:generate": "drizzle-kit generate",
-		"db:migrate": "drizzle-kit migrate",
+		"db:migrate": "bun scripts/db-migrate.ts",
+		"db:refresh-dev": "bash scripts/db-refresh-dev.sh",
+		"preview:branch": "bash scripts/preview.sh",
 		"db:studio": "drizzle-kit studio",
 		"db:seed": "bun scripts/seed-catalog.ts",
 		"db:seed:cod": "bun scripts/seed-cod-catalog.ts",
-		"db:migrate:auth": "bun scripts/migrate-auth-catalog.ts",
-		"db:migrate:foundation": "bun scripts/migrate-foundation.ts",
-		"db:migrate:money-tracker": "bun scripts/migrate-money-tracker.ts",
-		"db:migrate:game-tracker": "bun scripts/migrate-game-tracker.ts",
-		"db:migrate:cs-prices": "bun scripts/migrate-cs-prices.ts",
 		"cs-prices:ingest": "bun scripts/ingest-cs-prices.ts",
-		"db:migrate:house-tracker": "bun scripts/migrate-house-tracker.ts",
 		"house:worker": "bun scripts/house-worker.ts",
 		"auth:role": "bun scripts/set-admin.ts",
 		"catalog:build": "python3 scripts/build-pokemon-catalog.py",
 		"catalog:cod": "python3 scripts/build-cod-catalog.py && prettier --write data/call-of-duty.json",
 		"test:auth": "node --env-file=.env node_modules/@playwright/test/cli.js test --config playwright.auth.config.ts",
-		"db:migrate:tracker-journal": "bun scripts/migrate-tracker-journal.ts",
 		"catalog:research": "python3 scripts/build-pokemon-research.py",
 		"db:seed:research": "bun scripts/seed-pokemon-research.ts",
 		"db:seed:challenges": "bun scripts/seed-cod-challenges.ts",

scripts/animaldex-uuid-to-serial.sql

@@ -1,84 +0,0 @@
--- One-off: convert animaldex ids from uuid to serial, keeping existing rows.
--- Postgres can't cast uuid -> integer, so db:push can't do this itself.
---
--- Run BEFORE re-running db:push, once per database:
---   psql "$DB_URL" -v ON_ERROR_STOP=1 -f scripts/animaldex-uuid-to-serial.sql
---
--- Safe to run on an empty database too. Everything is in one transaction, so a
--- failure leaves the database untouched.
-
-BEGIN;
-
--- the failed push created this before erroring out
-DROP SEQUENCE IF EXISTS animals_id_seq;
-
--- 1. new integer ids alongside the uuid ones
-ALTER TABLE animals ADD COLUMN new_id serial;
-ALTER TABLE sightings ADD COLUMN new_id serial;
-ALTER TABLE photos ADD COLUMN new_id serial;
-
--- 2. translate the foreign keys through the uuid -> integer mapping
-ALTER TABLE sightings ADD COLUMN new_animal_id integer;
-UPDATE sightings s SET new_animal_id = a.new_id FROM animals a WHERE a.id = s.animal_id;
-
-ALTER TABLE photos ADD COLUMN new_sighting_id integer;
-UPDATE photos p SET new_sighting_id = s.new_id FROM sightings s WHERE s.id = p.sighting_id;
-
--- 3. drop the old foreign keys (names vary by how they were created)
-DO $$
-DECLARE r record;
-BEGIN
-	FOR r IN
-		SELECT conrelid::regclass AS tbl, conname
-		FROM pg_constraint
-		WHERE contype = 'f' AND conrelid IN ('sightings'::regclass, 'photos'::regclass)
-	LOOP
-		EXECUTE format('ALTER TABLE %s DROP CONSTRAINT %I', r.tbl, r.conname);
-	END LOOP;
-END $$;
-
--- 4. swap the foreign key columns
-ALTER TABLE photos DROP COLUMN sighting_id;
-ALTER TABLE photos RENAME COLUMN new_sighting_id TO sighting_id;
-ALTER TABLE photos ALTER COLUMN sighting_id SET NOT NULL;
-
-ALTER TABLE sightings DROP COLUMN animal_id;
-ALTER TABLE sightings RENAME COLUMN new_animal_id TO animal_id;
-ALTER TABLE sightings ALTER COLUMN animal_id SET NOT NULL;
-
--- 5. swap the primary keys
-DO $$
-DECLARE r record;
-BEGIN
-	FOR r IN
-		SELECT conrelid::regclass AS tbl, conname
-		FROM pg_constraint
-		WHERE contype = 'p'
-			AND conrelid IN ('animals'::regclass, 'sightings'::regclass, 'photos'::regclass)
-	LOOP
-		EXECUTE format('ALTER TABLE %s DROP CONSTRAINT %I', r.tbl, r.conname);
-	END LOOP;
-END $$;
-
-ALTER TABLE animals DROP COLUMN id;
-ALTER TABLE animals RENAME COLUMN new_id TO id;
-ALTER TABLE animals ADD PRIMARY KEY (id);
-ALTER SEQUENCE animals_new_id_seq RENAME TO animals_id_seq;
-
-ALTER TABLE sightings DROP COLUMN id;
-ALTER TABLE sightings RENAME COLUMN new_id TO id;
-ALTER TABLE sightings ADD PRIMARY KEY (id);
-ALTER SEQUENCE sightings_new_id_seq RENAME TO sightings_id_seq;
-
-ALTER TABLE photos DROP COLUMN id;
-ALTER TABLE photos RENAME COLUMN new_id TO id;
-ALTER TABLE photos ADD PRIMARY KEY (id);
-ALTER SEQUENCE photos_new_id_seq RENAME TO photos_id_seq;
-
--- 6. restore the foreign keys under the names drizzle expects
-ALTER TABLE sightings ADD CONSTRAINT sightings_animal_id_animals_id_fkey
-	FOREIGN KEY (animal_id) REFERENCES animals(id) ON DELETE CASCADE;
-ALTER TABLE photos ADD CONSTRAINT photos_sighting_id_sightings_id_fkey
-	FOREIGN KEY (sighting_id) REFERENCES sightings(id) ON DELETE CASCADE;
-
-COMMIT;

scripts/audit-tracker-data.ts

@@ -3,9 +3,10 @@ import postgres from 'postgres';
 // Read-only fingerprints: lets a deployment verify saved progress without logging it.
 if (!process.env.DB_URL) throw new Error('DB_URL is required');
 const client = postgres(process.env.DB_URL, { max: 1 });
+// All saved progress lives in schema `games` since the schema reorg.
 const tables = [
-	'user_entries',
-	'user_games',
+	'catch_em_all_entries',
+	'catch_em_all_games',
 	'catch_em_all_settings',
 	'pokemon_journeys',
 	'pokemon_catches',
@@ -20,11 +21,11 @@ const tables = [
 try {
 	const result: Record<string, unknown> = {};
 	for (const table of tables) {
-		const [exists] = await client`select to_regclass(${'public.' + table}) is not null as present`;
+		const [exists] = await client`select to_regclass(${'games.' + table}) is not null as present`;
 		if (!exists.present) continue;
 		const [row] = await client.unsafe(`select count(*)::int as rows,
 			md5(coalesce(string_agg(record, E'\\n' order by record), '')) as fingerprint
-			from (select row_to_json(t)::text as record from "${table}" t) s`);
+			from (select row_to_json(t)::text as record from games."${table}" t) s`);
 		result[table] = row;
 	}
 	console.log(JSON.stringify(result, null, 2));

scripts/auth-catalog-migration.sql

@@ -1,18 +0,0 @@
--- Additive migration for the existing domain schema. No users or progress are removed.
-ALTER TABLE "user" ADD COLUMN IF NOT EXISTS role text NOT NULL DEFAULT 'user';
-ALTER TABLE account ADD COLUMN IF NOT EXISTS issuer text;
--- Existing credentials use Better Auth's local namespace. Fail on unknown legacy
--- OAuth providers rather than silently changing which remote identity they trust.
-UPDATE account SET issuer = 'local:credential' WHERE issuer IS NULL AND provider_id = 'credential';
-UPDATE account SET issuer = 'https://accounts.google.com' WHERE issuer IS NULL AND provider_id = 'google';
-UPDATE account SET issuer = 'local:oauth:github' WHERE issuer IS NULL AND provider_id = 'github';
-UPDATE account SET issuer = 'local:oauth:osu' WHERE issuer IS NULL AND provider_id = 'osu';
-ALTER TABLE account ALTER COLUMN issuer SET NOT NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS account_issuer_account_id_unique ON account (issuer, account_id);
-ALTER TABLE games ADD COLUMN IF NOT EXISTS source_id integer;
-CREATE UNIQUE INDEX IF NOT EXISTS games_source_id_unique ON games (source_id);
-CREATE UNIQUE INDEX IF NOT EXISTS pokemon_number_unique ON pokemon (number);
-ALTER TYPE availability ADD VALUE IF NOT EXISTS 'unknown';
-CREATE TABLE IF NOT EXISTS catch_em_all_settings (
- user_id text PRIMARY KEY REFERENCES "user"(id) ON DELETE CASCADE
-);

scripts/cs-prices-migration.sql

@@ -1,45 +0,0 @@
-CREATE TABLE IF NOT EXISTS cs_market_items (
-  id serial PRIMARY KEY,
-  market_hash_name text NOT NULL,
-  name text NOT NULL,
-  icon_url text,
-  item_type text,
-  first_seen_at timestamptz NOT NULL DEFAULT now(),
-  last_seen_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE UNIQUE INDEX IF NOT EXISTS cs_market_items_hash_idx ON cs_market_items (market_hash_name);
-CREATE INDEX IF NOT EXISTS cs_market_items_name_idx ON cs_market_items (name);
-
-CREATE TABLE IF NOT EXISTS cs_item_dimensions (
-  item_id integer NOT NULL REFERENCES cs_market_items(id) ON DELETE CASCADE,
-  key text NOT NULL,
-  value text NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS cs_item_dimensions_unique_idx ON cs_item_dimensions (item_id, key);
-CREATE INDEX IF NOT EXISTS cs_item_dimensions_filter_idx ON cs_item_dimensions (key, value, item_id);
-
-CREATE TABLE IF NOT EXISTS cs_price_streams (
-  source text NOT NULL,
-  currency text NOT NULL,
-  kind text NOT NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS cs_price_streams_unique_idx
-  ON cs_price_streams (source, currency, kind);
-
-CREATE TABLE IF NOT EXISTS cs_price_observations (
-  id bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
-  item_id integer NOT NULL REFERENCES cs_market_items(id) ON DELETE CASCADE,
-  source text NOT NULL,
-  currency text NOT NULL,
-  observed_at timestamptz NOT NULL,
-  price_cents integer NOT NULL CHECK (price_cents >= 0),
-  volume integer CHECK (volume IS NULL OR volume >= 0),
-  kind text NOT NULL,
-  imported_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE UNIQUE INDEX IF NOT EXISTS cs_price_observations_unique_idx
-  ON cs_price_observations (item_id, source, currency, observed_at, kind);
-CREATE INDEX IF NOT EXISTS cs_price_observations_lookup_idx
-  ON cs_price_observations (item_id, source, currency, observed_at);
-CREATE INDEX IF NOT EXISTS cs_price_observations_time_idx
-  ON cs_price_observations (observed_at);

scripts/db-migrate.ts

@@ -0,0 +1,55 @@
+// Applies pending Drizzle migrations from ./drizzle. Runs as the schema owner
+// (DB_MIGRATE_URL, role `personal`); falls back to DB_URL for local dev.
+//
+//   bun scripts/db-migrate.ts          apply pending migrations
+//   bun scripts/db-migrate.ts --init   record the baseline as applied without running it
+//                                      (once, on a database already reorganised by the
+//                                      hand-written reorg scripts in db/reorg/)
+import { drizzle } from 'drizzle-orm/postgres-js';
+import { migrate } from 'drizzle-orm/postgres-js/migrator';
+import postgres from 'postgres';
+
+const url = process.env.DB_MIGRATE_URL || process.env.DB_URL;
+if (!url) throw new Error('Set DB_MIGRATE_URL (schema owner) or DB_URL');
+const init = process.argv.includes('--init');
+
+const client = postgres(url, { max: 1, connect_timeout: 10, onnotice: () => {} });
+try {
+	const db = drizzle({ client });
+	// Safety: never run the baseline on a database that already has data. Existing
+	// databases are brought to the baseline by the reviewed reorg scripts and then
+	// recorded with --init; only a truly empty database gets the baseline executed.
+	const [state] = await client`
+		select
+			to_regclass('drizzle.__drizzle_migrations') is not null as tracked,
+			(select count(*)::int from pg_class c join pg_namespace n on n.oid = c.relnamespace
+			 where c.relkind = 'r' and n.nspname not in ('pg_catalog', 'information_schema', 'drizzle')
+			   and n.nspname not like 'pg_toast%') as tables`;
+	const recorded = state.tracked
+		? (await client`select count(*)::int as n from drizzle.__drizzle_migrations`)[0].n
+		: 0;
+	if (!init && recorded === 0 && state.tables > 0)
+		throw new Error(
+			`Refusing to run the Drizzle baseline on a non-empty database (${state.tables} tables). ` +
+				'Apply the reorg scripts (db/reorg/) and record the baseline with --init first.'
+		);
+	if (init && state.tables === 0)
+		throw new Error('--init on an empty database: run without --init to create the schema');
+	const result = await migrate(db, {
+		migrationsFolder: new URL('../drizzle', import.meta.url).pathname,
+		migrationsSchema: 'drizzle',
+		migrationsTable: '__drizzle_migrations',
+		...(init ? { init: true } : {})
+	});
+	if (result && 'exitCode' in result) {
+		throw new Error(
+			result.exitCode === 'databaseMigrations'
+				? '--init refused: migrations are already recorded in this database'
+				: '--init refused: more than one local migration exists'
+		);
+	}
+	const [{ n }] = await client`select count(*)::int as n from drizzle.__drizzle_migrations`;
+	console.log(`${init ? 'Baseline recorded' : 'Migrations up to date'}; ${n} recorded`);
+} finally {
+	await client.end();
+}

scripts/db-refresh-dev.sh

@@ -0,0 +1,112 @@
+#!/usr/bin/env bash
+# Refresh the development database (personal_dev) from a fresh production dump.
+#
+# Prod is the source of truth for data; dev is a disposable copy of it.
+#
+# Required env (put them in .env.dev-refresh or export them; never commit real values):
+#   PROD_DB_URL    read access to prod, e.g. postgresql://personal:...@127.0.0.1:5440/personal
+#   DEV_ADMIN_URL  superuser on the dev cluster, maintenance DB, e.g. postgresql://postgres:...@127.0.0.1:5440/postgres
+#                  (not needed with PG_CONTAINER, which uses the container's local superuser)
+# Optional:
+#   DEV_DB_NAME    target database (default personal_dev)
+#   DEV_OWNER      role that owns every object in the dev DB (default personal_dev). It is the
+#                  role the dev site logs in as, so it can also run migrations there. It must not
+#                  be a member of any prod role; prod's CONNECT is not granted to it.
+#   PG_DOCKER=1    use the postgres:17-alpine image instead of local pg_dump/pg_restore
+#   PG_CONTAINER   name of the Postgres container (e.g. postgres-db-1): run every tool inside it
+#                  via `docker exec` as the local superuser. URLs are then as seen from inside
+#                  the container, e.g. PROD_DB_URL=postgresql://personal:...@127.0.0.1:5432/personal
+#   DOCKER         docker command (default "docker"; e.g. "sudo -n docker")
+#
+# What it does: dump prod (custom format) -> drop + recreate DEV_DB_NAME owned by DEV_OWNER ->
+# restore without prod ownership/grants, every object owned by DEV_OWNER -> clear sessions and
+# verification tokens so prod logins can't be reused in dev. It never writes to prod.
+set -euo pipefail
+
+cd "$(dirname "$0")/.."
+if [[ -f .env.dev-refresh ]]; then set -a; . ./.env.dev-refresh; set +a; fi
+
+: "${PROD_DB_URL:?set PROD_DB_URL (source, read-only use)}"
+DEV_DB_NAME="${DEV_DB_NAME:-personal_dev}"
+DEV_OWNER="${DEV_OWNER:-personal_dev}"
+DOCKER="${DOCKER:-docker}"
+if [[ -n "${PG_CONTAINER:-}" ]]; then
+	DEV_ADMIN_URL="${DEV_ADMIN_URL:-postgresql://postgres@localhost/postgres}"
+fi
+: "${DEV_ADMIN_URL:?set DEV_ADMIN_URL (superuser URL to the dev cluster maintenance DB)}"
+
+for ident in "$DEV_DB_NAME" "$DEV_OWNER"; do
+	if [[ ! "$ident" =~ ^[a-z_][a-z0-9_]*$ ]]; then
+		echo "DEV_DB_NAME / DEV_OWNER must be plain lowercase identifiers" >&2
+		exit 1
+	fi
+done
+case "$DEV_DB_NAME" in
+personal | personal_prod | postgres | template0 | template1)
+	echo "Refusing to overwrite '$DEV_DB_NAME'" >&2
+	exit 1
+	;;
+esac
+case "$DEV_OWNER" in
+personal | personal_app | personal_ddl | personal_ro | postgres)
+	echo "Refusing: DEV_OWNER '$DEV_OWNER' is a prod/superuser role" >&2
+	exit 1
+	;;
+esac
+
+# host:port/db of a URL (no credentials), for the "same database" guard.
+endpoint() { bun -e 'const u=new URL(process.argv[1]); console.log(`${u.hostname}:${u.port||5432}${u.pathname}`)' "$1"; }
+with_db() { bun -e 'const u=new URL(process.argv[1]); u.pathname="/"+process.argv[2]; console.log(u.toString())' "$1" "$2"; }
+
+prod_endpoint="$(endpoint "$PROD_DB_URL")"
+dev_url="$(with_db "$DEV_ADMIN_URL" "$DEV_DB_NAME")"
+if [[ "$(endpoint "$dev_url")" == "$prod_endpoint" ]]; then
+	echo "Refusing: target $DEV_DB_NAME is the prod source database ($prod_endpoint)" >&2
+	exit 1
+fi
+
+# Dump goes to stdout and restore reads stdin, so the same commands work locally,
+# in a throwaway postgres image, or inside the Postgres container.
+if [[ -n "${PG_CONTAINER:-}" ]]; then
+	pg() { $DOCKER exec -i -u postgres "$PG_CONTAINER" "$@"; }
+elif [[ "${PG_DOCKER:-0}" == 1 ]]; then
+	pg() { $DOCKER run --rm -i --network host postgres:17-alpine "$@"; }
+else
+	pg() { "$@"; }
+fi
+
+work="$(mktemp -d)"
+trap 'rm -rf "$work"' EXIT
+dump="$work/prod.dump"
+
+echo "Dumping prod ($prod_endpoint)..."
+pg pg_dump --format=custom --no-password "$PROD_DB_URL" >"$dump"
+[[ -s "$dump" ]] || { echo "Empty dump; aborting before touching $DEV_DB_NAME" >&2; exit 1; }
+pg pg_restore --list <"$dump" >/dev/null
+
+echo "Recreating $DEV_DB_NAME (owner $DEV_OWNER)..."
+pg psql -v ON_ERROR_STOP=1 -q "$DEV_ADMIN_URL" <<SQL
+SELECT count(pg_terminate_backend(pid)) AS terminated_sessions FROM pg_stat_activity WHERE datname = '$DEV_DB_NAME' AND pid <> pg_backend_pid();
+DROP DATABASE IF EXISTS "$DEV_DB_NAME";
+DO \$\$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = '$DEV_OWNER') THEN
+    EXECUTE format('CREATE ROLE %I NOLOGIN', '$DEV_OWNER');
+    RAISE NOTICE 'created role $DEV_OWNER (NOLOGIN; give it a password + LOGIN for dev use)';
+  END IF;
+END \$\$;
+CREATE DATABASE "$DEV_DB_NAME" OWNER "$DEV_OWNER";
+REVOKE CONNECT, TEMPORARY ON DATABASE "$DEV_DB_NAME" FROM PUBLIC;
+SQL
+
+echo "Restoring into $DEV_DB_NAME..."
+# --no-owner/--no-privileges + --role: everything ends up owned by DEV_OWNER and none of
+# prod's grants (personal_app, personal_ro, ...) are copied into dev.
+pg pg_restore --no-password --exit-on-error --no-owner --no-privileges --role="$DEV_OWNER" \
+	--dbname="$dev_url" <"$dump"
+
+echo "Clearing sessions and verification tokens..."
+pg psql -v ON_ERROR_STOP=1 -q "$dev_url" -c 'TRUNCATE auth.session, auth.verification'
+
+pg psql -qAt "$dev_url" -c "SELECT 'drizzle migrations recorded: ' || count(*) FROM drizzle.__drizzle_migrations"
+echo "Done. Apply pending migrations from your branch with: bun run db:migrate"

scripts/deploy-preflight.ts

@@ -17,81 +17,108 @@ if (process.env.ORIGIN !== expectedOrigin || process.env.BETTER_AUTH_URL !== exp
 const client = postgres(process.env.DB_URL, { max: 1, connect_timeout: 10 });
 try {
 	await client`select 1`;
+	// Schema layout after the reorg (auth/money/house/ref/games/cs/animaldex/site/meta/lists).
+	const required = [
+		'auth.user',
+		'auth.session',
+		'auth.account',
+		'auth.verification',
+		'money.accounts',
+		'money.transactions',
+		'money.recurring',
+		'money.forecasts',
+		'money.utility_settings',
+		'money.utility_readings',
+		'money.wishlist',
+		'money.insurances',
+		'money.projection_settings',
+		'house.listings',
+		'house.price_history',
+		'house.alert_rules',
+		'house.worker_runs',
+		'ref.pokemon',
+		'ref.pokemon_games',
+		'ref.pokemon_game_entries',
+		'ref.pokemon_locations',
+		'ref.pokemon_encounters',
+		'ref.pokemon_evolutions',
+		'ref.pokemon_research',
+		'ref.pokemon_dex_numbers',
+		'ref.pokemon_moves',
+		'ref.pokemon_learnsets',
+		'ref.pokemon_game_research',
+		'ref.tracker_games',
+		'ref.tracker_items',
+		'ref.tracker_challenges',
+		'games.catch_em_all_entries',
+		'games.catch_em_all_games',
+		'games.catch_em_all_settings',
+		'games.pokemon_journeys',
+		'games.pokemon_catches',
+		'games.pokemon_milestones',
+		'games.pokemon_seen',
+		'games.tracker_progress',
+		'games.tracker_ranks',
+		'games.tracker_weapon_ranks',
+		'games.tracker_challenge_progress',
+		'games.osu_entries',
+		'cs.items',
+		'cs.price_observations',
+		'cs.item_dimensions',
+		'cs.price_streams',
+		'animaldex.animals',
+		'animaldex.sightings',
+		'animaldex.sighting_photos',
+		'site.blog_articles',
+		'site.tasks',
+		'site.topics',
+		'site.task_topics',
+		'meta.tables',
+		'meta.columns'
+	];
+	const missing = await client<{ name: string }[]>`
+		select name from unnest(${required}::text[]) as name where to_regclass(name) is null`;
+	if (missing.length)
+		throw new Error(`Schema reorg/migrations missing: ${missing.map((m) => m.name).join(', ')}`);
 	const [schema] = await client`
 		select
 			(select count(*) from information_schema.columns
-			 where table_name = 'user' and column_name = 'role') as user_role,
+			 where table_schema = 'auth' and table_name = 'user' and column_name = 'role') as user_role,
 			(select count(*) from information_schema.columns
-			 where table_name = 'account' and column_name = 'issuer') as account_issuer,
+			 where table_schema = 'money' and table_name = 'projection_settings'
+			   and column_name = 'include_recurring' and data_type = 'boolean') as include_recurring_bool,
 			(select count(*) from information_schema.columns
-			 where table_name = 'blog_articles' and column_name = 'tags') as blog_tags,
-			to_regclass('public.catch_em_all_settings') is not null as settings_ready,
-			(select count(*) from information_schema.columns where table_name = 'lists' and column_name = 'slug') as list_slug,
-			to_regclass('public.list_item_completions') is not null as list_completions,
-			(select count(*) from information_schema.columns where table_name = 'tasks_to_topics' and column_name = 'id') as topic_link_id,
-			(select count(*) from information_schema.columns
-		 where table_name in ('animals', 'sightings', 'photos')
-		   and column_name = 'id' and data_type = 'integer') as animal_serial_ids,
-			(select count(*) from information_schema.tables
-			 where table_schema = 'public' and table_name in (
-			   'money_accounts', 'money_transactions', 'money_recurring', 'money_forecasts',
-			   'money_utility_settings', 'money_utility_readings', 'money_wishlist', 'money_insurances',
-			   'money_projection_settings'
-			 )) as money_tables,
-			(select count(*) from information_schema.columns
-			 where table_name = 'money_utility_settings' and column_name = 'billing_start') as money_billing_start,
-			(select count(*) from information_schema.tables
-			 where table_schema = 'public' and table_name in (
-			   'pokemon_locations', 'pokemon_encounters', 'pokemon_evolutions',
-			   'tracker_games', 'tracker_items', 'tracker_progress'
-			 )) as game_tracker_tables,
-			(select count(*) from information_schema.tables where table_schema='public' and table_name in (
-			 'pokemon_research','pokemon_dex_numbers','pokemon_moves','pokemon_learnsets','pokemon_game_research',
-			 'pokemon_journeys','pokemon_catches','pokemon_milestones','tracker_ranks','tracker_weapon_ranks',
-			 'tracker_challenges','tracker_challenge_progress','osu_entries','pokemon_seen'
-			)) as tracker_journal_tables,
-			(select count(*) from information_schema.columns where table_name='pokemon_journeys' and column_name='completed') as tracker_completion_column,
-			(select count(*) from information_schema.columns
-			 where table_name = 'pokemon_game_entries' and column_name = 'source') as entry_source,
-			(select count(*) from information_schema.columns
-			 where (table_name = 'money_accounts' and column_name = 'kind')
-			    or (table_name = 'money_recurring' and column_name in ('starts_on', 'ends_on'))
-			    or (table_name = 'money_wishlist' and column_name = 'priority')
-			    or (table_name = 'money_projection_settings' and column_name = 'include_recurring')) as money_projection_columns
+			 where table_schema = 'games' and table_name = 'osu_entries'
+			   and column_name in ('accuracy', 'pp', 'rate') and data_type = 'numeric') as osu_numeric,
+			(select count(*) from meta.tables where kind = 'list') as lists,
+			has_function_privilege('meta.create_list(text, text, text, boolean, jsonb, text, text, text, integer)', 'execute') as can_create_list,
+			has_schema_privilege('money', 'create') as app_has_ddl
 	`;
 	if (
 		!Number(schema.user_role) ||
-		!Number(schema.account_issuer) ||
-		!Number(schema.blog_tags) ||
-		!schema.settings_ready ||
-		!Number(schema.list_slug) ||
-		!schema.list_completions ||
-		!Number(schema.topic_link_id) ||
-		Number(schema.animal_serial_ids) !== 3 ||
-		Number(schema.money_tables) !== 9 ||
-		!Number(schema.money_billing_start) ||
-		Number(schema.money_projection_columns) !== 5 ||
-		Number(schema.game_tracker_tables) !== 6 ||
-		Number(schema.tracker_journal_tables) !== 14 ||
-		!Number(schema.tracker_completion_column) ||
-		!Number(schema.entry_source)
+		!Number(schema.include_recurring_bool) ||
+		Number(schema.osu_numeric) !== 3 ||
+		!Number(schema.lists) ||
+		!schema.can_create_list
 	) {
 		throw new Error(
-			'Required migrations or Animaldex ID conversion have not been applied to this database'
+			'The schema reorg has not been applied to this database (or grants are missing)'
 		);
 	}
+	if (schema.app_has_ddl)
+		throw new Error('DB_URL must use the app role (personal_app), not the schema owner');
 	const [catalog] = await client`
 		select
-			(select count(*) from pokemon) as pokemon,
-			(select count(*) from games where source_id is not null) as games,
-			(select count(*) from pokemon_game_entries) as entries,
-			(select count(*) from pokemon_encounters) as encounters,
-			(select count(*) from tracker_games where franchise = 'call-of-duty') as cod_games,
-			(select count(*) from pokemon_research) as pokemon_research,
-			(select count(*) from pokemon_moves) as pokemon_moves,
-			(select count(*) from pokemon_learnsets) as pokemon_learnsets,
-			(select count(*) from pokemon_dex_numbers) as pokemon_dex_numbers,
-			(select count(*) from tracker_challenges) as tracker_challenges
+			(select count(*) from ref.pokemon) as pokemon,
+			(select count(*) from ref.pokemon_games where source_id is not null) as games,
+			(select count(*) from ref.pokemon_game_entries) as entries,
+			(select count(*) from ref.pokemon_encounters) as encounters,
+			(select count(*) from ref.tracker_games where franchise = 'call-of-duty') as cod_games,
+			(select count(*) from ref.pokemon_research) as pokemon_research,
+			(select count(*) from ref.pokemon_moves) as pokemon_moves,
+			(select count(*) from ref.pokemon_learnsets) as pokemon_learnsets,
+			(select count(*) from ref.pokemon_dex_numbers) as pokemon_dex_numbers,
+			(select count(*) from ref.tracker_challenges) as tracker_challenges
 	`;
 	if (
 		Number(catalog.pokemon) < 1025 ||
@@ -109,15 +136,15 @@ try {
 		Number(catalog.tracker_challenges) < 3600
 	)
 		throw new Error(
-			'Run db:migrate:tracker-journal, db:seed:research and db:seed:challenges before deploying the tracker expansion'
+			'Run db:seed:research and db:seed:challenges before deploying the tracker expansion'
 		);
 	if (Number(catalog.cod_games) < 7) {
 		throw new Error('Call of Duty catalog has not been seeded in this database');
 	}
 	const [bo2] = await client`select rules,
-		(select count(*)::int from tracker_items i where i.game_id=g.id and i.kind='weapon') as weapons,
-		(select count(*)::int from tracker_items i where i.game_id=g.id and i.kind='weapon' and i.icon is not null) as pictures
-		from tracker_games g where slug='black-ops-2'`;
+		(select count(*)::int from ref.tracker_items i where i.game_id=g.id and i.kind='weapon') as weapons,
+		(select count(*)::int from ref.tracker_items i where i.game_id=g.id and i.kind='weapon' and i.icon is not null) as pictures
+		from ref.tracker_games g where slug='black-ops-2'`;
 	if (
 		!bo2 ||
 		bo2.rules.rankCaps?.weaponPrestige !== 2 ||

scripts/deploy-remote.sh

@@ -1,26 +1,32 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# Production is the only deployed environment (local dev uses scripts/db-refresh-dev.sh).
+#   deploy-remote.sh <sha> deploy    back up, migrate, seed, preflight, switch, health-check
+#   deploy-remote.sh <sha> rollback  back up, preflight, switch to an earlier image (no migrations;
+#                                    the database is not rolled back, restore a backup for that)
 sha=${1:?commit SHA required}
-directory=${2:?deployment directory required}
-origin=${3:?public origin required}
+mode=${2:-deploy}
 case "$sha" in
   *[!0-9a-f]*|'') echo 'Invalid image tag' >&2; exit 2 ;;
 esac
-case "$directory:$origin" in
-  /opt/personal-website:https://stanrunge.dev)
-    environment=/etc/personal-website/prod.env ;;
-  /opt/personal-website-staging:https://staging.stanrunge.dev)
-    environment=/etc/personal-website-staging/staging.env ;;
-  *) echo 'Unrecognized deployment target' >&2; exit 2 ;;
-esac
+case "$mode" in deploy|rollback) ;; *) echo 'Mode must be deploy or rollback' >&2; exit 2 ;; esac
+directory=/opt/personal-website
+origin=https://stanrunge.dev
+environment=/etc/personal-website/prod.env
+environment_name=production
 
-image="git.stanrunge.dev/stan/personal-website:$sha"
+image="git.stanrunge.dev/stan/website:$sha"
 compose="$directory/compose.prod.yml"
-if [ "$directory" = /opt/personal-website-staging ]; then
-  environment_name=staging
-else
-  environment_name=production
+# Images built before the repo rename (stan/personal-website -> stan/website) keep
+# their old local name; retag so rollbacks to those SHAs still work.
+legacy_image="git.stanrunge.dev/stan/personal-website:$sha"
+if ! sudo docker image inspect "$image" >/dev/null 2>&1 &&
+  sudo docker image inspect "$legacy_image" >/dev/null 2>&1; then
+  sudo docker tag "$legacy_image" "$image"
+fi
+if ! sudo docker image inspect "$image" >/dev/null 2>&1; then
+  echo "Image $image is not on this host" >&2; exit 1
 fi
 previous_tag=$(sed -n 's/^IMAGE_TAG=//p' "$directory/.env" | head -n 1)
 switched=0
@@ -33,17 +39,21 @@ rollback() {
 }
 trap rollback ERR
 
+# The deploy account cannot read the env file directly; check inside a container.
+if ! sudo docker run --rm --env-file "$environment" --entrypoint sh "$image" \
+  -c 'test -n "${DB_MIGRATE_URL:-}"'; then
+  echo "DB_MIGRATE_URL (schema owner) is missing from $environment" >&2; exit 1
+fi
 db_version=$(sudo docker run --rm --network backend --env-file "$environment" "$image" \
   bun scripts/print-db-server-version.ts)
 case "$db_version" in
   *[!0-9]*|'') echo 'Could not determine the PostgreSQL server version' >&2; exit 1 ;;
 esac
-if [ "$db_version" -ge 100000 ]; then
-  db_major=$((db_version / 10000))
-else
-  db_major="$((db_version / 10000)).$(((db_version / 100) % 100))"
+db_major=$((db_version / 10000))
+if [ "$db_major" -gt 17 ]; then
+  echo "Server is PostgreSQL $db_major; update the pinned postgres:17-alpine backup image" >&2; exit 1
 fi
-backup_image="postgres:${db_major}-alpine"
+backup_image=postgres:17-alpine
 backup_dir=/var/backups/personal-website
 backup_stamp=$(date -u +%Y%m%dT%H%M%SZ)
 backup_name="${environment_name}-${backup_stamp}-${sha}.dump"
@@ -53,27 +63,29 @@ sudo docker pull "$backup_image"
 sudo docker run --rm --network backend --env-file "$environment" \
   --volume "$backup_dir:/backups" \
   --env "BACKUP_FILE=$backup_name" "$backup_image" \
-  sh -eu -c 'chmod 0700 /backups; umask 077; pg_dump --format=custom --no-owner --no-acl --file="/backups/$BACKUP_FILE" "$DB_URL"'
+  sh -eu -c 'chmod 0700 /backups; umask 077; pg_dump --format=custom --no-owner --no-acl --file="/backups/$BACKUP_FILE" "$DB_MIGRATE_URL"'
 sudo docker run --rm --mount "type=bind,source=$backup_dir,target=/backups" \
   "$backup_image" pg_restore --list "/backups/$backup_name" >/dev/null
 echo "Verified $environment_name database backup at $backup_dir/$backup_name"
 
+# Migrations and seeds (ref.* is read-only for the app) need the owner role.
+# DB_MIGRATE_URL (role personal) must be set in the env file; DB_URL is the app
+# role (personal_app), which has no DDL rights.
 run_database_script() {
   echo "Running $1"
-  sudo docker run --rm --network backend --env-file "$environment" "$image" bun "$1"
+  sudo docker run --rm --network backend --env-file "$environment" \
+    --entrypoint sh "$image" -eu -c 'DB_URL="$DB_MIGRATE_URL" exec bun "$0"' "$1"
 }
 
-run_database_script scripts/migrate-auth-catalog.ts
-run_database_script scripts/migrate-foundation.ts
-run_database_script scripts/migrate-money-tracker.ts
-run_database_script scripts/migrate-game-tracker.ts
-run_database_script scripts/migrate-tracker-journal.ts
-run_database_script scripts/migrate-house-tracker.ts
-run_database_script scripts/seed-catalog.ts
-run_database_script scripts/seed-cod-catalog.ts
-run_database_script scripts/seed-pokemon-research.ts
-run_database_script scripts/seed-cod-challenges.ts
-run_database_script scripts/seed-cod-art.ts
+if [ "$mode" = deploy ]; then
+  # Schema changes: Drizzle migrations from ./drizzle, as the schema owner.
+  run_database_script scripts/db-migrate.ts
+  run_database_script scripts/seed-catalog.ts
+  run_database_script scripts/seed-cod-catalog.ts
+  run_database_script scripts/seed-pokemon-research.ts
+  run_database_script scripts/seed-cod-challenges.ts
+  run_database_script scripts/seed-cod-art.ts
+fi
 
 sudo docker run --rm --network backend --env-file "$environment" "$image" \
   bun scripts/deploy-preflight.ts "$origin"
@@ -96,4 +108,4 @@ curl --retry 6 --retry-delay 2 --retry-all-errors --fail --silent --show-error \
 curl --retry 6 --retry-delay 2 --retry-all-errors --fail --silent --show-error \
   "$origin/projects/game-tracker/call-of-duty/black-ops-2" >/dev/null
 trap - ERR
-echo "Deployed $sha to $origin"
+echo "Deployed $sha to $origin ($mode)"

scripts/foundation-migration.sql

@@ -1,94 +0,0 @@
--- Apply after auth-catalog-migration.sql and before deploying the foundation release.
--- Additive domain-schema changes; existing records and numeric IDs are retained.
-
-ALTER TABLE blog_articles ADD COLUMN IF NOT EXISTS tags text[] NOT NULL DEFAULT '{}'::text[];
-
-ALTER TABLE lists ADD COLUMN IF NOT EXISTS slug text;
-UPDATE lists SET slug = COALESCE(NULLIF(trim(both '-' from regexp_replace(lower(name), '[^a-z0-9]+', '-', 'g')), ''), 'list') || '-' || id
-WHERE slug IS NULL;
-ALTER TABLE lists ALTER COLUMN slug SET NOT NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS lists_slug_unique ON lists (slug);
-ALTER TABLE lists ADD COLUMN IF NOT EXISTS is_progress boolean NOT NULL DEFAULT false;
-ALTER TABLE lists ADD COLUMN IF NOT EXISTS picture_url text;
-ALTER TABLE list_items ADD COLUMN IF NOT EXISTS picture_url text;
-ALTER TABLE list_items ADD COLUMN IF NOT EXISTS description text;
-
-CREATE TABLE IF NOT EXISTS list_item_completions (
-  id serial PRIMARY KEY,
-  item_id integer NOT NULL REFERENCES list_items(id) ON DELETE CASCADE,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT list_item_completions_item_id_user_id_unique UNIQUE (item_id, user_id)
-);
-CREATE INDEX IF NOT EXISTS list_item_completions_user_id_idx ON list_item_completions(user_id);
-
--- Join/setting records gain the same numeric identity as other site-owned rows.
-ALTER TABLE tasks_to_topics ADD COLUMN IF NOT EXISTS id serial;
-DO $$ BEGIN
-  IF EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid = 'tasks_to_topics'::regclass AND conname = 'tasks_to_topics_pkey'
-             AND pg_get_constraintdef(oid) NOT LIKE 'PRIMARY KEY (id)') THEN
-    ALTER TABLE tasks_to_topics DROP CONSTRAINT tasks_to_topics_pkey;
-  END IF;
-END $$;
-DO $$ BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid = 'tasks_to_topics'::regclass AND contype = 'p') THEN
-    ALTER TABLE tasks_to_topics ADD CONSTRAINT tasks_to_topics_pkey PRIMARY KEY (id);
-  END IF;
-END $$;
-CREATE UNIQUE INDEX IF NOT EXISTS tasks_to_topics_task_id_topic_id_unique ON tasks_to_topics(task_id, topic_id);
-
-ALTER TABLE catch_em_all_settings ADD COLUMN IF NOT EXISTS id serial;
-DO $$ BEGIN
-  IF EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid = 'catch_em_all_settings'::regclass AND conname = 'catch_em_all_settings_pkey'
-             AND pg_get_constraintdef(oid) NOT LIKE 'PRIMARY KEY (id)') THEN
-    ALTER TABLE catch_em_all_settings DROP CONSTRAINT catch_em_all_settings_pkey;
-  END IF;
-END $$;
-DO $$ BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conrelid = 'catch_em_all_settings'::regclass AND contype = 'p') THEN
-    ALTER TABLE catch_em_all_settings ADD CONSTRAINT catch_em_all_settings_pkey PRIMARY KEY (id);
-  END IF;
-END $$;
-CREATE UNIQUE INDEX IF NOT EXISTS catch_em_all_settings_user_id_unique ON catch_em_all_settings(user_id);
-
--- Every site-owned table records creation and latest update. Domain-specific
--- event times (submitted_at, seen_at, uploaded_at) remain untouched.
-DO $$
-DECLARE table_name text;
-BEGIN
-  FOREACH table_name IN ARRAY ARRAY[
-    'blog_articles', 'lists', 'list_items', 'list_item_completions',
-    'animals', 'sightings', 'photos', 'tasks', 'topics', 'tasks_to_topics',
-    'pokemon', 'games', 'pokemon_game_entries', 'user_entries', 'user_games',
-    'catch_em_all_settings'
-  ] LOOP
-    EXECUTE format('ALTER TABLE %I ADD COLUMN IF NOT EXISTS created_at timestamptz NOT NULL DEFAULT now()', table_name);
-    EXECUTE format('ALTER TABLE %I ADD COLUMN IF NOT EXISTS updated_at timestamptz NOT NULL DEFAULT now()', table_name);
-  END LOOP;
-END $$;
-
--- Preserve the best available creation time for older Animaldex rows.
-UPDATE animals SET created_at = submitted_at WHERE created_at > submitted_at;
-UPDATE sightings SET created_at = submitted_at WHERE created_at > submitted_at;
-UPDATE photos SET created_at = uploaded_at WHERE created_at > uploaded_at;
-
-CREATE OR REPLACE FUNCTION site_touch_updated_at() RETURNS trigger LANGUAGE plpgsql AS $$
-BEGIN
-  NEW.updated_at = now();
-  RETURN NEW;
-END $$;
-
-DO $$
-DECLARE table_name text;
-BEGIN
-  FOREACH table_name IN ARRAY ARRAY[
-    'blog_articles', 'lists', 'list_items', 'list_item_completions',
-    'animals', 'sightings', 'photos', 'tasks', 'topics', 'tasks_to_topics',
-    'pokemon', 'games', 'pokemon_game_entries', 'user_entries', 'user_games',
-    'catch_em_all_settings'
-  ] LOOP
-    EXECUTE format('DROP TRIGGER IF EXISTS site_touch_updated_at ON %I', table_name);
-    EXECUTE format('CREATE TRIGGER site_touch_updated_at BEFORE UPDATE ON %I FOR EACH ROW EXECUTE FUNCTION site_touch_updated_at()', table_name);
-  END LOOP;
-END $$;

scripts/game-tracker-migration.sql

@@ -1,127 +0,0 @@
--- Game tracker: owned Pokémon locations/encounters/evolutions and checklist games.
--- Additive and repeatable. Apply before seeding (`npm run db:seed`, `npm run db:seed:cod`).
-
-ALTER TYPE availability ADD VALUE IF NOT EXISTS 'evolve';
-ALTER TYPE availability ADD VALUE IF NOT EXISTS 'breed';
-
-ALTER TABLE pokemon ADD COLUMN IF NOT EXISTS evolves_from integer;
-ALTER TABLE pokemon ADD COLUMN IF NOT EXISTS evolution_chain integer;
-ALTER TABLE pokemon ADD COLUMN IF NOT EXISTS is_baby boolean NOT NULL DEFAULT false;
-ALTER TABLE pokemon ADD COLUMN IF NOT EXISTS is_legendary boolean NOT NULL DEFAULT false;
-ALTER TABLE pokemon ADD COLUMN IF NOT EXISTS is_mythical boolean NOT NULL DEFAULT false;
-
-ALTER TABLE games ADD COLUMN IF NOT EXISTS slug text;
-ALTER TABLE games ADD COLUMN IF NOT EXISTS sort_order integer NOT NULL DEFAULT 0;
-ALTER TABLE games ADD COLUMN IF NOT EXISTS breeding boolean NOT NULL DEFAULT true;
-DO $$ BEGIN
-  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'games_slug_key') THEN
-    ALTER TABLE games ADD CONSTRAINT games_slug_key UNIQUE (slug);
-  END IF;
-END $$;
-
--- Seeds used to mark their own rows with a "PokéAPI:" note prefix; anything else
--- was hand-maintained and must survive reseeding.
-DO $$ BEGIN
-  IF NOT EXISTS (SELECT 1 FROM information_schema.columns
-                 WHERE table_name = 'pokemon_game_entries' AND column_name = 'source') THEN
-    ALTER TABLE pokemon_game_entries ADD COLUMN source text NOT NULL DEFAULT 'pokeapi';
-    UPDATE pokemon_game_entries SET source = 'manual' WHERE note IS NULL OR note NOT LIKE 'PokéAPI:%';
-  END IF;
-END $$;
-
-CREATE TABLE IF NOT EXISTS pokemon_locations (
-  id serial PRIMARY KEY,
-  source_id integer UNIQUE,
-  slug text NOT NULL,
-  name text NOT NULL,
-  region text,
-  description text,
-  image_key text,
-  image_credit text,
-  source text NOT NULL DEFAULT 'pokeapi',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_encounters (
-  id serial PRIMARY KEY,
-  pokemon_id integer NOT NULL,
-  game_id integer NOT NULL,
-  location_id integer NOT NULL,
-  area text,
-  method text NOT NULL,
-  min_level integer,
-  max_level integer,
-  rarity integer,
-  form text,
-  conditions text[] NOT NULL DEFAULT '{}'::text[],
-  note text,
-  source text NOT NULL DEFAULT 'pokeapi',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT pokemon_encounters_pokemon_id_pokemon_id_fkey FOREIGN KEY (pokemon_id) REFERENCES pokemon(id) ON DELETE CASCADE,
-  CONSTRAINT pokemon_encounters_game_id_games_id_fkey FOREIGN KEY (game_id) REFERENCES games(id) ON DELETE CASCADE,
-  CONSTRAINT pokemon_encounters_location_id_pokemon_locations_id_fkey FOREIGN KEY (location_id) REFERENCES pokemon_locations(id) ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS pokemon_encounters_pokemon_id_game_id_index ON pokemon_encounters (pokemon_id, game_id);
-CREATE INDEX IF NOT EXISTS pokemon_encounters_location_id_index ON pokemon_encounters (location_id);
-
-CREATE TABLE IF NOT EXISTS pokemon_evolutions (
-  id serial PRIMARY KEY,
-  from_pokemon_id integer NOT NULL,
-  to_pokemon_id integer NOT NULL,
-  game_id integer NOT NULL,
-  method text NOT NULL,
-  source text NOT NULL DEFAULT 'pokeapi',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT pokemon_evolutions_from_pokemon_id_to_pokemon_id_game_id_method_unique UNIQUE (from_pokemon_id, to_pokemon_id, game_id, method),
-  CONSTRAINT pokemon_evolutions_from_pokemon_id_pokemon_id_fkey FOREIGN KEY (from_pokemon_id) REFERENCES pokemon(id) ON DELETE CASCADE,
-  CONSTRAINT pokemon_evolutions_to_pokemon_id_pokemon_id_fkey FOREIGN KEY (to_pokemon_id) REFERENCES pokemon(id) ON DELETE CASCADE,
-  CONSTRAINT pokemon_evolutions_game_id_games_id_fkey FOREIGN KEY (game_id) REFERENCES games(id) ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS pokemon_evolutions_game_id_index ON pokemon_evolutions (game_id);
-
-CREATE TABLE IF NOT EXISTS tracker_games (
-  id serial PRIMARY KEY,
-  slug text NOT NULL UNIQUE,
-  franchise text NOT NULL,
-  name text NOT NULL,
-  short_name text NOT NULL,
-  release_year integer,
-  sort_order integer NOT NULL DEFAULT 0,
-  rules jsonb NOT NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE IF NOT EXISTS tracker_items (
-  id serial PRIMARY KEY,
-  game_id integer NOT NULL,
-  key text NOT NULL,
-  kind text NOT NULL,
-  category text NOT NULL,
-  name text NOT NULL,
-  description text,
-  icon text,
-  post_launch boolean NOT NULL DEFAULT false,
-  sort_order integer NOT NULL DEFAULT 0,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT tracker_items_game_id_key_unique UNIQUE (game_id, key),
-  CONSTRAINT tracker_items_game_id_tracker_games_id_fkey FOREIGN KEY (game_id) REFERENCES tracker_games(id) ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS tracker_items_game_id_index ON tracker_items (game_id);
-
-CREATE TABLE IF NOT EXISTS tracker_progress (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL,
-  item_id integer NOT NULL,
-  milestone text NOT NULL DEFAULT 'done',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  CONSTRAINT tracker_progress_user_id_item_id_milestone_unique UNIQUE (user_id, item_id, milestone),
-  CONSTRAINT tracker_progress_user_id_user_id_fkey FOREIGN KEY (user_id) REFERENCES "user"(id) ON DELETE CASCADE,
-  CONSTRAINT tracker_progress_item_id_tracker_items_id_fkey FOREIGN KEY (item_id) REFERENCES tracker_items(id) ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS tracker_progress_user_id_index ON tracker_progress (user_id);

scripts/health-import.ts

@@ -0,0 +1,72 @@
+/**
+ * Import health data (JSON or CSV) into the private `health` schema.
+ *
+ *   bun scripts/health-import.ts data.json                       # {"vaccinations":[...],"sleep":[...]}
+ *   bun scripts/health-import.ts --table vaccinations rivm.csv   # CSV (header row) or a JSON array
+ *   bun scripts/health-import.ts --table sleep - < sleep.csv     # stdin
+ *   add --dry-run to validate without writing
+ *
+ * Column names are the snake_case DB columns (see src/lib/health/tables.ts). Rows with an
+ * `id` update that row; nutrition_daily and sleep upsert on `date`; everything else is
+ * inserted (importing the same file twice duplicates those rows). All-or-nothing: if any
+ * row is invalid, nothing is written. Uses DB_URL (the app role on prod, personal_dev on dev).
+ */
+import { readFile } from 'node:fs/promises';
+import { drizzle } from 'drizzle-orm/postgres-js';
+import postgres from 'postgres';
+import { parseCsv, toPayload, validatePayload, writeRows } from '../src/lib/server/health-import';
+
+let dryRun = false;
+let table: string | undefined;
+const files: string[] = [];
+for (let i = 2; i < process.argv.length; i++) {
+	const arg = process.argv[i];
+	if (arg === '--dry-run') dryRun = true;
+	else if (arg === '--table') table = process.argv[++i];
+	else if (arg.startsWith('--table=')) table = arg.slice(8);
+	else files.push(arg);
+}
+if (!files.length) {
+	console.error(
+		'usage: bun scripts/health-import.ts [--table <name>] [--dry-run] <file.json|file.csv|->...'
+	);
+	process.exit(2);
+}
+
+const read = (file: string) => (file === '-' ? Bun.stdin.text() : readFile(file, 'utf8'));
+const merged: Record<string, unknown[]> = {};
+try {
+	for (const file of files) {
+		const text = await read(file);
+		const csv = file.toLowerCase().endsWith('.csv') || (file === '-' && !/^\s*[[{]/.test(text));
+		const payload = toPayload(csv ? parseCsv(text) : JSON.parse(text), table);
+		for (const [t, rows] of Object.entries(payload)) (merged[t] ??= []).push(...(rows ?? []));
+	}
+} catch (e) {
+	console.error(e instanceof Error ? e.message : e);
+	process.exit(1);
+}
+
+const { clean, errors } = validatePayload(toPayload(merged));
+if (errors.length) {
+	for (const e of errors.slice(0, 50)) console.error(`${e.table} row ${e.row}: ${e.error}`);
+	console.error(`${errors.length} invalid row(s); nothing imported.`);
+	process.exit(1);
+}
+const summary = Object.entries(clean)
+	.map(([t, r]) => `${t}: ${r.length}`)
+	.join(', ');
+if (dryRun) {
+	console.log(`Valid (dry run, nothing written): ${summary}`);
+	process.exit(0);
+}
+
+if (!process.env.DB_URL) throw new Error('DB_URL is required');
+const client = postgres(process.env.DB_URL, { max: 1, onnotice: () => {} });
+try {
+	const counts = await writeRows(drizzle({ client }), clean);
+	for (const [t, c] of Object.entries(counts))
+		console.log(`${t}: ${c.inserted} inserted, ${c.updated} updated`);
+} finally {
+	await client.end();
+}

scripts/house-tracker-migration.sql

@@ -1,111 +0,0 @@
--- House tracker: listings from Dutch housing sites, collected by a home worker.
--- Idempotent; safe to run on every deploy.
-
-CREATE TABLE IF NOT EXISTS house_listings (
-  id serial PRIMARY KEY,
-  source text NOT NULL,
-  source_id text NOT NULL,
-  external_id text,
-  url text NOT NULL,
-  offer text NOT NULL CHECK (offer IN ('rent', 'buy')),
-  property_type text NOT NULL,
-  title text,
-  street text,
-  postal_code text,
-  city text,
-  city_slug text,
-  neighbourhood text,
-  price_eur integer CHECK (price_eur IS NULL OR price_eur >= 0),
-  area_m2 integer,
-  rooms integer,
-  bedrooms integer,
-  bathrooms integer,
-  construction_year integer,
-  energy_label text,
-  interior text,
-  deposit_eur integer,
-  available_from text,
-  contract_type text,
-  agent text,
-  image_url text,
-  description text,
-  features jsonb NOT NULL DEFAULT '{}'::jsonb,
-  lat double precision,
-  lng double precision,
-  -- When the site says it was published. first_seen_at is when we noticed.
-  offered_at timestamptz,
-  first_seen_at timestamptz NOT NULL DEFAULT now(),
-  -- fast, slow, or seed (already listed when its search was first polled).
-  first_seen_lane text NOT NULL DEFAULT 'slow',
-  last_seen_at timestamptz NOT NULL DEFAULT now(),
-  detail_fetched_at timestamptz,
-  removed_at timestamptz,
-  alerted_at timestamptz,
-  -- Personal tracking.
-  status text,
-  notes text
-);
-CREATE UNIQUE INDEX IF NOT EXISTS house_listings_source_idx ON house_listings (source, source_id);
-CREATE INDEX IF NOT EXISTS house_listings_active_idx
-  ON house_listings (offer, first_seen_at DESC) WHERE removed_at IS NULL;
-CREATE INDEX IF NOT EXISTS house_listings_city_idx ON house_listings (source, offer, city_slug);
-CREATE INDEX IF NOT EXISTS house_listings_details_idx
-  ON house_listings (first_seen_at DESC) WHERE detail_fetched_at IS NULL;
-
--- Every price we have seen, so price drops and market trends survive edits.
-CREATE TABLE IF NOT EXISTS house_price_history (
-  listing_id integer NOT NULL REFERENCES house_listings(id) ON DELETE CASCADE,
-  observed_at timestamptz NOT NULL DEFAULT now(),
-  price_eur integer NOT NULL
-);
-CREATE INDEX IF NOT EXISTS house_price_history_listing_idx
-  ON house_price_history (listing_id, observed_at);
-
--- One row per polled search URL. The first sync of a search only seeds the
--- database: alerting on everything already listed would be noise.
-CREATE TABLE IF NOT EXISTS house_searches (
-  search_url text PRIMARY KEY,
-  source text NOT NULL,
-  lane text NOT NULL,
-  first_synced_at timestamptz NOT NULL DEFAULT now(),
-  last_synced_at timestamptz NOT NULL DEFAULT now(),
-  last_found integer NOT NULL DEFAULT 0
-);
-
--- Worker health: challenges, HTTP errors, parse failures.
-CREATE TABLE IF NOT EXISTS house_worker_runs (
-  id bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
-  source text NOT NULL,
-  lane text NOT NULL,
-  url text NOT NULL,
-  status text NOT NULL,
-  http_status integer,
-  found integer,
-  duration_ms integer,
-  message text,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS house_worker_runs_created_idx ON house_worker_runs (created_at DESC);
-
-CREATE TABLE IF NOT EXISTS house_alert_rules (
-  id serial PRIMARY KEY,
-  name text NOT NULL,
-  enabled boolean NOT NULL DEFAULT true,
-  offer text NOT NULL DEFAULT 'rent' CHECK (offer IN ('rent', 'buy')),
-  min_price integer,
-  max_price integer,
-  min_area integer,
-  min_bedrooms integer,
-  -- Lowercase city names; empty means anywhere.
-  cities text[] NOT NULL DEFAULT '{}',
-  -- Empty means every property type.
-  property_types text[] NOT NULL DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-INSERT INTO house_alert_rules (name, offer, min_price, max_price, cities)
-SELECT 'Gouda area rentals', 'rent', 1300, 1700, ARRAY[
-  'gouda', 'waddinxveen', 'reeuwijk', 'moordrecht', 'nieuwerkerk aan den ijssel',
-  'zevenhuizen', 'bodegraven', 'boskoop', 'oudewater', 'schoonhoven', 'haastrecht'
-]
-WHERE NOT EXISTS (SELECT 1 FROM house_alert_rules);

scripts/ingest-cs-prices.ts

@@ -85,7 +85,7 @@ async function itemId(
 	extraDimensions: Dimensions = {}
 ) {
 	const [row] = await sql<{ id: number }[]>`
-		INSERT INTO cs_market_items (market_hash_name, name, icon_url, item_type)
+		INSERT INTO cs.items (market_hash_name, name, icon_url, item_type)
 		VALUES (${name}, ${displayName}, ${iconUrl ?? null}, ${itemType ?? null})
 		ON CONFLICT (market_hash_name) DO UPDATE SET
 			name = EXCLUDED.name,
@@ -98,13 +98,13 @@ async function itemId(
 	for (const [key, value] of Object.entries(inferred)) {
 		if (!/^[a-z][a-z0-9_]*$/.test(key) || !value) continue;
 		await sql`
-			INSERT INTO cs_item_dimensions (item_id, key, value) VALUES (${row.id}, ${key}, ${value})
+			INSERT INTO cs.item_dimensions (item_id, key, value) VALUES (${row.id}, ${key}, ${value})
 			ON CONFLICT (item_id, key) DO NOTHING`;
 	}
 	for (const [key, value] of Object.entries(extraDimensions)) {
 		if (!/^[a-z][a-z0-9_]*$/.test(key) || !value) continue;
 		await sql`
-			INSERT INTO cs_item_dimensions (item_id, key, value) VALUES (${row.id}, ${key}, ${value})
+			INSERT INTO cs.item_dimensions (item_id, key, value) VALUES (${row.id}, ${key}, ${value})
 			ON CONFLICT (item_id, key) DO UPDATE SET value = EXCLUDED.value`;
 	}
 	return row.id;
@@ -116,7 +116,7 @@ async function saveObservation(row: Observation, knownItemId?: number) {
 		(await itemId(row.marketHashName, row.name, undefined, undefined, row.dimensions));
 	await ensureStream(row.source, row.currency, row.kind);
 	await sql`
-		INSERT INTO cs_price_observations
+		INSERT INTO cs.price_observations
 			(item_id, source, currency, observed_at, price_cents, volume, kind)
 		VALUES (${item}, ${row.source}, ${row.currency}, ${new Date(row.observedAt)},
 			${row.priceCents}, ${row.volume ?? null}, ${row.kind})
@@ -128,7 +128,7 @@ async function saveObservation(row: Observation, knownItemId?: number) {
 async function ensureStream(source: string, currency: string, kind: string) {
 	const key = `${source}\0${currency}\0${kind}`;
 	if (knownStreams.has(key)) return;
-	await sql`INSERT INTO cs_price_streams (source, currency, kind)
+	await sql`INSERT INTO cs.price_streams (source, currency, kind)
 		VALUES (${source}, ${currency}, ${kind}) ON CONFLICT DO NOTHING`;
 	knownStreams.add(key);
 }
@@ -150,7 +150,7 @@ async function saveHistoryRows(
 			kind: 'sale-median'
 		}));
 	for (let offset = 0; offset < rows.length; offset += 500) {
-		await sql`INSERT INTO cs_price_observations ${sql(rows.slice(offset, offset + 500))}
+		await sql`INSERT INTO cs.price_observations ${sql(rows.slice(offset, offset + 500))}
 			ON CONFLICT (item_id, source, currency, observed_at, kind) DO UPDATE SET
 				price_cents = EXCLUDED.price_cents, volume = EXCLUDED.volume`;
 	}
@@ -242,7 +242,7 @@ async function history() {
 	if (!process.env.STEAM_SESSIONID || !process.env.STEAM_LOGIN_SECURE)
 		throw new Error('STEAM_SESSIONID and STEAM_LOGIN_SECURE are required for Steam history');
 	const items = await sql<{ id: number; market_hash_name: string }[]>`
-		SELECT id, market_hash_name FROM cs_market_items ORDER BY id LIMIT ${limit} OFFSET ${start}`;
+		SELECT id, market_hash_name FROM cs.items ORDER BY id LIMIT ${limit} OFFSET ${start}`;
 	let done = 0;
 	for (const item of items) {
 		const url = new URL('https://steamcommunity.com/market/pricehistory/');

scripts/legacy-schema-migration.sql

@@ -1,25 +0,0 @@
--- One-off bridge from the pre-foundation site schema to the current table names.
--- Run after the Animaldex UUID conversion, if needed, and before the auth,
--- foundation, and catalog migrations. Review and back up each database first.
--- Renaming keeps existing rows and foreign keys; lists did not exist in this schema.
-
-BEGIN;
-
-ALTER TABLE public.game RENAME TO games;
-ALTER TABLE public.pokemon_game_entry RENAME TO pokemon_game_entries;
-ALTER TABLE public.user_entry RENAME TO user_entries;
-ALTER TABLE public.user_game RENAME TO user_games;
-
-CREATE TABLE public.lists (
-  id serial PRIMARY KEY,
-  name text NOT NULL
-);
-
-CREATE TABLE public.list_items (
-  id serial PRIMARY KEY,
-  list_id integer NOT NULL REFERENCES public.lists(id) ON DELETE CASCADE,
-  name text NOT NULL
-);
-CREATE INDEX list_items_list_id_idx ON public.list_items(list_id);
-
-COMMIT;

scripts/list-picture-migration.sql

@@ -1 +0,0 @@
-ALTER TABLE lists ADD COLUMN IF NOT EXISTS picture_url text;

scripts/migrate-auth-catalog.ts

@@ -1,14 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const sql = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await sql.begin(async (tx) => {
-		await tx.unsafe(
-			await readFile(new URL('./auth-catalog-migration.sql', import.meta.url), 'utf8')
-		);
-	});
-	console.log('Authentication and catalog migration applied');
-} finally {
-	await sql.end();
-}

scripts/migrate-cs-prices.ts

@@ -1,13 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(await readFile(new URL('./cs-prices-migration.sql', import.meta.url), 'utf8'));
-	});
-	console.log('CS prices migration applied');
-} finally {
-	await client.end();
-}

scripts/migrate-foundation.ts

@@ -1,13 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(await readFile(new URL('./foundation-migration.sql', import.meta.url), 'utf8'));
-	});
-	console.log('Foundation migration applied');
-} finally {
-	await client.end();
-}

scripts/migrate-game-tracker.ts

@@ -1,15 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(
-			await readFile(new URL('./game-tracker-migration.sql', import.meta.url), 'utf8')
-		);
-	});
-	console.log('Game tracker migration applied');
-} finally {
-	await client.end();
-}

scripts/migrate-house-tracker.ts

@@ -1,15 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(
-			await readFile(new URL('./house-tracker-migration.sql', import.meta.url), 'utf8')
-		);
-	});
-	console.log('House tracker migration applied');
-} finally {
-	await client.end();
-}

scripts/migrate-money-tracker.ts

@@ -1,15 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(
-			await readFile(new URL('./money-tracker-migration.sql', import.meta.url), 'utf8')
-		);
-	});
-	console.log('Money tracker migration applied');
-} finally {
-	await client.end();
-}

scripts/migrate-tracker-journal.ts

@@ -1,15 +0,0 @@
-import { readFile } from 'node:fs/promises';
-import postgres from 'postgres';
-
-if (!process.env.DB_URL) throw new Error('DB_URL is required');
-const client = postgres(process.env.DB_URL, { max: 1 });
-try {
-	await client.begin(async (tx) => {
-		await tx.unsafe(
-			await readFile(new URL('./tracker-journal-migration.sql', import.meta.url), 'utf8')
-		);
-	});
-	console.log('Tracker journal migration applied');
-} finally {
-	await client.end();
-}

scripts/money-tracker-migration.sql

@@ -1,120 +0,0 @@
-CREATE TABLE IF NOT EXISTS money_accounts (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  opening_balance_cents integer NOT NULL DEFAULT 0,
-  kind text NOT NULL DEFAULT 'spendable',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  UNIQUE (user_id, name)
-);
-CREATE INDEX IF NOT EXISTS money_accounts_user_id_idx ON money_accounts (user_id);
-ALTER TABLE money_accounts ADD COLUMN IF NOT EXISTS kind text NOT NULL DEFAULT 'spendable';
-
-CREATE TABLE IF NOT EXISTS money_transactions (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  account_id integer NOT NULL REFERENCES money_accounts(id),
-  date date NOT NULL,
-  description text NOT NULL,
-  amount_cents integer NOT NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_transactions_user_date_idx ON money_transactions (user_id, date, id);
-CREATE INDEX IF NOT EXISTS money_transactions_account_id_idx ON money_transactions (account_id);
-
-CREATE TABLE IF NOT EXISTS money_recurring (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  amount_cents integer NOT NULL,
-  cadence text NOT NULL,
-  starts_on date,
-  ends_on date,
-  account_id integer REFERENCES money_accounts(id) ON DELETE SET NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_recurring_user_id_idx ON money_recurring (user_id);
-ALTER TABLE money_recurring ADD COLUMN IF NOT EXISTS starts_on date;
-ALTER TABLE money_recurring ADD COLUMN IF NOT EXISTS ends_on date;
-
-CREATE TABLE IF NOT EXISTS money_forecasts (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  date date NOT NULL,
-  description text NOT NULL,
-  amount_cents integer NOT NULL,
-  account_id integer REFERENCES money_accounts(id) ON DELETE SET NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_forecasts_user_date_idx ON money_forecasts (user_id, date);
-
-CREATE TABLE IF NOT EXISTS money_utility_settings (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  rate_per_unit numeric(12, 4) NOT NULL DEFAULT 0,
-  monthly_advance_cents integer NOT NULL DEFAULT 0,
-  billing_start date,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now(),
-  UNIQUE (user_id, kind)
-);
-ALTER TABLE money_utility_settings ADD COLUMN IF NOT EXISTS billing_start date;
-
-CREATE TABLE IF NOT EXISTS money_utility_readings (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  kind text NOT NULL,
-  date date NOT NULL,
-  reading numeric(12, 3) NOT NULL,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_utility_readings_user_kind_date_idx ON money_utility_readings (user_id, kind, date);
-
-CREATE TABLE IF NOT EXISTS money_wishlist (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  estimated_cents integer,
-  priority integer NOT NULL DEFAULT 3,
-  notes text,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_wishlist_user_id_idx ON money_wishlist (user_id);
-ALTER TABLE money_wishlist ADD COLUMN IF NOT EXISTS priority integer NOT NULL DEFAULT 3;
-
-CREATE TABLE IF NOT EXISTS money_projection_settings (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL UNIQUE REFERENCES "user"(id) ON DELETE CASCADE,
-  investment_account_id integer REFERENCES money_accounts(id) ON DELETE SET NULL,
-  reserve_cents integer NOT NULL DEFAULT 100000,
-  annual_return_percent numeric(5, 2) NOT NULL DEFAULT 5.00,
-  contribution_mode text NOT NULL DEFAULT 'excess',
-  include_recurring integer NOT NULL DEFAULT 1,
-  fixed_monthly_cents integer NOT NULL DEFAULT 0,
-  end_date date,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-ALTER TABLE money_projection_settings ADD COLUMN IF NOT EXISTS include_recurring integer NOT NULL DEFAULT 1;
-
-CREATE TABLE IF NOT EXISTS money_insurances (
-  id serial PRIMARY KEY,
-  user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  name text NOT NULL,
-  provider text,
-  coverage text,
-  premium_cents integer,
-  cadence text NOT NULL DEFAULT 'monthly',
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX IF NOT EXISTS money_insurances_user_id_idx ON money_insurances (user_id);
-
-ALTER TABLE money_accounts ADD COLUMN IF NOT EXISTS color text;

scripts/preview.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# Run a branch against a throwaway copy of the dev database (itself a prod copy).
+#
+#   scripts/preview.sh <branch> [port]
+#
+# Creates a git worktree in /tmp, clones DEV_DB_NAME into a temporary database
+# (CREATE DATABASE ... TEMPLATE), runs that branch's Drizzle migrations on the copy,
+# builds and serves it on <port> (default 5180). Ctrl-C removes the server,
+# database and worktree. Prod and the dev DB itself are never modified.
+#
+# Uses .env from the main checkout: DB_URL (app role) and DB_MIGRATE_URL (owner role)
+# pointing at the dev DB, plus DEV_ADMIN_URL (superuser, maintenance DB) for create/drop.
+set -euo pipefail
+
+branch="${1:?usage: scripts/preview.sh <branch> [port]}"
+port="${2:-5180}"
+repo="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$repo"
+set -a
+. ./.env
+[[ -f .env.dev-refresh ]] && . ./.env.dev-refresh
+set +a
+: "${DB_URL:?}" "${DB_MIGRATE_URL:?}" "${DEV_ADMIN_URL:?set DEV_ADMIN_URL}"
+DEV_DB_NAME="${DEV_DB_NAME:-personal_dev}"
+
+safe="$(printf '%s' "$branch" | tr -c 'a-zA-Z0-9' '_' | tr 'A-Z' 'a-z' | cut -c1-40)"
+db="preview_${safe}"
+dir="/tmp/personal-website-preview-${safe}"
+with_db() { bun -e 'const u=new URL(process.argv[1]); u.pathname="/"+process.argv[2]; console.log(u.toString())' "$1" "$2"; }
+
+server_pid=""
+cleanup() {
+	[[ -n "$server_pid" ]] && kill "$server_pid" 2>/dev/null || true
+	psql -q "$DEV_ADMIN_URL" -c "DROP DATABASE IF EXISTS \"$db\" WITH (FORCE)" || true
+	git -C "$repo" worktree remove --force "$dir" 2>/dev/null || true
+	echo "Preview cleaned up."
+}
+trap cleanup EXIT INT TERM
+
+git fetch origin "$branch"
+git worktree add --detach "$dir" "origin/$branch"
+
+# TEMPLATE needs no other connections to the source; stop `bun run dev` first if it fails.
+psql -v ON_ERROR_STOP=1 -q "$DEV_ADMIN_URL" -c "CREATE DATABASE \"$db\" TEMPLATE \"$DEV_DB_NAME\" OWNER personal"
+
+export DB_URL="$(with_db "$DB_URL" "$db")"
+export DB_MIGRATE_URL="$(with_db "$DB_MIGRATE_URL" "$db")"
+export ORIGIN="http://localhost:$port" BETTER_AUTH_URL="http://localhost:$port" PORT="$port"
+
+cd "$dir"
+cp "$repo/.env" .env
+bun install --frozen-lockfile
+bun scripts/db-migrate.ts
+bun run build
+echo "Preview of $branch on http://localhost:$port (Ctrl-C to stop and clean up)"
+bun build/index.js &
+server_pid=$!
+wait "$server_pid"

scripts/seed-cod-art.ts

@@ -8,11 +8,11 @@ try {
 	await sql.begin(async (tx) => {
 		for (const image of artwork) {
 			const rows =
-				await tx`update tracker_items i set icon=${image.path} from tracker_games g where i.game_id=g.id and g.slug=${image.game} and i.key=${image.key} returning i.id`;
+				await tx`update ref.tracker_items i set icon=${image.path} from ref.tracker_games g where i.game_id=g.id and g.slug=${image.game} and i.key=${image.key} returning i.id`;
 			if (rows.length !== 1) throw new Error(`Unknown artwork target: ${image.game}/${image.key}`);
 		}
 		for (const [source, path] of Object.entries(achievementArt)) {
-			await tx`update tracker_items set icon=${path} where kind='achievement' and icon=${source}`;
+			await tx`update ref.tracker_items set icon=${path} where kind='achievement' and icon=${source}`;
 		}
 	});
 	console.log(

scripts/seed-cod-challenges.ts

@@ -22,17 +22,17 @@ try {
 			}[]
 		][]) {
 			const [game] =
-				await tx`select id from tracker_games where slug=${slug} and franchise='call-of-duty'`;
+				await tx`select id from ref.tracker_games where slug=${slug} and franchise='call-of-duty'`;
 			if (!game) throw new Error(`Seed Call of Duty catalog first: ${slug}`);
 			for (let offset = 0; offset < rows.length; offset += 500) {
 				const batch = rows
 					.slice(offset, offset + 500)
 					.map(({ sourceUrl, ...r }) => ({ ...r, game_id: game.id, source_url: sourceUrl }));
-				await tx`insert into tracker_challenges ${tx(batch)} on conflict (game_id,key) do update set name=excluded.name,category=excluded.category,requirement=excluded.requirement,reward=excluded.reward,icon=excluded.icon,target=excluded.target,source_url=excluded.source_url`;
+				await tx`insert into ref.tracker_challenges ${tx(batch)} on conflict (game_id,key) do update set name=excluded.name,category=excluded.category,requirement=excluded.requirement,reward=excluded.reward,icon=excluded.icon,target=excluded.target,source_url=excluded.source_url`;
 			}
 			// Retire removed source definitions only when nobody has saved progress.
 			if (rows.length)
-				await tx`delete from tracker_challenges c where c.game_id=${game.id} and c.key not in ${tx(rows.map((r) => r.key))} and not exists (select 1 from tracker_challenge_progress p where p.challenge_id=c.id)`;
+				await tx`delete from ref.tracker_challenges c where c.game_id=${game.id} and c.key not in ${tx(rows.map((r) => r.key))} and not exists (select 1 from games.tracker_challenge_progress p where p.challenge_id=c.id)`;
 			console.log(`${slug}: ${rows.length} challenge rows`);
 		}
 	});

scripts/seed-pokemon-research.ts

@@ -9,10 +9,10 @@ const client = postgres(process.env.DB_URL, { max: 1 });
 try {
 	await client.begin(async (tx) => {
 		const species = new Map(
-			(await tx`select id, number from pokemon`).map((r) => [r.number, r.id])
+			(await tx`select id, number from ref.pokemon`).map((r) => [r.number, r.id])
 		);
 		const games = new Map(
-			(await tx`select id, source_id from games`).map((r) => [r.source_id, r.id])
+			(await tx`select id, source_id from ref.pokemon_games`).map((r) => [r.source_id, r.id])
 		);
 		const speciesId = (n: number) => {
 			const id = species.get(n);
@@ -25,10 +25,10 @@ try {
 			return id;
 		};
 		for (const row of catalog.facts)
-			await tx`insert into pokemon_research (pokemon_id,facts) values (${speciesId(row.number)},${tx.json(row.facts)}) on conflict (pokemon_id) do update set facts=excluded.facts`;
+			await tx`insert into ref.pokemon_research (pokemon_id,facts) values (${speciesId(row.number)},${tx.json(row.facts)}) on conflict (pokemon_id) do update set facts=excluded.facts`;
 		for (const row of catalog.games) {
 			if (!games.has(row.sourceId)) continue;
-			await tx`insert into pokemon_game_research (game_id,version_group,regions) values (${gameId(row.sourceId)},${row.versionGroup},${row.regions}) on conflict (game_id) do update set version_group=excluded.version_group,regions=excluded.regions`;
+			await tx`insert into ref.pokemon_game_research (game_id,version_group,regions) values (${gameId(row.sourceId)},${row.versionGroup},${row.regions}) on conflict (game_id) do update set version_group=excluded.version_group,regions=excluded.regions`;
 		}
 		for (let offset = 0; offset < catalog.dexes.length; offset += 1000) {
 			const batch = catalog.dexes
@@ -42,10 +42,10 @@ try {
 					number
 				}));
 			if (batch.length)
-				await tx`insert into pokemon_dex_numbers ${tx(batch)} on conflict (pokemon_id,game_id,dex) do update set number=excluded.number,dex_name=excluded.dex_name`;
+				await tx`insert into ref.pokemon_dex_numbers ${tx(batch)} on conflict (pokemon_id,game_id,dex) do update set number=excluded.number,dex_name=excluded.dex_name`;
 		}
 		for (const row of catalog.moves)
-			await tx`insert into pokemon_moves ${tx(row)} on conflict (id) do update set name=excluded.name,type=excluded.type,category=excluded.category,power=excluded.power,accuracy=excluded.accuracy,pp=excluded.pp,priority=excluded.priority,target=excluded.target`;
+			await tx`insert into ref.pokemon_moves ${tx(row)} on conflict (id) do update set name=excluded.name,type=excluded.type,category=excluded.category,power=excluded.power,accuracy=excluded.accuracy,pp=excluded.pp,priority=excluded.priority,target=excluded.target`;
 		for (let offset = 0; offset < catalog.learnsets.length; offset += 500) {
 			const batch = catalog.learnsets
 				.slice(offset, offset + 500)
@@ -54,7 +54,7 @@ try {
 					version_group,
 					moves: tx.json(moves)
 				}));
-			await tx`insert into pokemon_learnsets ${tx(batch)} on conflict (pokemon_id,version_group) do update set moves=excluded.moves`;
+			await tx`insert into ref.pokemon_learnsets ${tx(batch)} on conflict (pokemon_id,version_group) do update set moves=excluded.moves`;
 		}
 		console.log(
 			`Seeded ${catalog.facts.length} profiles, ${catalog.dexes.length} dex entries, ${catalog.moves.length} moves and ${catalog.learnsets.length} versioned learnsets`

scripts/set-admin.ts

@@ -6,7 +6,7 @@ if (!process.env.DB_URL) throw new Error('DB_URL is required');
 const sql = postgres(process.env.DB_URL, { max: 1 });
 try {
 	const users =
-		await sql`update "user" set role = ${role}, updated_at = now() where id = ${userId} returning id, role`;
+		await sql`update auth."user" set role = ${role}, updated_at = now() where id = ${userId} returning id, role`;
 	if (!users.length)
 		throw new Error('User ID not found. Register first and copy the ID from your account page.');
 	console.log(users[0]);

scripts/tracker-journal-migration.sql

@@ -1,71 +0,0 @@
--- Additive, repeatable journal and factual catalog expansion. Existing progress is preserved.
-CREATE TABLE IF NOT EXISTS pokemon_seen (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE,
-  game_id integer NOT NULL REFERENCES games(id) ON DELETE CASCADE,
-  pokemon_id integer NOT NULL REFERENCES pokemon(id) ON DELETE CASCADE,
-  created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(),
-  UNIQUE(user_id, game_id, pokemon_id)
-);
-CREATE INDEX IF NOT EXISTS pokemon_seen_user_idx ON pokemon_seen(user_id);
-CREATE TABLE IF NOT EXISTS pokemon_research (
-  pokemon_id integer PRIMARY KEY REFERENCES pokemon(id) ON DELETE CASCADE, facts jsonb NOT NULL
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_dex_numbers (
-  id serial PRIMARY KEY, pokemon_id integer NOT NULL REFERENCES pokemon(id) ON DELETE CASCADE, game_id integer NOT NULL REFERENCES games(id) ON DELETE CASCADE, dex text NOT NULL, dex_name text NOT NULL, number integer NOT NULL, UNIQUE(pokemon_id,game_id,dex)
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_moves (
-  id integer PRIMARY KEY, name text NOT NULL, type text NOT NULL, category text NOT NULL, power integer, accuracy integer, pp integer, priority integer NOT NULL, target text NOT NULL
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_learnsets (
-  id serial PRIMARY KEY, pokemon_id integer NOT NULL REFERENCES pokemon(id) ON DELETE CASCADE, version_group integer NOT NULL, moves jsonb NOT NULL, UNIQUE(pokemon_id,version_group)
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_game_research (
-  game_id integer PRIMARY KEY REFERENCES games(id) ON DELETE CASCADE, version_group integer NOT NULL, regions text[] NOT NULL
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_journeys (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, game_id integer NOT NULL REFERENCES games(id) ON DELETE CASCADE, stage text NOT NULL DEFAULT 'story' CHECK(stage IN ('story','postgame','collection')), location text, created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,game_id)
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_catches (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, game_id integer NOT NULL REFERENCES games(id) ON DELETE CASCADE, pokemon_id integer NOT NULL REFERENCES pokemon(id) ON DELETE CASCADE, nickname text NOT NULL DEFAULT '', level integer NOT NULL DEFAULT 1 CHECK(level BETWEEN 1 AND 100), moves text[] NOT NULL DEFAULT '{}' CHECK(cardinality(moves)<=4), party_slot integer CHECK(party_slot BETWEEN 1 AND 6), shiny boolean NOT NULL DEFAULT false, nature text, ability text, ball text, location text, obtained text NOT NULL DEFAULT 'caught', stage text NOT NULL DEFAULT 'story' CHECK(stage IN ('story','postgame','collection')), notes text NOT NULL DEFAULT '', caught_on date, created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,game_id,party_slot)
-);
-
-CREATE TABLE IF NOT EXISTS pokemon_milestones (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, game_id integer NOT NULL REFERENCES games(id) ON DELETE CASCADE, key text NOT NULL, title text NOT NULL, category text NOT NULL, stage text NOT NULL DEFAULT 'story', done boolean NOT NULL DEFAULT false, notes text NOT NULL DEFAULT '', created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,game_id,key)
-);
-
-CREATE TABLE IF NOT EXISTS tracker_ranks (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, game_id integer NOT NULL REFERENCES tracker_games(id) ON DELETE CASCADE, level integer NOT NULL DEFAULT 1 CHECK(level BETWEEN 1 AND 10000), prestige integer NOT NULL DEFAULT 0 CHECK(prestige BETWEEN 0 AND 1000), created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,game_id)
-);
-
-CREATE TABLE IF NOT EXISTS tracker_weapon_ranks (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, item_id integer NOT NULL REFERENCES tracker_items(id) ON DELETE CASCADE, level integer NOT NULL DEFAULT 1 CHECK(level BETWEEN 1 AND 10000), prestige integer NOT NULL DEFAULT 0 CHECK(prestige BETWEEN 0 AND 1000), created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,item_id)
-);
-
-CREATE TABLE IF NOT EXISTS tracker_challenges (
-  id serial PRIMARY KEY, game_id integer NOT NULL REFERENCES tracker_games(id) ON DELETE CASCADE, key text NOT NULL, name text NOT NULL, category text NOT NULL, requirement text NOT NULL, reward text, icon text, target integer, source_url text NOT NULL, UNIQUE(game_id,key)
-);
-
-CREATE TABLE IF NOT EXISTS tracker_challenge_progress (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, challenge_id integer NOT NULL REFERENCES tracker_challenges(id) ON DELETE CASCADE, current integer NOT NULL DEFAULT 0 CHECK(current >= 0), done boolean NOT NULL DEFAULT false, created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now(), UNIQUE(user_id,challenge_id)
-);
-
-CREATE TABLE IF NOT EXISTS osu_entries (
-  id serial PRIMARY KEY, user_id text NOT NULL REFERENCES "user"(id) ON DELETE CASCADE, kind text NOT NULL CHECK(kind IN ('score','goal','training')), title text NOT NULL, mode text NOT NULL DEFAULT 'osu', beatmap_url text, score_url text, goal text NOT NULL DEFAULT 'pass', skill text NOT NULL DEFAULT 'stamina', bpm integer, duration integer, accuracy text, combo integer, misses integer, pp text, mods text NOT NULL DEFAULT 'NM', rate text NOT NULL DEFAULT '1.00', achieved boolean NOT NULL DEFAULT false, played_on date NOT NULL, notes text NOT NULL DEFAULT '', created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE INDEX IF NOT EXISTS pokemon_dex_game_idx ON pokemon_dex_numbers(game_id);
-CREATE INDEX IF NOT EXISTS pokemon_catches_owner_idx ON pokemon_catches(user_id,game_id,pokemon_id);
-CREATE INDEX IF NOT EXISTS osu_entries_owner_idx ON osu_entries(user_id,kind);
-
-ALTER TABLE pokemon_journeys ADD COLUMN IF NOT EXISTS completed boolean NOT NULL DEFAULT false;
--- Historical catches were necessarily seen; repeatable and non-destructive.
-INSERT INTO pokemon_seen (user_id, game_id, pokemon_id)
-SELECT u.user_id, e.game_id, e.pokemon_id FROM user_entries u
-JOIN pokemon_game_entries e ON e.id = u.pokemon_game_entry_id
-ON CONFLICT DO NOTHING;

scripts/verify-staging-image.sh

@@ -1,23 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-sha=${1:?staging commit required}
-case "$sha" in
-  *[!0-9a-f]*|'') echo 'Invalid image tag' >&2; exit 2 ;;
-esac
-directory=/opt/personal-website-staging
-tag=$(sed -n 's/^IMAGE_TAG=//p' "$directory/.env" | head -n 1)
-if [ "$tag" != "$sha" ]; then
-  echo "Staging runs $tag, not $sha" >&2
-  exit 1
-fi
-image="git.stanrunge.dev/stan/personal-website:$sha"
-container=$(sudo docker compose --env-file "$directory/.env" -f "$directory/compose.prod.yml" ps -q app)
-expected=$(sudo docker image inspect -f '{{.Id}}' "$image")
-actual=$(sudo docker inspect -f '{{.Image}}' "$container")
-if [ "$actual" != "$expected" ]; then
-  echo 'Staging container differs from the tested image' >&2
-  exit 1
-fi
-curl --fail --silent --show-error https://staging.stanrunge.dev/login >/dev/null
-echo "Verified staging image $sha"

src/hooks.server.ts

@@ -1,6 +1,8 @@
 import type { Handle } from '@sveltejs/kit/hooks';
 import { building } from '$app/env';
 import { auth } from '#lib/server/auth.js';
+import { isOwner, isOwnerOnlyPath } from '#lib/server/owner.js';
+import { error } from '@sveltejs/kit';
 
 export const handle: Handle = async ({ event, resolve }) => {
 	// Match the endpoint path here: the dev proxy may terminate HTTPS before Vite.
@@ -9,5 +11,22 @@ export const handle: Handle = async ({ event, resolve }) => {
 	const session = building ? null : await auth.api.getSession({ headers: event.request.headers });
 	event.locals.user = session?.user ?? null;
 	event.locals.session = session?.session ?? null;
-	return resolve(event);
+	// Owner-only areas (health tracker). Page loads, __data.json and the import endpoint
+	// 404 for non-owners in the route itself (layout load / endpoint), which renders the
+	// same 404 page as an unknown URL. As a backstop, any other method (form actions,
+	// which skip layout loads) is refused here before a route runs.
+	const ownerOnly = isOwnerOnlyPath(event.url.pathname);
+	if (
+		ownerOnly &&
+		!isOwner(event) &&
+		event.request.method !== 'GET' &&
+		event.request.method !== 'HEAD'
+	)
+		error(404, 'Not Found');
+	const response = await resolve(event);
+	if (ownerOnly) {
+		response.headers.set('x-robots-tag', 'noindex, nofollow, noarchive');
+		response.headers.set('cache-control', 'private, no-store');
+	}
+	return response;
 };

src/lib/components/CatalogGrid.svelte

@@ -0,0 +1,63 @@
+<script lang="ts">
+	// Card grid shared by the home page, /projects and /trackers.
+	import { resolve } from '$app/paths';
+	import ArrowRight from 'lucide-svelte/icons/arrow-right';
+	import ExternalLink from 'lucide-svelte/icons/external-link';
+	import * as Card from '#lib/components/ui/card/index.js';
+	import ProjectIcon from '#lib/components/ProjectIcon.svelte';
+
+	type Item = { name: string; subtitle: string; href: string; external: boolean };
+	let {
+		items,
+		subtitleClass = 'mt-1 block text-sm text-muted-foreground'
+	}: { items: readonly Item[]; subtitleClass?: string } = $props();
+</script>
+
+<ul class="grid gap-3 sm:grid-cols-2">
+	{#each items as project (project.name)}
+		<li>
+			<Card.Root class="h-full py-0 transition-colors hover:bg-muted/50"
+				><Card.Content class="p-0">
+					{#if project.external}
+						<a
+							href={project.href}
+							rel="external"
+							class="flex min-h-28 items-start justify-between gap-4 p-5"
+						>
+							<span class="flex min-w-0 items-start gap-3">
+								<span
+									class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
+								>
+									<ProjectIcon name={project.name} class="size-5" />
+								</span>
+								<span class="min-w-0"
+									><span class="block font-medium">{project.name}</span><span class={subtitleClass}
+										>{project.subtitle}</span
+									></span
+								>
+							</span><ExternalLink size={18} aria-hidden="true" class="text-[var(--site-muted)]" />
+						</a>
+					{:else}
+						<a
+							href={resolve(project.href as '/')}
+							class="flex min-h-28 items-start justify-between gap-4 p-5"
+						>
+							<span class="flex min-w-0 items-start gap-3">
+								<span
+									class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
+								>
+									<ProjectIcon name={project.name} class="size-5" />
+								</span>
+								<span class="min-w-0"
+									><span class="block font-medium">{project.name}</span><span class={subtitleClass}
+										>{project.subtitle}</span
+									></span
+								>
+							</span><ArrowRight size={18} aria-hidden="true" class="text-[var(--site-muted)]" />
+						</a>
+					{/if}
+				</Card.Content></Card.Root
+			>
+		</li>
+	{/each}
+</ul>

src/lib/components/ListExtraFields.svelte

@@ -0,0 +1,59 @@
+<script lang="ts">
+	// Form inputs for a list's own typed columns (meta.columns), posted as `extra:<column>`.
+	import { Input } from '#lib/components/ui/input/index.js';
+	import { Textarea } from '#lib/components/ui/textarea/index.js';
+	import { NativeSelect } from '#lib/components/ui/native-select/index.js';
+	import { Checkbox } from '#lib/components/ui/checkbox/index.js';
+	import type { ExtraValue, ListColumn } from '#lib/server/lists.js';
+
+	let { columns, values = {} }: { columns: ListColumn[]; values?: Record<string, ExtraValue> } =
+		$props();
+	const str = (v: ExtraValue | undefined) => (v === null || v === undefined ? '' : String(v));
+</script>
+
+{#each columns as column (column.name)}
+	{@const name = `extra:${column.name}`}
+	{#if column.uiType === 'bool'}
+		<label class="text-sm"
+			><Checkbox {name} value="on" checked={values[column.name] === true} /> {column.label}</label
+		>
+	{:else if column.uiType === 'select' && column.options.length}
+		<label
+			>{column.label}<NativeSelect
+				{name}
+				class="block w-full rounded border p-2"
+				value={str(values[column.name])}
+			>
+				<option value="">—</option>
+				{#each column.options as option (option)}<option value={option}>{option}</option>{/each}
+			</NativeSelect></label
+		>
+	{:else if column.uiType === 'longtext'}
+		<label
+			>{column.label}<Textarea
+				{name}
+				rows={3}
+				maxlength={2000}
+				class="block w-full rounded border p-2"
+				value={str(values[column.name])}
+			/></label
+		>
+	{:else if ['text', 'url', 'image', 'number', 'cents', 'date', 'select'].includes(column.uiType)}
+		<label
+			>{column.label}<Input
+				{name}
+				type={column.uiType === 'number' || column.uiType === 'cents'
+					? 'number'
+					: column.uiType === 'date'
+						? 'date'
+						: column.uiType === 'url' || column.uiType === 'image'
+							? 'url'
+							: 'text'}
+				step={column.uiType === 'number' ? 'any' : undefined}
+				maxlength={column.uiType === 'text' ? 2000 : undefined}
+				class="block w-full rounded border p-2"
+				value={str(values[column.name])}
+			/></label
+		>
+	{/if}
+{/each}

src/lib/components/ProjectIcon.svelte

@@ -12,9 +12,11 @@
 	import ChartNoAxesCombined from 'lucide-svelte/icons/chart-no-axes-combined';
 	import FolderKanban from 'lucide-svelte/icons/folder-kanban';
 	import Gamepad2 from 'lucide-svelte/icons/gamepad-2';
+	import HeartPulse from 'lucide-svelte/icons/heart-pulse';
 	import House from 'lucide-svelte/icons/house';
 	import Globe2 from 'lucide-svelte/icons/globe-2';
 	import Languages from 'lucide-svelte/icons/languages';
+	import ListChecks from 'lucide-svelte/icons/list-checks';
 	import Music2 from 'lucide-svelte/icons/music-2';
 	import PawPrint from 'lucide-svelte/icons/paw-print';
 	import Trophy from 'lucide-svelte/icons/trophy';
@@ -32,7 +34,9 @@
 		'language learner': Languages,
 		'money tracker': Wallet,
 		'cs prices': CandlestickChart,
-		'house tracker': House
+		'house tracker': House,
+		lists: ListChecks,
+		health: HeartPulse
 	};
 
 	const Icon = $derived(icons[name as keyof typeof icons] ?? FolderKanban);

src/lib/health/BodyChart.svelte

@@ -0,0 +1,118 @@
+<script lang="ts">
+	// Weight + waist trend. Same lazy-loaded ECharts setup as the CS prices chart.
+	import { onMount } from 'svelte';
+	import type { ECharts } from 'echarts/core';
+
+	export type BodyPoint = { date: string; weightKg: number | null; waistCm: number | null };
+	let { points }: { points: BodyPoint[] } = $props();
+	let element: HTMLDivElement;
+	let chart: ECharts | undefined;
+	let ready = $state(false);
+
+	const series = $derived([
+		{
+			name: 'Weight (kg)',
+			yAxisIndex: 0,
+			data: points.filter((p) => p.weightKg !== null).map((p) => [Date.parse(p.date), p.weightKg])
+		},
+		{
+			name: 'Waist (cm)',
+			yAxisIndex: 1,
+			data: points.filter((p) => p.waistCm !== null).map((p) => [Date.parse(p.date), p.waistCm])
+		}
+	]);
+
+	function update() {
+		if (!chart) return;
+		const style = getComputedStyle(document.documentElement);
+		const foreground = style.getPropertyValue('--site-text').trim();
+		const muted = style.getPropertyValue('--site-muted').trim();
+		const border = style.getPropertyValue('--site-border').trim();
+		const dark = style.getPropertyValue('--site-bg').trim() === '#000';
+		const axis = (name: string) => ({
+			type: 'value' as const,
+			name,
+			scale: true,
+			nameTextStyle: { color: muted },
+			axisLabel: { color: muted },
+			splitLine: { lineStyle: { color: border } }
+		});
+		chart.setOption(
+			{
+				animation: false,
+				backgroundColor: 'transparent',
+				grid: { left: 48, right: 48, top: 36, bottom: 28 },
+				legend: { top: 0, textStyle: { color: muted } },
+				xAxis: {
+					type: 'time',
+					axisLine: { lineStyle: { color: border } },
+					axisLabel: { color: muted },
+					splitLine: { show: false }
+				},
+				yAxis: [axis('kg'), { ...axis('cm'), splitLine: { show: false } }],
+				tooltip: {
+					trigger: 'axis',
+					backgroundColor: style.getPropertyValue('--site-surface').trim(),
+					borderColor: border,
+					textStyle: { color: foreground }
+				},
+				series: series.map((s, i) => ({
+					...s,
+					type: 'line',
+					showSymbol: s.data.length < 60,
+					symbolSize: 5,
+					itemStyle: { color: `hsl(${i ? 200 : 25} 70% ${dark ? '65%' : '40%'})` },
+					lineStyle: { width: 2 }
+				}))
+			},
+			true
+		);
+	}
+
+	onMount(() => {
+		let disposed = false;
+		let resize: ResizeObserver | undefined;
+		let theme: MutationObserver | undefined;
+		import('echarts/core').then(async (echarts) => {
+			const [
+				{ LineChart },
+				{ GridComponent, TooltipComponent, LegendComponent },
+				{ CanvasRenderer }
+			] = await Promise.all([
+				import('echarts/charts'),
+				import('echarts/components'),
+				import('echarts/renderers')
+			]);
+			if (disposed) return;
+			echarts.use([LineChart, GridComponent, TooltipComponent, LegendComponent, CanvasRenderer]);
+			chart = echarts.init(element, undefined, { renderer: 'canvas' });
+			ready = true;
+			update();
+			resize = new ResizeObserver(() => chart?.resize());
+			resize.observe(element);
+			theme = new MutationObserver(update);
+			theme.observe(document.documentElement, {
+				attributes: true,
+				attributeFilter: ['data-theme']
+			});
+		});
+		return () => {
+			disposed = true;
+			resize?.disconnect();
+			theme?.disconnect();
+			chart?.dispose();
+		};
+	});
+	$effect(() => {
+		if (ready) update();
+	});
+</script>
+
+<div class="chart" bind:this={element} role="img" aria-label="Weight and waist trend"></div>
+
+<style>
+	.chart {
+		width: 100%;
+		height: 240px;
+	}
+</style>

src/lib/health/tables.ts

@@ -0,0 +1,129 @@
+// Client-safe description of the health tables: used by the forms on /trackers/health
+// and by the server-side validator in #lib/server/health-import.ts. Keys are the
+// snake_case column names, which are also the import (JSON/CSV) field names.
+
+export type FieldType =
+	'date' | 'text' | 'textarea' | 'integer' | 'number' | 'datetime' | 'select' | 'uuid';
+
+export type Field = {
+	key: string;
+	label: string;
+	type: FieldType;
+	required?: boolean;
+	options?: readonly string[];
+	min?: number;
+	max?: number;
+	step?: number;
+	maxLength?: number;
+	placeholder?: string;
+};
+
+export const medicationKinds = ['medication', 'supplement'] as const;
+export const appointmentTypes = [
+	'appointment',
+	'checkup',
+	'condition',
+	'test',
+	'procedure',
+	'other'
+] as const;
+
+const notes: Field = { key: 'notes', label: 'Notes', type: 'textarea', maxLength: 4000 };
+const date: Field = { key: 'date', label: 'Date', type: 'date', required: true };
+
+export const healthTables = {
+	vaccinations: {
+		label: 'Vaccinations',
+		fields: [
+			{ key: 'vaccine', label: 'Vaccine', type: 'text', required: true, maxLength: 200 },
+			{ key: 'target', label: 'Disease / target', type: 'text', maxLength: 200 },
+			{ key: 'dose_no', label: 'Dose no.', type: 'integer', min: 1, max: 20 },
+			date,
+			{ key: 'batch_lot', label: 'Batch / lot', type: 'text', maxLength: 100 },
+			{ key: 'provider', label: 'Provider', type: 'text', maxLength: 200 },
+			{
+				key: 'country',
+				label: 'Country (ISO code)',
+				type: 'text',
+				maxLength: 2,
+				placeholder: 'NL'
+			},
+			notes
+		]
+	},
+	body_measurements: {
+		label: 'Body measurements',
+		fields: [
+			date,
+			{ key: 'weight_kg', label: 'Weight (kg)', type: 'number', min: 20, max: 400, step: 0.01 },
+			{
+				key: 'waist_cm',
+				label: 'Waist at navel (cm)',
+				type: 'number',
+				min: 30,
+				max: 250,
+				step: 0.1
+			},
+			{ key: 'body_fat_pct', label: 'Body fat (%)', type: 'number', min: 1, max: 75, step: 0.1 },
+			notes
+		]
+	},
+	workouts: {
+		label: 'Workouts',
+		fields: [
+			date,
+			{ key: 'exercise', label: 'Exercise', type: 'text', required: true, maxLength: 200 },
+			{ key: 'sets', label: 'Sets', type: 'integer', min: 1, max: 100 },
+			{ key: 'reps', label: 'Reps (per set)', type: 'integer', min: 0, max: 1000 },
+			{ key: 'load_kg', label: 'Load (kg)', type: 'number', min: 0, max: 1000, step: 0.25 },
+			{ key: 'rpe', label: 'RPE', type: 'number', min: 1, max: 10, step: 0.5 },
+			{ key: 'session_id', label: 'Session id (optional)', type: 'uuid' },
+			notes
+		]
+	},
+	nutrition_daily: {
+		label: 'Nutrition',
+		fields: [
+			date,
+			{ key: 'kcal', label: 'kcal', type: 'integer', min: 0, max: 20000 },
+			{ key: 'protein_g', label: 'Protein (g)', type: 'number', min: 0, max: 1000, step: 0.1 },
+			notes
+		]
+	},
+	sleep: {
+		label: 'Sleep',
+		fields: [
+			{ ...date, label: 'Date (wake-up day)' },
+			{ key: 'bedtime', label: 'Bedtime', type: 'datetime', required: true },
+			{ key: 'wake_time', label: 'Wake time', type: 'datetime', required: true },
+			notes
+		]
+	},
+	medications: {
+		label: 'Medications & supplements',
+		fields: [
+			{ key: 'name', label: 'Name', type: 'text', required: true, maxLength: 200 },
+			{ key: 'kind', label: 'Kind', type: 'select', options: medicationKinds },
+			{ key: 'dose', label: 'Dose', type: 'text', maxLength: 200, placeholder: '1 mg' },
+			{ key: 'frequency', label: 'Frequency', type: 'text', maxLength: 200, placeholder: 'daily' },
+			{ key: 'start_date', label: 'Start date', type: 'date' },
+			{ key: 'stop_date', label: 'Stop date', type: 'date' },
+			notes
+		]
+	},
+
+	appointments: {
+		label: 'Appointments & conditions',
+		fields: [
+			date,
+			{ key: 'type', label: 'Type', type: 'select', options: appointmentTypes },
+			{ key: 'provider', label: 'Provider', type: 'text', maxLength: 200 },
+			notes
+		]
+	}
+} as const satisfies Record<string, { label: string; fields: readonly Field[] }>;
+
+export type HealthTable = keyof typeof healthTables;
+export const healthTableNames = Object.keys(healthTables) as HealthTable[];
+export const isHealthTable = (value: unknown): value is HealthTable =>
+	typeof value === 'string' && Object.hasOwn(healthTables, value);

src/lib/money-tracker/charts.test.ts

@@ -94,7 +94,7 @@ describe('money tracker calculations', () => {
 			annualReturnPercent: '5.00',
 			contributionMode: 'excess',
 			fixedMonthlyCents: 0,
-			includeRecurring: 1,
+			includeRecurring: true,
 			endDate: '2026-11-30'
 		};
 		const accounts = [
@@ -140,7 +140,7 @@ describe('money tracker calculations', () => {
 				annualReturnPercent: '5.00',
 				contributionMode: 'excess',
 				fixedMonthlyCents: 0,
-				includeRecurring: 1,
+				includeRecurring: true,
 				endDate: '2026-11-30'
 			},
 			'2026-09-23'

src/lib/money-tracker/charts.ts

@@ -101,7 +101,7 @@ type ProjectionSettings = {
 	annualReturnPercent: string | number;
 	contributionMode: string;
 	fixedMonthlyCents: number;
-	includeRecurring: number;
+	includeRecurring: boolean;
 	endDate?: string | null;
 };
 
@@ -160,7 +160,7 @@ export function wealthProjection(
 					if (entry.accountId === validInvestmentId) indexBalance += entry.amountCents;
 				} else spendable += entry.amountCents;
 			}
-			if (settings?.includeRecurring !== 0 && index > 0) {
+			if (settings?.includeRecurring !== false && index > 0) {
 				for (const item of recurring) {
 					if ((item.startsOn && item.startsOn > date) || (item.endsOn && item.endsOn < first))
 						continue;

src/lib/projects.ts

@@ -1,3 +1,4 @@
+// Real projects (tools and experiments). Personal data trackers live in `trackers`.
 export const projects = [
 	{
 		name: 'vash esports',
@@ -5,18 +6,6 @@ export const projects = [
 		href: 'https://esports.vash.software',
 		external: true
 	},
-	{
-		name: 'game tracker',
-		subtitle: 'every pokemon in every game, and call of duty camo mastery',
-		href: '/projects/game-tracker',
-		external: false
-	},
-	{
-		name: 'animaldex',
-		subtitle: 'add neighborhood pets to the world map',
-		href: '/projects/animaldex',
-		external: false
-	},
 	{
 		name: 'osu! map finder',
 		subtitle: 'find osu! maps for Spotify songs/albums/playlists',
@@ -40,6 +29,16 @@ export const projects = [
 		subtitle: 'Dutch, Korean and English, from zero to fluent',
 		href: '/projects/language-learner',
 		external: false
+	}
+] as const;
+
+// Trackers keep their existing /projects/... URLs (no moves, so no redirects needed).
+export const trackers = [
+	{
+		name: 'game tracker',
+		subtitle: 'every pokemon in every game, and call of duty camo mastery',
+		href: '/projects/game-tracker',
+		external: false
 	},
 	{
 		name: 'money tracker',
@@ -58,5 +57,33 @@ export const projects = [
 		subtitle: 'Counter-Strike market prices across time',
 		href: '/projects/cs-prices',
 		external: false
+	},
+	{
+		name: 'animaldex',
+		subtitle: 'add neighborhood pets to the world map',
+		href: '/projects/animaldex',
+		external: false
+	},
+	{
+		name: 'lists',
+		subtitle: 'books, games, places and other things worth keeping',
+		href: '/lists',
+		external: false
 	}
 ] as const;
+
+// Owner-only trackers: shown in the header, home page and /trackers only to the logged-in
+// owner (layout data `isOwner`), never in the sitemap. Their routes 404 for everyone else.
+export const privateTrackers = [
+	{
+		name: 'health',
+		subtitle: 'private: body, workouts, sleep, meds and vaccinations',
+		href: '/trackers/health',
+		external: false
+	}
+] as const;
+
+type Tracker = { name: string; subtitle: string; href: string; external: boolean };
+export function visibleTrackers(isOwner: boolean): readonly Tracker[] {
+	return isOwner ? [...trackers, ...privateTrackers] : trackers;
+}

src/lib/seo.ts

@@ -32,9 +32,14 @@ const publicPages: Record<string, { title: string; description: string }> = {
 	'/projects': {
 		title: 'Projects',
 		description:
-			'Software projects by Stan Runge, including Game Tracker, Animaldex and Derby Lens.'
+			'Software projects by Stan Runge, including osu! map finder, Derby Lens and Language Learner.'
 	},
 	'/blog': { title: 'Blog', description: 'Articles and notes by Stan Runge.' },
+	'/trackers': {
+		title: 'Trackers',
+		description:
+			'Stan Runge’s trackers: games, money, houses, Counter-Strike prices, Animaldex and lists.'
+	},
 	'/lists': { title: 'Lists', description: 'Lists collected and maintained by Stan Runge.' },
 	'/projects/game-tracker': {
 		title: 'Game Tracker',

src/lib/server/db/relations.ts

@@ -7,8 +7,7 @@ export const relations = defineRelations(schema, (r) => ({
 		sessions: r.many.session(),
 		accounts: r.many.account(),
 		entries: r.many.userEntries(),
-		games: r.many.userGames(),
-		listCompletions: r.many.listItemCompletions()
+		games: r.many.userGames()
 	},
 	session: {
 		user: r.one.user({
@@ -138,25 +137,14 @@ export const relations = defineRelations(schema, (r) => ({
 		})
 	},
 
-	// ── Lists ─────────────────────────────────────
-	lists: {
-		items: r.many.listItems()
+	// ── Meta registry (lists live in schema `lists`, see src/lib/server/lists.ts)
+	metaTables: {
+		columns: r.many.metaColumns()
 	},
-	listItems: {
-		list: r.one.lists({
-			from: r.listItems.listId,
-			to: r.lists.id
-		}),
-		completions: r.many.listItemCompletions()
-	},
-	listItemCompletions: {
-		item: r.one.listItems({
-			from: r.listItemCompletions.itemId,
-			to: r.listItems.id
-		}),
-		user: r.one.user({
-			from: r.listItemCompletions.userId,
-			to: r.user.id
+	metaColumns: {
+		table: r.one.metaTables({
+			from: r.metaColumns.tableId,
+			to: r.metaTables.id
 		})
 	}
 }));

src/lib/server/db/schema/animaldex.ts

@@ -1,7 +1,8 @@
-import { doublePrecision, integer, pgTable, text } from 'drizzle-orm/pg-core';
+import { doublePrecision, integer, text } from 'drizzle-orm/pg-core';
+import { animaldexSchema } from './schemas';
 import { id, timestamps, timestamptz } from './helpers';
 
-export const animals = pgTable('animals', {
+export const animals = animaldexSchema.table('animals', {
 	id: id(),
 
 	species: text('species').notNull(),
@@ -22,7 +23,7 @@ export const animals = pgTable('animals', {
 	...timestamps
 });
 
-export const sightings = pgTable('sightings', {
+export const sightings = animaldexSchema.table('sightings', {
 	id: id(),
 	animalId: integer('animal_id')
 		.notNull()
@@ -40,7 +41,7 @@ export const sightings = pgTable('sightings', {
 	...timestamps
 });
 
-export const photos = pgTable('photos', {
+export const photos = animaldexSchema.table('sighting_photos', {
 	id: id(),
 	sightingId: integer('sighting_id')
 		.notNull()

src/lib/server/db/schema/auth.ts

@@ -1,6 +1,7 @@
-import { pgTable, text, timestamp, boolean, index, uniqueIndex } from 'drizzle-orm/pg-core';
+import { text, timestamp, boolean, index, uniqueIndex } from 'drizzle-orm/pg-core';
+import { authSchema } from './schemas';
 
-export const user = pgTable('user', {
+export const user = authSchema.table('user', {
 	id: text('id').primaryKey(),
 	name: text('name').notNull(),
 	role: text('role').notNull().default('user'),
@@ -14,7 +15,7 @@ export const user = pgTable('user', {
 		.notNull()
 });
 
-export const session = pgTable(
+export const session = authSchema.table(
 	'session',
 	{
 		id: text('id').primaryKey(),
@@ -33,7 +34,7 @@ export const session = pgTable(
 	(table) => [index('session_userId_idx').on(table.userId)]
 );
 
-export const account = pgTable(
+export const account = authSchema.table(
 	'account',
 	{
 		id: text('id').primaryKey(),
@@ -61,7 +62,7 @@ export const account = pgTable(
 	]
 );
 
-export const verification = pgTable(
+export const verification = authSchema.table(
 	'verification',
 	{
 		id: text('id').primaryKey(),

src/lib/server/db/schema/blog.ts

@@ -1,9 +1,10 @@
-import { pgEnum, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { text, unique } from 'drizzle-orm/pg-core';
+import { siteSchema } from './schemas';
 import { id, timestamps } from './helpers';
 
-export const blogArticleStatus = pgEnum('blog_article_status', ['draft', 'published']);
+export const blogArticleStatus = siteSchema.enum('blog_article_status', ['draft', 'published']);
 
-export const blogArticles = pgTable(
+export const blogArticles = siteSchema.table(
 	'blog_articles',
 	{
 		id: id(),

src/lib/server/db/schema/catch-em-all.ts

@@ -1,16 +1,17 @@
-import { boolean, index, integer, pgEnum, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { boolean, index, integer, text, unique } from 'drizzle-orm/pg-core';
+import { gamesSchema, refSchema } from './schemas';
 import { availabilityValues } from '../../../availability';
 import { user } from './auth';
 import { id, timestamps } from './helpers';
 
-export const availability = pgEnum('availability', availabilityValues);
+export const availability = refSchema.enum('availability', availabilityValues);
 
 // Where a catalog row came from. Seeding replaces `pokeapi` and `derived` rows
 // but never touches `manual` ones, which are admin corrections.
 export const catalogSources = ['pokeapi', 'derived', 'manual'] as const;
 const source = () => text('source', { enum: catalogSources }).notNull().default('pokeapi');
 
-export const pokemon = pgTable('pokemon', {
+export const pokemon = refSchema.table('pokemon', {
 	id: id(),
 	number: integer('number').notNull().unique(),
 	generation: integer('generation').notNull().default(1),
@@ -32,7 +33,7 @@ export const pokemon = pgTable('pokemon', {
 	...timestamps
 });
 
-export const games = pgTable('games', {
+export const games = refSchema.table('pokemon_games', {
 	id: id(),
 	sourceId: integer('source_id').unique(),
 	slug: text('slug').unique(),
@@ -43,7 +44,7 @@ export const games = pgTable('games', {
 	...timestamps
 });
 
-export const pokemonGameEntries = pgTable(
+export const pokemonGameEntries = refSchema.table(
 	'pokemon_game_entries',
 	{
 		id: id(),
@@ -62,7 +63,7 @@ export const pokemonGameEntries = pgTable(
 	(table) => [unique().on(table.pokemonId, table.gameId), index().on(table.gameId)]
 );
 
-export const pokemonLocations = pgTable('pokemon_locations', {
+export const pokemonLocations = refSchema.table('pokemon_locations', {
 	id: id(),
 	sourceId: integer('source_id').unique(),
 	slug: text('slug').notNull(),
@@ -76,7 +77,7 @@ export const pokemonLocations = pgTable('pokemon_locations', {
 	...timestamps
 });
 
-export const pokemonEncounters = pgTable(
+export const pokemonEncounters = refSchema.table(
 	'pokemon_encounters',
 	{
 		id: id(),
@@ -106,7 +107,7 @@ export const pokemonEncounters = pgTable(
 
 // The method that applies in each game, e.g. Magneton → Magnezone needs Mt.
 // Coronet in Platinum but a Thunder Stone in Sword.
-export const pokemonEvolutions = pgTable(
+export const pokemonEvolutions = refSchema.table(
 	'pokemon_evolutions',
 	{
 		id: id(),
@@ -129,8 +130,8 @@ export const pokemonEvolutions = pgTable(
 	]
 );
 
-export const userEntries = pgTable(
-	'user_entries',
+export const userEntries = gamesSchema.table(
+	'catch_em_all_entries',
 	{
 		id: id(),
 		pokemonGameEntryId: integer('pokemon_game_entry_id')
@@ -145,8 +146,8 @@ export const userEntries = pgTable(
 );
 
 // which games a user has chosen to track ("rules")
-export const userGames = pgTable(
-	'user_games',
+export const userGames = gamesSchema.table(
+	'catch_em_all_games',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -161,7 +162,7 @@ export const userGames = pgTable(
 );
 
 // A row distinguishes an explicit empty game selection from a new account.
-export const catchEmAllSettings = pgTable('catch_em_all_settings', {
+export const catchEmAllSettings = gamesSchema.table('catch_em_all_settings', {
 	id: id(),
 	userId: text('user_id')
 		.notNull()

src/lib/server/db/schema/cs-prices.ts

@@ -1,9 +1,18 @@
-import { index, integer, pgTable, text, timestamp, uniqueIndex, bigint } from 'drizzle-orm/pg-core';
+import {
+	index,
+	integer,
+	primaryKey,
+	text,
+	timestamp,
+	uniqueIndex,
+	bigint
+} from 'drizzle-orm/pg-core';
+import { csSchema } from './schemas';
 import { id } from './helpers';
 
 // A Steam market hash name identifies a listing, including wear and special variants.
-export const csMarketItems = pgTable(
-	'cs_market_items',
+export const csMarketItems = csSchema.table(
+	'items',
 	{
 		id: id(),
 		marketHashName: text('market_hash_name').notNull(),
@@ -14,14 +23,14 @@ export const csMarketItems = pgTable(
 		lastSeenAt: timestamp('last_seen_at', { withTimezone: true }).notNull().defaultNow()
 	},
 	(table) => [
-		uniqueIndex('cs_market_items_hash_idx').on(table.marketHashName),
-		index('cs_market_items_name_idx').on(table.name)
+		uniqueIndex('items_hash_idx').on(table.marketHashName),
+		index('items_name_idx').on(table.name)
 	]
 );
 
 // Keep source observations intact. Aggregation happens only when the chart is requested.
-export const csPriceObservations = pgTable(
-	'cs_price_observations',
+export const csPriceObservations = csSchema.table(
+	'price_observations',
 	{
 		id: bigint('id', { mode: 'number' }).primaryKey().generatedAlwaysAsIdentity(),
 		itemId: integer('item_id')
@@ -36,25 +45,25 @@ export const csPriceObservations = pgTable(
 		importedAt: timestamp('imported_at', { withTimezone: true }).notNull().defaultNow()
 	},
 	(table) => [
-		uniqueIndex('cs_price_observations_unique_idx').on(
+		uniqueIndex('price_observations_unique_idx').on(
 			table.itemId,
 			table.source,
 			table.currency,
 			table.observedAt,
 			table.kind
 		),
-		index('cs_price_observations_lookup_idx').on(
+		index('price_observations_lookup_idx').on(
 			table.itemId,
 			table.source,
 			table.currency,
 			table.observedAt
 		),
-		index('cs_price_observations_time_idx').on(table.observedAt)
+		index('price_observations_time_idx').on(table.observedAt)
 	]
 );
 
-export const csItemDimensions = pgTable(
-	'cs_item_dimensions',
+export const csItemDimensions = csSchema.table(
+	'item_dimensions',
 	{
 		itemId: integer('item_id')
 			.notNull()
@@ -63,19 +72,19 @@ export const csItemDimensions = pgTable(
 		value: text('value').notNull()
 	},
 	(table) => [
-		uniqueIndex('cs_item_dimensions_unique_idx').on(table.itemId, table.key),
-		index('cs_item_dimensions_filter_idx').on(table.key, table.value, table.itemId)
+		primaryKey({ name: 'item_dimensions_pkey', columns: [table.itemId, table.key] }),
+		index('item_dimensions_filter_idx').on(table.key, table.value, table.itemId)
 	]
 );
 
-export const csPriceStreams = pgTable(
-	'cs_price_streams',
+export const csPriceStreams = csSchema.table(
+	'price_streams',
 	{
 		source: text('source').notNull(),
 		currency: text('currency').notNull(),
 		kind: text('kind').notNull()
 	},
 	(table) => [
-		uniqueIndex('cs_price_streams_unique_idx').on(table.source, table.currency, table.kind)
+		primaryKey({ name: 'price_streams_pkey', columns: [table.source, table.currency, table.kind] })
 	]
 );

src/lib/server/db/schema/game-tracker.ts

@@ -1,11 +1,12 @@
-import { boolean, index, integer, jsonb, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { boolean, index, integer, jsonb, text, unique } from 'drizzle-orm/pg-core';
+import { gamesSchema, refSchema } from './schemas';
 import type { MasteryRules } from '../../../game-tracker/mastery';
 import { user } from './auth';
 import { id, timestamps } from './helpers';
 
 // Checklist-style games (Call of Duty and future franchises). Pokémon keeps its
 // own species × game model in catch-em-all.ts.
-export const trackerGames = pgTable('tracker_games', {
+export const trackerGames = refSchema.table('tracker_games', {
 	id: id(),
 	slug: text('slug').notNull().unique(),
 	franchise: text('franchise').notNull(),
@@ -17,7 +18,7 @@ export const trackerGames = pgTable('tracker_games', {
 	...timestamps
 });
 
-export const trackerItems = pgTable(
+export const trackerItems = refSchema.table(
 	'tracker_items',
 	{
 		id: id(),
@@ -41,7 +42,7 @@ export const trackerItems = pgTable(
 
 // One row per completed milestone: `done` for achievements, or a weapon
 // milestone key such as `gold` or `maxLevel`. Derived tiers are never stored.
-export const trackerProgress = pgTable(
+export const trackerProgress = gamesSchema.table(
 	'tracker_progress',
 	{
 		id: id(),

src/lib/server/db/schema/health.ts

@@ -0,0 +1,179 @@
+import { check, date, index, integer, numeric, text, timestamp, uuid } from 'drizzle-orm/pg-core';
+import { sql } from 'drizzle-orm';
+import { healthSchema } from './schemas';
+import { timestamps, timestamptz } from './helpers';
+
+// Private health log (owner only, see requireOwner). No user_id: there is exactly one
+// owner, and the whole schema is readable by personal_app only (no personal_ro grant).
+// Numerics use mode 'number' so the app gets plain numbers instead of strings.
+
+const pk = () => uuid('id').primaryKey().defaultRandom();
+const day = (name = 'date') => date(name, { mode: 'string' });
+const sane = (column: string) => sql.raw(`"${column}" >= DATE '1900-01-01'`);
+
+export const healthVaccinations = healthSchema.table(
+	'vaccinations',
+	{
+		id: pk(),
+		vaccine: text('vaccine').notNull(),
+		target: text('target'), // disease(s) it protects against, e.g. "DTP", "COVID-19"
+		doseNo: integer('dose_no'),
+		date: day().notNull(),
+		batchLot: text('batch_lot'),
+		provider: text('provider'), // GGD, GP, travel clinic...
+		country: text('country'), // ISO 3166-1 alpha-2, e.g. NL
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		index('vaccinations_date_idx').on(t.date),
+		check('vaccinations_vaccine_check', sql`length(btrim(${t.vaccine})) > 0`),
+		check('vaccinations_dose_no_check', sql`${t.doseNo} IS NULL OR ${t.doseNo} BETWEEN 1 AND 20`),
+		check('vaccinations_country_check', sql`${t.country} IS NULL OR ${t.country} ~ '^[A-Z]{2}$'`),
+		check('vaccinations_date_check', sane('date'))
+	]
+);
+
+export const healthBodyMeasurements = healthSchema.table(
+	'body_measurements',
+	{
+		id: pk(),
+		date: day().notNull(),
+		weightKg: numeric('weight_kg', { precision: 5, scale: 2, mode: 'number' }),
+		waistCm: numeric('waist_cm', { precision: 5, scale: 1, mode: 'number' }), // at the navel
+		bodyFatPct: numeric('body_fat_pct', { precision: 4, scale: 1, mode: 'number' }),
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		index('body_measurements_date_idx').on(t.date),
+		check(
+			'body_measurements_any_check',
+			sql`${t.weightKg} IS NOT NULL OR ${t.waistCm} IS NOT NULL OR ${t.bodyFatPct} IS NOT NULL`
+		),
+		check(
+			'body_measurements_weight_check',
+			sql`${t.weightKg} IS NULL OR ${t.weightKg} BETWEEN 20 AND 400`
+		),
+		check(
+			'body_measurements_waist_check',
+			sql`${t.waistCm} IS NULL OR ${t.waistCm} BETWEEN 30 AND 250`
+		),
+		check(
+			'body_measurements_fat_check',
+			sql`${t.bodyFatPct} IS NULL OR ${t.bodyFatPct} BETWEEN 1 AND 75`
+		),
+		check('body_measurements_date_check', sane('date'))
+	]
+);
+
+export const healthWorkouts = healthSchema.table(
+	'workouts',
+	{
+		id: pk(),
+		date: day().notNull(),
+		sessionId: uuid('session_id'), // optional: groups the exercises of one session
+		exercise: text('exercise').notNull(),
+		sets: integer('sets'),
+		reps: integer('reps'), // per set
+		loadKg: numeric('load_kg', { precision: 6, scale: 2, mode: 'number' }),
+		rpe: numeric('rpe', { precision: 3, scale: 1, mode: 'number' }),
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		index('workouts_date_idx').on(t.date),
+		index('workouts_session_idx').on(t.sessionId),
+		check('workouts_exercise_check', sql`length(btrim(${t.exercise})) > 0`),
+		check('workouts_sets_check', sql`${t.sets} IS NULL OR ${t.sets} BETWEEN 1 AND 100`),
+		check('workouts_reps_check', sql`${t.reps} IS NULL OR ${t.reps} BETWEEN 0 AND 1000`),
+		check('workouts_load_check', sql`${t.loadKg} IS NULL OR ${t.loadKg} BETWEEN 0 AND 1000`),
+		check('workouts_rpe_check', sql`${t.rpe} IS NULL OR ${t.rpe} BETWEEN 1 AND 10`),
+		check('workouts_date_check', sane('date'))
+	]
+);
+
+export const healthNutritionDaily = healthSchema.table(
+	'nutrition_daily',
+	{
+		id: pk(),
+		date: day().notNull().unique('nutrition_daily_date_key'),
+		kcal: integer('kcal'),
+		proteinG: numeric('protein_g', { precision: 5, scale: 1, mode: 'number' }),
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		check('nutrition_daily_kcal_check', sql`${t.kcal} IS NULL OR ${t.kcal} BETWEEN 0 AND 20000`),
+		check(
+			'nutrition_daily_protein_check',
+			sql`${t.proteinG} IS NULL OR ${t.proteinG} BETWEEN 0 AND 1000`
+		),
+		check('nutrition_daily_date_check', sane('date'))
+	]
+);
+
+export const healthSleep = healthSchema.table(
+	'sleep',
+	{
+		id: pk(),
+		date: day().notNull().unique('sleep_date_key'), // the wake-up date of the night
+		bedtime: timestamptz('bedtime').notNull(),
+		wakeTime: timestamp('wake_time', { withTimezone: true }).notNull(),
+		hours: numeric('hours', { precision: 4, scale: 2, mode: 'number' }).generatedAlwaysAs(
+			sql`round((extract(epoch from (wake_time - bedtime)) / 3600)::numeric, 2)`
+		),
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		check('sleep_order_check', sql`${t.wakeTime} > ${t.bedtime}`),
+		check('sleep_length_check', sql`${t.wakeTime} - ${t.bedtime} <= interval '24 hours'`),
+		check('sleep_date_check', sane('date'))
+	]
+);
+
+export const healthMedications = healthSchema.table(
+	'medications',
+	{
+		id: pk(),
+		name: text('name').notNull(),
+		kind: text('kind').notNull().default('medication'),
+		dose: text('dose'), // free text: "1 mg", "5% solution, 1 ml"
+		frequency: text('frequency'), // free text: "daily", "2x daily", "as needed"
+		startDate: day('start_date'),
+		stopDate: day('stop_date'), // null = still taking it
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		index('medications_start_date_idx').on(t.startDate),
+		index('medications_stop_date_idx').on(t.stopDate),
+		check('medications_name_check', sql`length(btrim(${t.name})) > 0`),
+		check('medications_kind_check', sql`${t.kind} IN ('medication','supplement')`),
+		check(
+			'medications_dates_check',
+			sql`${t.stopDate} IS NULL OR ${t.startDate} IS NULL OR ${t.stopDate} >= ${t.startDate}`
+		)
+	]
+);
+
+export const healthAppointments = healthSchema.table(
+	'appointments',
+	{
+		id: pk(),
+		date: day().notNull(),
+		type: text('type').notNull().default('appointment'),
+		provider: text('provider'),
+		notes: text('notes'),
+		...timestamps
+	},
+	(t) => [
+		index('appointments_date_idx').on(t.date),
+		check(
+			'appointments_type_check',
+			sql`${t.type} IN ('appointment','checkup','condition','test','procedure','other')`
+		),
+		check('appointments_date_check', sane('date'))
+	]
+);

src/lib/server/db/schema/house-tracker.ts

@@ -6,16 +6,16 @@ import {
 	index,
 	integer,
 	jsonb,
-	pgTable,
+	primaryKey,
 	text,
 	uniqueIndex
 } from 'drizzle-orm/pg-core';
+import { houseSchema } from './schemas';
 import { sql } from 'drizzle-orm';
 import { id, timestamptz } from './helpers';
 
-// Created by scripts/house-tracker-migration.sql; keep both in sync.
-export const houseListings = pgTable(
-	'house_listings',
+export const houseListings = houseSchema.table(
+	'listings',
 	{
 		id: id(),
 		source: text('source').notNull(),
@@ -58,21 +58,21 @@ export const houseListings = pgTable(
 		notes: text('notes')
 	},
 	(table) => [
-		check('house_listings_offer_check', sql`offer IN ('rent', 'buy')`),
-		check('house_listings_price_eur_check', sql`price_eur IS NULL OR price_eur >= 0`),
-		uniqueIndex('house_listings_source_idx').on(table.source, table.sourceId),
-		index('house_listings_active_idx')
-			.on(table.offer, table.firstSeenAt.desc())
+		check('listings_offer_check', sql`offer IN ('rent', 'buy')`),
+		check('listings_price_eur_check', sql`price_eur IS NULL OR price_eur >= 0`),
+		uniqueIndex('listings_source_idx').on(table.source, table.sourceId),
+		index('listings_active_idx')
+			.on(table.offer, table.firstSeenAt.desc().nullsFirst())
 			.where(sql`removed_at IS NULL`),
-		index('house_listings_city_idx').on(table.source, table.offer, table.citySlug),
-		index('house_listings_details_idx')
-			.on(table.firstSeenAt.desc())
+		index('listings_city_idx').on(table.source, table.offer, table.citySlug),
+		index('listings_details_idx')
+			.on(table.firstSeenAt.desc().nullsFirst())
 			.where(sql`detail_fetched_at IS NULL`)
 	]
 );
 
-export const housePriceHistory = pgTable(
-	'house_price_history',
+export const housePriceHistory = houseSchema.table(
+	'price_history',
 	{
 		listingId: integer('listing_id')
 			.notNull()
@@ -80,10 +80,12 @@ export const housePriceHistory = pgTable(
 		observedAt: timestamptz('observed_at').notNull().defaultNow(),
 		priceEur: integer('price_eur').notNull()
 	},
-	(table) => [index('house_price_history_listing_idx').on(table.listingId, table.observedAt)]
+	(table) => [
+		primaryKey({ name: 'price_history_pkey', columns: [table.listingId, table.observedAt] })
+	]
 );
 
-export const houseSearches = pgTable('house_searches', {
+export const houseSearches = houseSchema.table('searches', {
 	searchUrl: text('search_url').primaryKey(),
 	source: text('source').notNull(),
 	lane: text('lane').notNull(),
@@ -92,8 +94,8 @@ export const houseSearches = pgTable('house_searches', {
 	lastFound: integer('last_found').notNull().default(0)
 });
 
-export const houseWorkerRuns = pgTable(
-	'house_worker_runs',
+export const houseWorkerRuns = houseSchema.table(
+	'worker_runs',
 	{
 		id: bigint('id', { mode: 'number' }).primaryKey().generatedAlwaysAsIdentity(),
 		source: text('source').notNull(),
@@ -106,11 +108,11 @@ export const houseWorkerRuns = pgTable(
 		message: text('message'),
 		createdAt: timestamptz('created_at').notNull().defaultNow()
 	},
-	(table) => [index('house_worker_runs_created_idx').on(table.createdAt.desc())]
+	(table) => [index('worker_runs_created_idx').on(table.createdAt.desc().nullsFirst())]
 );
 
-export const houseAlertRules = pgTable(
-	'house_alert_rules',
+export const houseAlertRules = houseSchema.table(
+	'alert_rules',
 	{
 		id: id(),
 		name: text('name').notNull(),
@@ -122,7 +124,11 @@ export const houseAlertRules = pgTable(
 		minBedrooms: integer('min_bedrooms'),
 		cities: text('cities').array().notNull().default([]),
 		propertyTypes: text('property_types').array().notNull().default([]),
-		createdAt: timestamptz('created_at').notNull().defaultNow()
+		createdAt: timestamptz('created_at').notNull().defaultNow(),
+		updatedAt: timestamptz('updated_at')
+			.notNull()
+			.defaultNow()
+			.$onUpdate(() => new Date())
 	},
-	() => [check('house_alert_rules_offer_check', sql`offer IN ('rent', 'buy')`)]
+	() => [check('alert_rules_offer_check', sql`offer IN ('rent', 'buy')`)]
 );

src/lib/server/db/schema/index.ts

@@ -7,7 +7,9 @@ export * from './catch-em-all';
 export * from './game-tracker';
 export * from './tracker-journal';
 export * from './animaldex';
-export * from './lists';
+export * from './lists'; // meta registry; the lists themselves are runtime tables
+export * from './schemas';
 export * from './money-tracker';
 export * from './cs-prices';
 export * from './house-tracker';
+export * from './health';

src/lib/server/db/schema/lists.ts

@@ -1,47 +1,92 @@
-import { boolean, index, integer, pgTable, text, unique } from 'drizzle-orm/pg-core';
-import { id, timestamps } from './helpers';
-import { user } from './auth';
+import {
+	boolean,
+	check,
+	index,
+	integer,
+	jsonb,
+	text,
+	timestamp,
+	unique
+} from 'drizzle-orm/pg-core';
+import { sql } from 'drizzle-orm';
+import { metaSchema } from './schemas';
 
-export const lists = pgTable('lists', {
-	id: id(),
-	name: text('name').notNull(),
-	slug: text('slug').notNull().unique(),
-	pictureUrl: text('picture_url'),
-	isProgress: boolean('is_progress').notNull().default(false),
-	...timestamps
-});
+// Registry of GUI-visible tables. Runtime lists live in schema `lists` (one real
+// table per list, created through meta.create_list()); that schema is excluded
+// from drizzle-kit via schemaFilter. Structure truth is pg_catalog; these rows are
+// presentation. See src/lib/server/lists.ts for the list engine.
+const ts = (name: string) => timestamp(name, { withTimezone: true });
 
-export const listItems = pgTable(
-	'list_items',
+export const metaTables = metaSchema.table(
+	'tables',
 	{
-		id: id(),
-		listId: integer('list_id')
-			.notNull()
-			.references(() => lists.id, { onDelete: 'cascade' }),
-		name: text('name').notNull(),
-		pictureUrl: text('picture_url'),
+		id: integer('id').primaryKey().generatedByDefaultAsIdentity(),
+		schemaName: text('schema_name').notNull(),
+		tableName: text('table_name').notNull(),
+		slug: text('slug').notNull().unique('tables_slug_key'),
+		displayName: text('display_name').notNull(),
 		description: text('description'),
-		...timestamps
+		icon: text('icon'),
+		pictureUrl: text('picture_url'),
+		kind: text('kind', { enum: ['list', 'core', 'ref'] }).notNull(),
+		editable: boolean('editable').notNull().default(true),
+		hasDone: boolean('has_done').notNull().default(false),
+		defaultSort: text('default_sort'),
+		sortOrder: integer('sort_order').notNull().default(0),
+		archivedAt: ts('archived_at'),
+		createdAt: ts('created_at').notNull().defaultNow(),
+		updatedAt: ts('updated_at').notNull().defaultNow()
 	},
-	(table) => [index().on(table.listId)]
+	(t) => [
+		unique('tables_schema_name_table_name_key').on(t.schemaName, t.tableName),
+		check('tables_slug_check', sql`slug ~ '^[a-z0-9][a-z0-9-]{0,62}$'`),
+		check('tables_kind_check', sql`kind IN ('list','core','ref')`)
+	]
 );
 
-export const listItemCompletions = pgTable(
-	'list_item_completions',
+export const uiTypes = [
+	'text',
+	'longtext',
+	'url',
+	'image',
+	'number',
+	'cents',
+	'date',
+	'datetime',
+	'bool',
+	'select',
+	'multiselect',
+	'fk',
+	'json'
+] as const;
+export type UiType = (typeof uiTypes)[number];
+
+export const metaColumns = metaSchema.table(
+	'columns',
 	{
-		id: id(),
-		itemId: integer('item_id')
+		id: integer('id').primaryKey().generatedByDefaultAsIdentity(),
+		tableId: integer('table_id')
 			.notNull()
-			.references(() => listItems.id, { onDelete: 'cascade' }),
-		userId: text('user_id')
-			.notNull()
-			.references(() => user.id, { onDelete: 'cascade' }),
-		...timestamps
+			.references(() => metaTables.id, { onDelete: 'cascade' }),
+		columnName: text('column_name').notNull(),
+		label: text('label'),
+		uiType: text('ui_type', { enum: uiTypes }).notNull(),
+		options: jsonb('options').$type<{ values?: string[] }>().notNull().default({}),
+		position: integer('position').notNull().default(0),
+		hidden: boolean('hidden').notNull().default(false),
+		helpText: text('help_text'),
+		createdAt: ts('created_at').notNull().defaultNow(),
+		updatedAt: ts('updated_at').notNull().defaultNow()
 	},
-	(table) => [unique().on(table.itemId, table.userId), index().on(table.userId)]
+	(t) => [
+		unique('columns_table_id_column_name_key').on(t.tableId, t.columnName),
+		index('columns_table_id_index').on(t.tableId),
+		check(
+			'columns_ui_type_check',
+			sql`ui_type IN ('text','longtext','url','image','number','cents','date','datetime','bool','select','multiselect','fk','json')`
+		)
+	]
 );
 
-export type List = typeof lists.$inferSelect;
-export type NewList = typeof lists.$inferInsert;
-export type ListItem = typeof listItems.$inferSelect;
-export type NewListItem = typeof listItems.$inferInsert;
+export type MetaTable = typeof metaTables.$inferSelect;
+export type MetaColumn = typeof metaColumns.$inferSelect;

src/lib/server/db/schema/money-tracker.ts

@@ -1,9 +1,11 @@
-import { date, index, integer, numeric, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { boolean, check, date, index, integer, numeric, text, unique } from 'drizzle-orm/pg-core';
+import { sql } from 'drizzle-orm';
+import { moneySchema } from './schemas';
 import { id, timestamps } from './helpers';
 import { user } from './auth';
 
-export const moneyAccounts = pgTable(
-	'money_accounts',
+export const moneyAccounts = moneySchema.table(
+	'accounts',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -15,11 +17,15 @@ export const moneyAccounts = pgTable(
 		color: text('color'),
 		...timestamps
 	},
-	(table) => [unique().on(table.userId, table.name), index().on(table.userId)]
+	(table) => [
+		unique().on(table.userId, table.name),
+		index().on(table.userId),
+		check('accounts_kind_check', sql`kind IN ('spendable','investment')`)
+	]
 );
 
-export const moneyTransactions = pgTable(
-	'money_transactions',
+export const moneyTransactions = moneySchema.table(
+	'transactions',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -36,8 +42,8 @@ export const moneyTransactions = pgTable(
 	(table) => [index().on(table.userId, table.date, table.id), index().on(table.accountId)]
 );
 
-export const moneyRecurring = pgTable(
-	'money_recurring',
+export const moneyRecurring = moneySchema.table(
+	'recurring',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -51,11 +57,14 @@ export const moneyRecurring = pgTable(
 		accountId: integer('account_id').references(() => moneyAccounts.id, { onDelete: 'set null' }),
 		...timestamps
 	},
-	(table) => [index().on(table.userId)]
+	(table) => [
+		index().on(table.userId),
+		check('recurring_cadence_check', sql`cadence IN ('weekly','monthly','yearly')`)
+	]
 );
 
-export const moneyForecasts = pgTable(
-	'money_forecasts',
+export const moneyForecasts = moneySchema.table(
+	'forecasts',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -70,8 +79,8 @@ export const moneyForecasts = pgTable(
 	(table) => [index().on(table.userId, table.date)]
 );
 
-export const moneyUtilitySettings = pgTable(
-	'money_utility_settings',
+export const moneyUtilitySettings = moneySchema.table(
+	'utility_settings',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -83,11 +92,14 @@ export const moneyUtilitySettings = pgTable(
 		billingStart: date('billing_start', { mode: 'string' }),
 		...timestamps
 	},
-	(table) => [unique().on(table.userId, table.kind)]
+	(table) => [
+		unique().on(table.userId, table.kind),
+		check('utility_settings_kind_check', sql`kind IN ('electricity','gas','water')`)
+	]
 );
 
-export const moneyUtilityReadings = pgTable(
-	'money_utility_readings',
+export const moneyUtilityReadings = moneySchema.table(
+	'utility_readings',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -98,11 +110,14 @@ export const moneyUtilityReadings = pgTable(
 		reading: numeric('reading', { precision: 12, scale: 3 }).notNull(),
 		...timestamps
 	},
-	(table) => [index().on(table.userId, table.kind, table.date)]
+	(table) => [
+		index().on(table.userId, table.kind, table.date),
+		check('utility_readings_kind_check', sql`kind IN ('electricity','gas','water')`)
+	]
 );
 
-export const moneyWishlist = pgTable(
-	'money_wishlist',
+export const moneyWishlist = moneySchema.table(
+	'wishlist',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -117,8 +132,8 @@ export const moneyWishlist = pgTable(
 	(table) => [index().on(table.userId)]
 );
 
-export const moneyProjectionSettings = pgTable(
-	'money_projection_settings',
+export const moneyProjectionSettings = moneySchema.table(
+	'projection_settings',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -132,16 +147,22 @@ export const moneyProjectionSettings = pgTable(
 			.notNull()
 			.default('5.00'),
 		contributionMode: text('contribution_mode').notNull().default('excess'),
-		includeRecurring: integer('include_recurring').notNull().default(1),
+		includeRecurring: boolean('include_recurring').notNull().default(true),
 		fixedMonthlyCents: integer('fixed_monthly_cents').notNull().default(0),
 		endDate: date('end_date', { mode: 'string' }),
 		...timestamps
 	},
-	(table) => [unique().on(table.userId)]
+	(table) => [
+		unique().on(table.userId),
+		check(
+			'projection_settings_contribution_mode_check',
+			sql`contribution_mode IN ('excess','fixed')`
+		)
+	]
 );
 
-export const moneyInsurances = pgTable(
-	'money_insurances',
+export const moneyInsurances = moneySchema.table(
+	'insurances',
 	{
 		id: id(),
 		userId: text('user_id')
@@ -154,5 +175,8 @@ export const moneyInsurances = pgTable(
 		cadence: text('cadence').notNull().default('monthly'),
 		...timestamps
 	},
-	(table) => [index().on(table.userId)]
+	(table) => [
+		index().on(table.userId),
+		check('insurances_cadence_check', sql`cadence IN ('weekly','monthly','yearly')`)
+	]
 );

src/lib/server/db/schema/progress.ts

@@ -1,7 +1,8 @@
-import { integer, pgTable, text, unique } from 'drizzle-orm/pg-core';
+import { integer, text, unique } from 'drizzle-orm/pg-core';
+import { siteSchema } from './schemas';
 import { id, timestamps } from './helpers';
 
-export const tasks = pgTable('tasks', {
+export const tasks = siteSchema.table('tasks', {
 	id: id(),
 	name: text('name').notNull(),
 	currentPoints: integer('current_points').notNull().default(0),
@@ -10,15 +11,15 @@ export const tasks = pgTable('tasks', {
 	...timestamps
 });
 
-export const topics = pgTable('topics', {
+export const topics = siteSchema.table('topics', {
 	id: id(),
 	name: text('name').notNull(),
 	emoji: text('emoji'),
 	...timestamps
 });
 
-export const tasksToTopics = pgTable(
-	'tasks_to_topics',
+export const tasksToTopics = siteSchema.table(
+	'task_topics',
 	{
 		id: id(),
 		taskId: integer('task_id')

src/lib/server/db/schema/schemas.ts

@@ -0,0 +1,15 @@
+import { pgSchema } from 'drizzle-orm/pg-core';
+
+// One Postgres schema per domain (see ~/dev/setup/db/PLAN.md). `lists`, `legacy`,
+// `energy` and `hardware` are deliberately not modelled here: lists are created at
+// runtime through meta.create_list(), and energy/hardware belong to other tools.
+export const authSchema = pgSchema('auth');
+export const moneySchema = pgSchema('money');
+export const houseSchema = pgSchema('house');
+export const refSchema = pgSchema('ref');
+export const gamesSchema = pgSchema('games');
+export const csSchema = pgSchema('cs');
+export const animaldexSchema = pgSchema('animaldex');
+export const siteSchema = pgSchema('site');
+export const metaSchema = pgSchema('meta');
+export const healthSchema = pgSchema('health');

src/lib/server/db/schema/tracker-journal.ts

@@ -2,20 +2,21 @@ import {
 	boolean,
 	check,
 	date,
+	numeric,
 	index,
 	integer,
 	jsonb,
-	pgTable,
 	text,
 	unique
 } from 'drizzle-orm/pg-core';
+import { gamesSchema, refSchema } from './schemas';
 import { sql } from 'drizzle-orm';
 import { user } from './auth';
 import { games, pokemon } from './catch-em-all';
 import { trackerGames, trackerItems } from './game-tracker';
 import { id, timestamps } from './helpers';
 
-export const pokemonResearch = pgTable('pokemon_research', {
+export const pokemonResearch = refSchema.table('pokemon_research', {
 	pokemonId: integer('pokemon_id')
 		.primaryKey()
 		.references(() => pokemon.id, { onDelete: 'cascade' }),
@@ -36,7 +37,7 @@ export const pokemonResearch = pgTable('pokemon_research', {
 		.notNull()
 });
 
-export const pokemonDexNumbers = pgTable(
+export const pokemonDexNumbers = refSchema.table(
 	'pokemon_dex_numbers',
 	{
 		id: id(),
@@ -53,7 +54,7 @@ export const pokemonDexNumbers = pgTable(
 	(t) => [unique().on(t.pokemonId, t.gameId, t.dex), index().on(t.gameId)]
 );
 
-export const pokemonMoves = pgTable('pokemon_moves', {
+export const pokemonMoves = refSchema.table('pokemon_moves', {
 	id: integer('id').primaryKey(),
 	name: text('name').notNull(),
 	type: text('type').notNull(),
@@ -65,7 +66,7 @@ export const pokemonMoves = pgTable('pokemon_moves', {
 	target: text('target').notNull()
 });
 
-export const pokemonLearnsets = pgTable(
+export const pokemonLearnsets = refSchema.table(
 	'pokemon_learnsets',
 	{
 		id: id(),
@@ -78,7 +79,7 @@ export const pokemonLearnsets = pgTable(
 	(t) => [unique().on(t.pokemonId, t.versionGroup)]
 );
 
-export const pokemonGameResearch = pgTable('pokemon_game_research', {
+export const pokemonGameResearch = refSchema.table('pokemon_game_research', {
 	gameId: integer('game_id')
 		.primaryKey()
 		.references(() => games.id, { onDelete: 'cascade' }),
@@ -86,7 +87,7 @@ export const pokemonGameResearch = pgTable('pokemon_game_research', {
 	regions: text('regions').array().notNull()
 });
 
-export const pokemonJourneys = pgTable(
+export const pokemonJourneys = gamesSchema.table(
 	'pokemon_journeys',
 	{
 		id: id(),
@@ -103,10 +104,13 @@ export const pokemonJourneys = pgTable(
 		completed: boolean('completed').notNull().default(false),
 		...timestamps
 	},
-	(t) => [unique().on(t.userId, t.gameId)]
+	(t) => [
+		unique().on(t.userId, t.gameId),
+		check('pokemon_journeys_stage_check', sql`${t.stage} IN ('story','postgame','collection')`)
+	]
 );
 
-export const pokemonSeen = pgTable(
+export const pokemonSeen = gamesSchema.table(
 	'pokemon_seen',
 	{
 		id: id(),
@@ -124,7 +128,7 @@ export const pokemonSeen = pgTable(
 	(t) => [unique().on(t.userId, t.gameId, t.pokemonId), index().on(t.userId)]
 );
 
-export const pokemonCatches = pgTable(
+export const pokemonCatches = gamesSchema.table(
 	'pokemon_catches',
 	{
 		id: id(),
@@ -157,13 +161,14 @@ export const pokemonCatches = pgTable(
 	(t) => [
 		index().on(t.userId, t.gameId, t.pokemonId),
 		unique().on(t.userId, t.gameId, t.partySlot),
-		check('pokemon_catch_level', sql`${t.level} between 1 and 100`),
-		check('pokemon_party_slot', sql`${t.partySlot} between 1 and 6`),
-		check('pokemon_four_moves', sql`cardinality(${t.moves}) <= 4`)
+		check('pokemon_catches_level_check', sql`${t.level} between 1 and 100`),
+		check('pokemon_catches_party_slot_check', sql`${t.partySlot} between 1 and 6`),
+		check('pokemon_catches_moves_check', sql`cardinality(${t.moves}) <= 4`),
+		check('pokemon_catches_stage_check', sql`${t.stage} IN ('story','postgame','collection')`)
 	]
 );
 
-export const pokemonMilestones = pgTable(
+export const pokemonMilestones = gamesSchema.table(
 	'pokemon_milestones',
 	{
 		id: id(),
@@ -184,7 +189,7 @@ export const pokemonMilestones = pgTable(
 	(t) => [unique().on(t.userId, t.gameId, t.key)]
 );
 
-export const trackerRanks = pgTable(
+export const trackerRanks = gamesSchema.table(
 	'tracker_ranks',
 	{
 		id: id(),
@@ -200,14 +205,12 @@ export const trackerRanks = pgTable(
 	},
 	(t) => [
 		unique().on(t.userId, t.gameId),
-		check(
-			'tracker_rank_range',
-			sql`${t.level} between 1 and 10000 and ${t.prestige} between 0 and 1000`
-		)
+		check('tracker_ranks_level_check', sql`${t.level} between 1 and 10000`),
+		check('tracker_ranks_prestige_check', sql`${t.prestige} between 0 and 1000`)
 	]
 );
 
-export const trackerWeaponRanks = pgTable(
+export const trackerWeaponRanks = gamesSchema.table(
 	'tracker_weapon_ranks',
 	{
 		id: id(),
@@ -223,14 +226,12 @@ export const trackerWeaponRanks = pgTable(
 	},
 	(t) => [
 		unique().on(t.userId, t.itemId),
-		check(
-			'tracker_weapon_rank_range',
-			sql`${t.level} between 1 and 10000 and ${t.prestige} between 0 and 1000`
-		)
+		check('tracker_weapon_ranks_level_check', sql`${t.level} between 1 and 10000`),
+		check('tracker_weapon_ranks_prestige_check', sql`${t.prestige} between 0 and 1000`)
 	]
 );
 
-export const trackerChallenges = pgTable(
+export const trackerChallenges = refSchema.table(
 	'tracker_challenges',
 	{
 		id: id(),
@@ -249,7 +250,7 @@ export const trackerChallenges = pgTable(
 	(t) => [unique().on(t.gameId, t.key)]
 );
 
-export const trackerChallengeProgress = pgTable(
+export const trackerChallengeProgress = gamesSchema.table(
 	'tracker_challenge_progress',
 	{
 		id: id(),
@@ -263,10 +264,13 @@ export const trackerChallengeProgress = pgTable(
 		done: boolean('done').notNull().default(false),
 		...timestamps
 	},
-	(t) => [unique().on(t.userId, t.challengeId)]
+	(t) => [
+		unique().on(t.userId, t.challengeId),
+		check('tracker_challenge_progress_current_check', sql`${t.current} >= 0`)
+	]
 );
 
-export const osuEntries = pgTable(
+export const osuEntries = gamesSchema.table(
 	'osu_entries',
 	{
 		id: id(),
@@ -282,18 +286,23 @@ export const osuEntries = pgTable(
 		skill: text('skill').notNull().default('stamina'),
 		bpm: integer('bpm'),
 		duration: integer('duration'),
-		accuracy: text('accuracy'),
+		accuracy: numeric('accuracy', { mode: 'number' }),
 		combo: integer('combo'),
 		misses: integer('misses'),
-		pp: text('pp'),
+		pp: numeric('pp', { mode: 'number' }),
 		mods: text('mods').notNull().default('NM'),
-		rate: text('rate').notNull().default('1.00'),
+		rate: numeric('rate', { precision: 4, scale: 2, mode: 'number' })
+			.notNull()
+			.default(sql`1.00`),
 		achieved: boolean('achieved').notNull().default(false),
 		playedOn: date('played_on').notNull(),
 		notes: text('notes').notNull().default(''),
 		...timestamps
 	},
-	(t) => [index().on(t.userId, t.kind)]
+	(t) => [
+		index().on(t.userId, t.kind),
+		check('osu_entries_kind_check', sql`${t.kind} IN ('score','goal','training')`)
+	]
 );
 
 export type PokemonCatch = typeof pokemonCatches.$inferSelect;

src/lib/server/health-import.test.ts

@@ -0,0 +1,52 @@
+import { describe, expect, it } from 'vitest';
+import { amsterdamTime, cleanRow, parseCsv, toPayload, validatePayload } from './health-import';
+
+describe('health import', () => {
+	it('parses CSV with quotes and semicolons', () => {
+		expect(parseCsv('date;kcal;notes\r\n2026-01-02;2500;"a; ""b"""\n')).toEqual([
+			{ date: '2026-01-02', kcal: '2500', notes: 'a; "b"' }
+		]);
+	});
+	it('validates and camel-cases rows', () => {
+		const r = cleanRow('body_measurements', {
+			date: '2026-01-02',
+			weight_kg: '80,5',
+			waist_cm: ''
+		});
+		expect(r).toEqual({
+			ok: true,
+			row: {
+				id: undefined,
+				values: { date: '2026-01-02', weightKg: 80.5, waistCm: null, bodyFatPct: null, notes: null }
+			}
+		});
+		expect(cleanRow('body_measurements', { date: '2026-01-02' }).ok).toBe(false);
+		expect(cleanRow('workouts', { date: '2026-01-02', exercise: 'squat', rpe: 11 }).ok).toBe(false);
+		expect(cleanRow('workouts', { date: '2026-01-02', exercise: 'squat', bogus: 1 }).ok).toBe(
+			false
+		);
+		expect(
+			cleanRow('vaccinations', { vaccine: 'X', date: '2026-01-02', country: 'nl' })
+		).toMatchObject({ ok: true, row: { values: { country: 'NL' } } });
+	});
+	it('resolves bare sleep times in Amsterdam time', () => {
+		const r = cleanRow('sleep', { date: '2026-07-02', bedtime: '23:30', wake_time: '07:15' });
+		expect(r.ok && (r.row.values.bedtime as Date).toISOString()).toBe('2026-07-01T21:30:00.000Z');
+		expect(r.ok && (r.row.values.wakeTime as Date).toISOString()).toBe('2026-07-02T05:15:00.000Z');
+		expect(amsterdamTime('2026-01-15', '12:00')?.toISOString()).toBe('2026-01-15T11:00:00.000Z');
+		const after = cleanRow('sleep', { date: '2026-07-02', bedtime: '00:40', wake_time: '08:00' });
+		expect(after.ok && (after.row.values.bedtime as Date).toISOString()).toBe(
+			'2026-07-01T22:40:00.000Z'
+		);
+	});
+	it('reports errors per row and table', () => {
+		const { errors } = validatePayload(
+			toPayload({ nutrition_daily: [{ date: 'x' }, { date: '2026-01-01', kcal: 2000 }] })
+		);
+		expect(errors).toEqual([
+			{ table: 'nutrition_daily', row: 1, error: expect.stringContaining('date') }
+		]);
+		expect(() => toPayload([{}])).toThrow();
+		expect(() => toPayload({ nope: [] })).toThrow();
+	});
+});

src/lib/server/health-import.ts

@@ -0,0 +1,349 @@
+// Validation + import for the private health tables. Shared by the owner-only import
+// endpoint (/trackers/health/import), the page's add/edit forms and
+// scripts/health-import.ts, so it must not import anything from SvelteKit.
+import { sql } from 'drizzle-orm';
+import type { PgAsyncDatabase } from 'drizzle-orm/pg-core';
+import {
+	healthAppointments,
+	healthBodyMeasurements,
+	healthMedications,
+	healthNutritionDaily,
+	healthSleep,
+	healthVaccinations,
+	healthWorkouts
+} from './db/schema/health';
+import { healthTables, isHealthTable, type Field, type HealthTable } from '../health/tables';
+
+export const drizzleTables = {
+	vaccinations: healthVaccinations,
+	body_measurements: healthBodyMeasurements,
+	workouts: healthWorkouts,
+	nutrition_daily: healthNutritionDaily,
+	sleep: healthSleep,
+	medications: healthMedications,
+	appointments: healthAppointments
+} as const;
+
+/** Tables with one row per day: importing the same date again updates that day. */
+const uniqueByDate = new Set<HealthTable>(['nutrition_daily', 'sleep']);
+/** Columns that exports may contain but imports ignore. */
+const ignored = new Set(['hours', 'created_at', 'updated_at']);
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export const TIME_ZONE = 'Europe/Amsterdam';
+export const MAX_ROWS = 5000;
+
+type Row = Record<string, unknown>;
+export type CleanRow = { id?: string; values: Record<string, unknown> };
+export type RowResult = { ok: true; row: CleanRow } | { ok: false; error: string };
+
+const camel = (key: string) => key.replace(/_([a-z])/g, (_, c: string) => c.toUpperCase());
+
+export function validDate(raw: string): string | null {
+	if (!/^\d{4}-\d{2}-\d{2}$/.test(raw)) return null;
+	const d = new Date(`${raw}T12:00:00Z`);
+	return !Number.isNaN(d.valueOf()) && d.toISOString().slice(0, 10) === raw && raw >= '1900-01-01'
+		? raw
+		: null;
+}
+
+/** Offset of Europe/Amsterdam (ms) at a given UTC instant. */
+function zoneOffset(utc: number): number {
+	const parts = new Intl.DateTimeFormat('en-US', {
+		timeZone: TIME_ZONE,
+		hourCycle: 'h23',
+		year: 'numeric',
+		month: '2-digit',
+		day: '2-digit',
+		hour: '2-digit',
+		minute: '2-digit',
+		second: '2-digit'
+	}).formatToParts(new Date(utc));
+	const get = (type: string) => Number(parts.find((p) => p.type === type)?.value);
+	return (
+		Date.UTC(get('year'), get('month') - 1, get('day'), get('hour'), get('minute'), get('second')) -
+		utc
+	);
+}
+
+/** Wall-clock time in Amsterdam ("YYYY-MM-DD", "HH:MM[:SS]") to a Date. */
+export function amsterdamTime(day: string, time: string): Date | null {
+	const m = /^(\d{1,2}):(\d{2})(?::(\d{2}))?$/.exec(time);
+	if (!m || !validDate(day)) return null;
+	const [h, min, s] = [Number(m[1]), Number(m[2]), Number(m[3] ?? 0)];
+	if (h > 23 || min > 59 || s > 59) return null;
+	const [y, mo, d] = day.split('-').map(Number);
+	const wall = Date.UTC(y, mo - 1, d, h, min, s);
+	let utc = wall - zoneOffset(wall);
+	utc = wall - zoneOffset(utc); // second pass settles DST edges
+	return new Date(utc);
+}
+
+/**
+ * Datetimes: ISO with offset ("2026-10-24T07:10:00+02:00", "...Z"), local Amsterdam
+ * ("2026-10-24T07:10" / "2026-10-24 07:10", which is what <input type=datetime-local> sends),
+ * or a bare "HH:MM" resolved against the row's date by the caller.
+ */
+function parseDateTime(raw: string): Date | 'time' | null {
+	if (/^\d{1,2}:\d{2}(:\d{2})?$/.test(raw)) return 'time';
+	const local = /^(\d{4}-\d{2}-\d{2})[T ](\d{2}:\d{2}(?::\d{2})?)(?:\.\d+)?$/.exec(raw);
+	if (local) return amsterdamTime(local[1], local[2]);
+	if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})$/i.test(raw)) {
+		const d = new Date(raw);
+		return Number.isNaN(d.valueOf()) ? null : d;
+	}
+	return null;
+}
+
+function cleanField(field: Field, value: unknown): { value: unknown } | { error: string } {
+	if (value === undefined || value === null || (typeof value === 'string' && value.trim() === '')) {
+		return field.required ? { error: `${field.key} is required` } : { value: null };
+	}
+	const raw = typeof value === 'string' ? value.trim() : value;
+	switch (field.type) {
+		case 'text':
+		case 'textarea': {
+			if (typeof raw !== 'string' && typeof raw !== 'number')
+				return { error: `${field.key} must be text` };
+			const text = String(raw);
+			if (field.maxLength && text.length > field.maxLength)
+				return { error: `${field.key} is longer than ${field.maxLength} characters` };
+			return { value: text };
+		}
+		case 'integer':
+		case 'number': {
+			const n = typeof raw === 'number' ? raw : Number(String(raw).replace(',', '.'));
+			if (!Number.isFinite(n)) return { error: `${field.key} must be a number` };
+			if (field.type === 'integer' && !Number.isInteger(n))
+				return { error: `${field.key} must be a whole number` };
+			if ((field.min !== undefined && n < field.min) || (field.max !== undefined && n > field.max))
+				return { error: `${field.key} must be between ${field.min} and ${field.max}` };
+			return { value: n };
+		}
+		case 'date': {
+			const d = typeof raw === 'string' ? validDate(raw) : null;
+			return d
+				? { value: d }
+				: { error: `${field.key} must be a date (YYYY-MM-DD, 1900 or later)` };
+		}
+		case 'datetime': {
+			const d = typeof raw === 'string' ? parseDateTime(raw) : null;
+			return d ? { value: d } : { error: `${field.key} must be an ISO datetime or HH:MM` };
+		}
+		case 'select':
+			return field.options?.includes(String(raw))
+				? { value: String(raw) }
+				: { error: `${field.key} must be one of ${field.options?.join(', ')}` };
+		case 'uuid':
+			return typeof raw === 'string' && UUID.test(raw)
+				? { value: raw.toLowerCase() }
+				: { error: `${field.key} must be a UUID` };
+	}
+}
+
+/** Validate one row (snake_case keys) for a table. Unknown keys are rejected. */
+export function cleanRow(table: HealthTable, input: Row): RowResult {
+	if (!input || typeof input !== 'object' || Array.isArray(input))
+		return { ok: false, error: 'row must be an object' };
+	const fields: readonly Field[] = healthTables[table].fields;
+	const known = new Set(fields.map((f) => f.key));
+	for (const key of Object.keys(input))
+		if (key !== 'id' && !known.has(key) && !ignored.has(key))
+			return { ok: false, error: `unknown column "${key}"` };
+	let id: string | undefined;
+	if (input.id !== undefined && input.id !== null && input.id !== '') {
+		if (typeof input.id !== 'string' || !UUID.test(input.id))
+			return { ok: false, error: 'id must be a UUID' };
+		id = input.id.toLowerCase();
+	}
+	const v: Record<string, unknown> = {};
+	for (const field of fields) {
+		const result = cleanField(field, input[field.key]);
+		if ('error' in result) return { ok: false, error: result.error };
+		v[field.key] = result.value;
+	}
+
+	// Table-specific rules (mirrors the CHECK constraints, with friendlier messages).
+	if (table === 'vaccinations' && typeof v.country === 'string') {
+		const country = v.country.toUpperCase();
+		v.country = country;
+		if (!/^[A-Z]{2}$/.test(country))
+			return { ok: false, error: 'country must be a 2-letter ISO code, e.g. NL' };
+	}
+	if (
+		table === 'body_measurements' &&
+		v.weight_kg === null &&
+		v.waist_cm === null &&
+		v.body_fat_pct === null
+	)
+		return { ok: false, error: 'give at least one of weight_kg, waist_cm, body_fat_pct' };
+	if (table === 'medications') {
+		v.kind ??= 'medication';
+		if (v.start_date && v.stop_date && String(v.stop_date) < String(v.start_date))
+			return { ok: false, error: 'stop_date is before start_date' };
+	}
+	if (table === 'appointments') v.type ??= 'appointment';
+	if (table === 'sleep') {
+		const day = String(v.date);
+		const wakeRaw = String(input.wake_time).trim();
+		const bedRaw = String(input.bedtime).trim();
+		if (v.wake_time === 'time') v.wake_time = amsterdamTime(day, wakeRaw);
+		if (v.bedtime === 'time') {
+			// A bare bedtime is on the wake-up day if it is before the wake time, else the evening before.
+			const sameDay = amsterdamTime(day, bedRaw);
+			const wake = v.wake_time as Date | null;
+			if (sameDay && wake && sameDay < wake) v.bedtime = sameDay;
+			else {
+				const prev = new Date(`${day}T12:00:00Z`);
+				prev.setUTCDate(prev.getUTCDate() - 1);
+				v.bedtime = amsterdamTime(prev.toISOString().slice(0, 10), bedRaw);
+			}
+		}
+		const bed = v.bedtime as Date | null;
+		const wake = v.wake_time as Date | null;
+		if (!bed || !wake) return { ok: false, error: 'invalid bedtime / wake_time' };
+		if (wake <= bed) return { ok: false, error: 'wake_time must be after bedtime' };
+		if (wake.getTime() - bed.getTime() > 24 * 3600e3)
+			return { ok: false, error: 'sleep longer than 24 hours' };
+	} else {
+		for (const key of Object.keys(v))
+			if (v[key] === 'time') return { ok: false, error: `${key} needs a full datetime` };
+	}
+
+	const values: Record<string, unknown> = {};
+	for (const [key, value] of Object.entries(v)) values[camel(key)] = value;
+	return { ok: true, row: { id, values } };
+}
+
+/** Minimal RFC 4180 CSV parser: header row, quoted fields, CRLF, BOM. Semicolons allowed as delimiter. */
+export function parseCsv(text: string): Row[] {
+	const src = text.replace(/^\uFEFF/, '');
+	const firstLine = src.split(/\r?\n/, 1)[0] ?? '';
+	const delimiter =
+		(firstLine.match(/;/g)?.length ?? 0) > (firstLine.match(/,/g)?.length ?? 0) ? ';' : ',';
+	const records: string[][] = [];
+	let record: string[] = [];
+	let field = '';
+	let quoted = false;
+	const endField = () => {
+		record.push(field);
+		field = '';
+	};
+	const endRecord = () => {
+		endField();
+		records.push(record);
+		record = [];
+	};
+	for (let i = 0; i < src.length; i++) {
+		const c = src[i];
+		if (quoted) {
+			if (c === '"' && src[i + 1] === '"') {
+				field += '"';
+				i++;
+			} else if (c === '"') quoted = false;
+			else field += c;
+		} else if (c === '"' && field === '') quoted = true;
+		else if (c === delimiter) endField();
+		else if (c === '\n' || c === '\r') {
+			if (c === '\r' && src[i + 1] === '\n') i++;
+			endRecord();
+		} else field += c;
+	}
+	if (quoted) throw new Error('CSV has an unterminated quoted field');
+	if (field !== '' || record.length) endRecord();
+	const rows = records.filter((r) => r.some((cell) => cell.trim() !== ''));
+	if (!rows.length) return [];
+	const header = rows[0].map((h) => h.trim().toLowerCase());
+	if (new Set(header).size !== header.length) throw new Error('CSV header has duplicate columns');
+	return rows.slice(1).map((cells, line) => {
+		if (cells.length > header.length)
+			throw new Error(`CSV row ${line + 2} has more cells than the header`);
+		return Object.fromEntries(header.map((h, i) => [h, cells[i] ?? '']));
+	});
+}
+
+export type Payload = Partial<Record<HealthTable, Row[]>>;
+
+/**
+ * Accepted shapes:
+ *   JSON object keyed by table: { "vaccinations": [ {...}, ... ], "sleep": [ ... ] }
+ *   JSON array of rows + table:  [ {...}, ... ]            (table given separately)
+ *   CSV with a header row + table
+ */
+export function toPayload(body: unknown, table?: string | null): Payload {
+	if (Array.isArray(body)) {
+		if (!isHealthTable(table))
+			throw new Error('a plain list of rows needs a table (?table= or --table)');
+		return { [table]: body };
+	}
+	if (!body || typeof body !== 'object')
+		throw new Error('expected a JSON object keyed by table, or an array of rows');
+	const payload: Payload = {};
+	for (const [key, rows] of Object.entries(body)) {
+		if (!isHealthTable(key)) throw new Error(`unknown table "${key}"`);
+		if (!Array.isArray(rows)) throw new Error(`"${key}" must be an array of rows`);
+		payload[key] = rows as Row[];
+	}
+	return payload;
+}
+
+export type ValidationError = { table: HealthTable; row: number; error: string };
+
+export function validatePayload(payload: Payload) {
+	const clean: Partial<Record<HealthTable, CleanRow[]>> = {};
+	const errors: ValidationError[] = [];
+	let total = 0;
+	for (const [table, rows] of Object.entries(payload) as [HealthTable, Row[]][]) {
+		total += rows.length;
+		clean[table] = [];
+		rows.forEach((row, i) => {
+			const result = cleanRow(table, row);
+			if (result.ok) clean[table]!.push(result.row);
+			else errors.push({ table, row: i + 1, error: result.error });
+		});
+	}
+	if (total > MAX_ROWS)
+		errors.push({
+			table: Object.keys(payload)[0] as HealthTable,
+			row: 0,
+			error: `more than ${MAX_ROWS} rows`
+		});
+	return { clean, errors };
+}
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+type Db = PgAsyncDatabase<any, any>;
+export type ImportCounts = Partial<Record<HealthTable, { inserted: number; updated: number }>>;
+
+/** Insert/update rows; all-or-nothing in one transaction. Rows with an id update that row;
+ * nutrition_daily and sleep upsert on date. */
+export async function writeRows(
+	db: Db,
+	clean: Partial<Record<HealthTable, CleanRow[]>>
+): Promise<ImportCounts> {
+	return db.transaction(async (tx) => {
+		const counts: ImportCounts = {};
+		for (const [table, rows] of Object.entries(clean) as [HealthTable, CleanRow[]][]) {
+			const target = drizzleTables[table];
+			const count = { inserted: 0, updated: 0 };
+			for (const { id, values } of rows) {
+				const data = { ...values, ...(id ? { id } : {}) };
+				const set = { ...values, updatedAt: new Date() };
+				const conflictTarget = id
+					? target.id
+					: uniqueByDate.has(table)
+						? (target as typeof healthSleep).date
+						: null;
+				const query = tx.insert(target).values(data as never);
+				const [result] = await (
+					conflictTarget
+						? query.onConflictDoUpdate({ target: conflictTarget, set: set as never })
+						: query
+				).returning({ inserted: sql<boolean>`(xmax = 0)` });
+				if (result?.inserted) count.inserted++;
+				else count.updated++;
+			}
+			counts[table] = count;
+		}
+		return counts;
+	});
+}

src/lib/server/lists.ts

@@ -0,0 +1,296 @@
+// Generic list engine. Every list is a real table in schema `lists`, registered
+// in meta.tables / meta.columns. Table and column names only ever come from the
+// registry (written by the SECURITY DEFINER meta.* functions, which validate
+// identifiers) and are re-checked here before being used as identifiers.
+import { and, asc, desc, eq, isNull, max, notInArray, sql } from 'drizzle-orm';
+import { db } from '#lib/server/db/index.js';
+import {
+	metaColumns,
+	metaTables,
+	type MetaTable,
+	type UiType
+} from '#lib/server/db/schema/index.js';
+
+const IDENT = /^[a-z][a-z0-9_]{0,62}$/;
+/** Columns every list has; everything else is a list-specific extra column. */
+const STANDARD = [
+	'id',
+	'name',
+	'notes',
+	'picture_url',
+	'done_at',
+	'sort_order',
+	'created_at',
+	'updated_at'
+];
+
+export type ExtraValue = string | number | boolean | null;
+export type ListColumn = { name: string; label: string; uiType: UiType; options: string[] };
+export type ListItem = {
+	id: number;
+	name: string;
+	description: string | null;
+	pictureUrl: string | null;
+	doneAt: Date | null;
+	extras: Record<string, ExtraValue>;
+};
+export type ListSummary = {
+	id: number;
+	name: string;
+	slug: string;
+	pictureUrl: string | null;
+	isProgress: boolean;
+	total: number;
+	checked: number;
+};
+export type ListView = Omit<ListSummary, 'total' | 'checked'> & {
+	columns: ListColumn[];
+	items: ListItem[];
+};
+
+function table(t: Pick<MetaTable, 'schemaName' | 'tableName'>) {
+	if (t.schemaName !== 'lists' || !IDENT.test(t.tableName))
+		throw new Error(`refusing unexpected list table ${t.schemaName}.${t.tableName}`);
+	return sql`${sql.identifier('lists')}.${sql.identifier(t.tableName)}`;
+}
+
+const activeList = and(eq(metaTables.kind, 'list'), isNull(metaTables.archivedAt));
+
+export async function findList(slug: string) {
+	const [row] = await db
+		.select()
+		.from(metaTables)
+		.where(and(activeList, eq(metaTables.slug, slug)));
+	return row ?? null;
+}
+
+export async function listSummaries(): Promise<ListSummary[]> {
+	const rows = await db
+		.select()
+		.from(metaTables)
+		.where(activeList)
+		.orderBy(desc(metaTables.sortOrder), desc(metaTables.id));
+	if (!rows.length) return [];
+	const counts = await db.execute<{ id: number; total: number; checked: number }>(
+		sql.join(
+			rows.map(
+				(t) =>
+					sql`SELECT ${t.id}::int AS id, count(*)::int AS total, ${
+						t.hasDone ? sql`count(done_at)::int` : sql`0`
+					} AS checked FROM ${table(t)}`
+			),
+			sql` UNION ALL `
+		)
+	);
+	const byId = new Map([...counts].map((c) => [Number(c.id), c]));
+	return rows.map((t) => ({
+		id: t.id,
+		name: t.displayName,
+		slug: t.slug,
+		pictureUrl: t.pictureUrl,
+		isProgress: t.hasDone,
+		total: byId.get(t.id)?.total ?? 0,
+		checked: byId.get(t.id)?.checked ?? 0
+	}));
+}
+
+export async function listColumns(t: MetaTable): Promise<ListColumn[]> {
+	const rows = await db
+		.select()
+		.from(metaColumns)
+		.where(
+			and(
+				eq(metaColumns.tableId, t.id),
+				eq(metaColumns.hidden, false),
+				notInArray(metaColumns.columnName, STANDARD)
+			)
+		)
+		.orderBy(asc(metaColumns.position));
+	return rows
+		.filter((c) => IDENT.test(c.columnName))
+		.map((c) => ({
+			name: c.columnName,
+			label: c.label ?? c.columnName.replace(/_/g, ' '),
+			uiType: c.uiType,
+			options: c.options.values ?? []
+		}));
+}
+
+type Row = Record<string, unknown> & { id: number; name: string };
+function toItem(row: Row, columns: ListColumn[]): ListItem {
+	const extras: Record<string, ExtraValue> = {};
+	for (const c of columns) {
+		const v = row[c.name];
+		extras[c.name] = v instanceof Date ? v.toISOString() : ((v ?? null) as ExtraValue);
+	}
+	return {
+		id: Number(row.id),
+		name: row.name,
+		description: (row.notes as string | null) ?? null,
+		pictureUrl: (row.picture_url as string | null) ?? null,
+		doneAt: row.done_at ? new Date(row.done_at as string) : null,
+		extras
+	};
+}
+
+export async function getList(slug: string): Promise<ListView | null> {
+	const t = await findList(slug);
+	if (!t) return null;
+	const columns = await listColumns(t);
+	const rows = await db.execute<Row>(sql`SELECT * FROM ${table(t)} ORDER BY sort_order, id`);
+	return {
+		id: t.id,
+		name: t.displayName,
+		slug: t.slug,
+		pictureUrl: t.pictureUrl,
+		isProgress: t.hasDone,
+		columns,
+		items: [...rows].map((r) => toItem(r, columns))
+	};
+}
+
+/** Parse the `extra:<column>` form fields for this list's columns. */
+export function extraFields(
+	form: FormData,
+	columns: ListColumn[]
+): { values: Record<string, ExtraValue> } | { error: string } {
+	const values: Record<string, ExtraValue> = {};
+	for (const c of columns) {
+		const key = `extra:${c.name}`;
+		if (c.uiType === 'bool') {
+			values[c.name] = form.get(key) === 'on';
+			continue;
+		}
+		if (!form.has(key)) continue;
+		const raw = String(form.get(key) ?? '').trim();
+		if (!raw) {
+			values[c.name] = null;
+			continue;
+		}
+		if (raw.length > 2000) return { error: `${c.label} is too long.` };
+		switch (c.uiType) {
+			case 'number':
+			case 'cents': {
+				const n = Number(raw);
+				if (!Number.isFinite(n) || (c.uiType === 'cents' && !Number.isInteger(n)))
+					return { error: `${c.label} must be a number.` };
+				values[c.name] = n;
+				break;
+			}
+			case 'select':
+				if (c.options.length && !c.options.includes(raw))
+					return { error: `${c.label} must be one of: ${c.options.join(', ')}.` };
+				values[c.name] = raw;
+				break;
+			case 'url':
+			case 'image':
+				if (!/^https?:\/\/\S+$/.test(raw)) return { error: `${c.label} must be an http(s) URL.` };
+				values[c.name] = raw;
+				break;
+			case 'date':
+				if (!/^\d{4}-\d{2}-\d{2}$/.test(raw)) return { error: `${c.label} must be a date.` };
+				values[c.name] = raw;
+				break;
+			case 'text':
+			case 'longtext':
+				values[c.name] = raw;
+				break;
+			default:
+				// json / multiselect / fk are not editable from this form yet
+				break;
+		}
+	}
+	return { values };
+}
+
+function columnsAndValues(values: Record<string, ExtraValue>) {
+	const entries = Object.entries(values).filter(([k]) => IDENT.test(k));
+	return {
+		cols: entries.map(([k]) => sql.identifier(k)),
+		vals: entries.map(([, v]) => sql`${v}`),
+		sets: entries.map(([k, v]) => sql`${sql.identifier(k)} = ${v}`)
+	};
+}
+
+export type ItemValues = {
+	name: string;
+	description: string | null;
+	pictureUrl?: string | null;
+	extras: Record<string, ExtraValue>;
+};
+function rowValues(v: ItemValues): Record<string, ExtraValue> {
+	return {
+		...v.extras,
+		name: v.name,
+		notes: v.description,
+		...('pictureUrl' in v ? { picture_url: v.pictureUrl ?? null } : {})
+	};
+}
+
+export async function insertItem(t: MetaTable, v: ItemValues) {
+	const { cols, vals } = columnsAndValues(rowValues(v));
+	const tbl = table(t);
+	await db.execute(
+		sql`INSERT INTO ${tbl} (${sql.join(cols, sql`, `)}, sort_order)
+			VALUES (${sql.join(vals, sql`, `)}, (SELECT coalesce(max(sort_order), 0) + 1 FROM ${tbl}))`
+	);
+}
+
+export async function getItem(t: MetaTable, id: number) {
+	const [row] = await db.execute<Row>(sql`SELECT * FROM ${table(t)} WHERE id = ${id}`);
+	return row ? toItem(row, []) : null;
+}
+
+export async function updateItem(t: MetaTable, id: number, v: ItemValues) {
+	const { sets } = columnsAndValues(rowValues(v));
+	const rows = await db.execute<{ id: number }>(
+		sql`UPDATE ${table(t)} SET ${sql.join(sets, sql`, `)} WHERE id = ${id} RETURNING id`
+	);
+	return rows.length > 0;
+}
+
+export async function deleteItem(t: MetaTable, id: number) {
+	const [row] = await db.execute<{ picture_url: string | null }>(
+		sql`DELETE FROM ${table(t)} WHERE id = ${id} RETURNING picture_url`
+	);
+	return row ?? null;
+}
+
+export async function setDone(t: MetaTable, id: number, done: boolean) {
+	if (!t.hasDone) throw new Error('not a progress list');
+	const rows = await db.execute<{ id: number }>(
+		sql`UPDATE ${table(t)} SET done_at = ${done ? sql`coalesce(done_at, now())` : sql`NULL`}
+			WHERE id = ${id} RETURNING id`
+	);
+	return rows.length > 0;
+}
+
+/** Create a new runtime list (a real table) through the meta API. */
+export async function createList(input: {
+	slug: string;
+	name: string;
+	isProgress: boolean;
+	pictureUrl: string | null;
+}) {
+	let base = input.slug.replace(/-/g, '_').replace(/^[^a-z]+/, '');
+	base = (base || 'list').slice(0, 55);
+	let tableName = base;
+	for (let n = 2; ; n++) {
+		const [taken] = await db
+			.select({ id: metaTables.id })
+			.from(metaTables)
+			.where(and(eq(metaTables.schemaName, 'lists'), eq(metaTables.tableName, tableName)));
+		if (!taken) break;
+		tableName = `${base}_${n}`;
+	}
+	const [{ top }] = await db.select({ top: max(metaTables.sortOrder) }).from(metaTables);
+	await db.execute(
+		sql`SELECT meta.create_list(${input.slug}, ${tableName}, ${input.name}, ${input.isProgress},
+			'[]'::jsonb, ${input.pictureUrl}, NULL, NULL, ${(top ?? 0) + 1})`
+	);
+}
+
+/** Soft delete: the table stays for 7 days (meta.drop_list refuses earlier). */
+export async function archiveList(slug: string) {
+	await db.execute(sql`SELECT meta.archive_list(${slug})`);
+}

src/lib/server/owner.test.ts

@@ -0,0 +1,20 @@
+import { describe, expect, it } from 'vitest';
+import { isOwner, isOwnerOnlyPath } from './owner';
+
+const event = (user: Partial<NonNullable<App.Locals['user']>> | null) =>
+	({ locals: { user, session: null } }) as unknown as { locals: App.Locals };
+
+describe('owner gate', () => {
+	it('is only the owner account', () => {
+		expect(isOwner(event(null))).toBe(false);
+		expect(isOwner(event({ role: 'admin', email: 'someone@example.com' }))).toBe(false);
+		expect(isOwner(event({ role: 'user', email: 'Stan@StanRunge.dev' }))).toBe(true);
+	});
+	it('matches owner-only paths', () => {
+		expect(isOwnerOnlyPath('/trackers/health')).toBe(true);
+		expect(isOwnerOnlyPath('/trackers/health/')).toBe(true);
+		expect(isOwnerOnlyPath('/trackers/Health/import')).toBe(true);
+		expect(isOwnerOnlyPath('/trackers/healthy')).toBe(false);
+		expect(isOwnerOnlyPath('/trackers')).toBe(false);
+	});
+});

src/lib/server/owner.ts

@@ -0,0 +1,27 @@
+import { error } from '@sveltejs/kit';
+
+// The site has exactly one owner: Stan's account (prod auth.user id tfn6OZDOpiQvMARIH65HQ2XJuaVvmGEe).
+// Owner-only data, such as the health tracker, is gated on that account's email, not on
+// a role, so other users (now or later, e.g. on a public tracking project) never see it.
+// Override with OWNER_EMAIL if the address ever changes.
+const OWNER_EMAIL = (process.env.OWNER_EMAIL || 'stan@stanrunge.dev').trim().toLowerCase();
+
+type OwnerEvent = { locals: App.Locals };
+
+export function isOwner(event: OwnerEvent): boolean {
+	return event.locals.user?.email?.trim().toLowerCase() === OWNER_EMAIL;
+}
+
+/** Owner-only routes answer 404 to everyone else, so they don't reveal that they exist. */
+export function requireOwner(event: OwnerEvent) {
+	if (!isOwner(event)) error(404, 'Not Found');
+	return event.locals.user!;
+}
+
+/** Paths that only the owner may see (checked in hooks.server.ts before any route runs). */
+export const ownerOnlyPrefixes = ['/trackers/health'] as const;
+
+export function isOwnerOnlyPath(pathname: string): boolean {
+	const path = pathname.toLowerCase().replace(/\/+$/, '');
+	return ownerOnlyPrefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
+}

src/lib/server/slugify.ts

@@ -1,5 +1,5 @@
 import { db } from '#lib/server/db/index.js';
-import { blogArticles, lists } from '#lib/server/db/schema/index.js';
+import { blogArticles, metaTables } from '#lib/server/db/schema/index.js';
 import { eq } from 'drizzle-orm';
 
 export function slugify(title: string, fallback = 'article'): string {
@@ -32,7 +32,10 @@ export async function uniqueListSlug(name: string): Promise<string> {
 	const base = slugify(name, 'list');
 	let slug = base;
 	let suffix = 2;
-	while ((await db.select({ id: lists.id }).from(lists).where(eq(lists.slug, slug))).length > 0) {
+	while (
+		(await db.select({ id: metaTables.id }).from(metaTables).where(eq(metaTables.slug, slug)))
+			.length > 0
+	) {
 		slug = `${base}-${suffix++}`;
 	}
 	return slug;

src/lib/title.ts

@@ -17,6 +17,7 @@ export function getTitle(path: string, environment: SiteEnvironment = null): str
 	const titles: Record<string, string> = {
 		'/': 'Home',
 		'/projects': 'Projects',
+		'/trackers': 'Trackers',
 		'/blog': 'Blog',
 		'/lists': 'Lists',
 		'/login': 'Sign in',

src/routes/+layout.server.ts

@@ -1,4 +1,5 @@
 import { isAdmin } from '#lib/server/authorization.js';
+import { isOwner } from '#lib/server/owner.js';
 import { dev } from '$app/env';
 import { siteEnvironment } from '#lib/title.js';
 import type { LayoutServerLoad } from './$types';
@@ -8,6 +9,7 @@ export const load: LayoutServerLoad = (event) => ({
 		? { id: event.locals.user.id, name: event.locals.user.name, image: event.locals.user.image }
 		: null,
 	isAdmin: isAdmin(event),
+	isOwner: isOwner(event),
 	editable: isAdmin(event),
 	version: process.env.APP_VERSION || 'dev',
 	environment

src/routes/+layout.svelte

@@ -7,7 +7,7 @@
 	import { getSeo } from '#lib/seo.js';
 	import CopyButton from '#lib/components/CopyButton.svelte';
 	import ProjectIcon from '#lib/components/ProjectIcon.svelte';
-	import { projects } from '#lib/projects.js';
+	import { projects, visibleTrackers } from '#lib/projects.js';
 	import { Button, buttonVariants } from '#lib/components/ui/button/index.js';
 	import * as Sheet from '#lib/components/ui/sheet/index.js';
 	import ArrowRight from 'lucide-svelte/icons/arrow-right';
@@ -31,15 +31,22 @@
 	let { data, children } = $props();
 	const seo = $derived(getSeo(page.url.pathname, page.data, data.environment));
 	let menuOpen = $state(false);
-	let projectsMenuOpen = $state(false);
+	// Which header dropdown is open (desktop): '/projects', '/trackers' or none.
+	let openMenu = $state<string | null>(null);
 	type ThemePreference = 'dark' | 'system' | 'light';
 	let theme = $state<ThemePreference>('dark');
 	const navigation = [
 		{ label: 'home', href: '/' },
 		{ label: 'projects', href: '/projects' },
+		{ label: 'trackers', href: '/trackers' },
 		{ label: 'blog', href: '/blog' },
 		{ label: 'lists', href: '/lists' }
 	] as const;
+	type MenuItem = { name: string; subtitle: string; href: string; external: boolean };
+	const menus: Record<string, { label: string; items: readonly MenuItem[] }> = $derived({
+		'/projects': { label: 'projects', items: projects },
+		'/trackers': { label: 'trackers', items: visibleTrackers(data.isOwner) }
+	});
 	const socialLinks = [
 		{ icon: SiMail, label: 'email', href: 'mailto:stan@stanrunge.dev' },
 		{ icon: SiGithub, label: 'github', href: 'https://github.com/stanrunge' },
@@ -102,14 +109,14 @@
 		return page.url.pathname === href || (href !== '/' && page.url.pathname.startsWith(href + '/'));
 	}
 
-	function handleProjectsPointerEnter(event: PointerEvent) {
+	function handleMenuPointerEnter(event: PointerEvent, href: string) {
 		if (event.pointerType === 'touch') return;
-		projectsMenuOpen = true;
+		openMenu = href;
 	}
 
-	function handleProjectsPointerLeave(event: PointerEvent) {
+	function handleMenuPointerLeave(event: PointerEvent) {
 		if (event.pointerType === 'touch') return;
-		projectsMenuOpen = false;
+		openMenu = null;
 	}
 </script>
 
@@ -170,7 +177,14 @@
 		class="sr-only focus:not-sr-only focus:absolute focus:z-50 focus:bg-[var(--site-bg)] focus:px-4 focus:py-2"
 		>skip to content</a
 	>
-	<header class="border-b border-border bg-background/95 backdrop-blur">
+	<!--
+		Stacking: backdrop-blur makes the header its own stacking context, so the dropdown's z-50 only
+		counts inside it. Without a z-index of its own the header then sits at z-auto/0 and anything
+		positioned later in <main> (maps, chart tooltips, sticky headers) paints over the dropdown.
+		Fix: lift the header (relative z-50) and isolate <main> so page z-indexes stay inside it.
+		Dialogs/sheets/popovers are portalled to <body> and still render above both.
+	-->
+	<header class="relative z-50 border-b border-border bg-background/95 backdrop-blur">
 		<div class="mx-auto flex max-w-6xl items-center gap-3 px-4 py-3 sm:px-6">
 			<a
 				href={resolve('/')}
@@ -190,39 +204,40 @@
 			</a>
 			<nav class="ml-auto hidden items-center gap-1 md:flex" aria-label="Main navigation">
 				{#each navigation as item (item.href)}
-					{#if item.href === '/projects'}
+					{#if menus[item.href]}
+						{@const menu = menus[item.href]}
 						<div
 							class="relative"
 							role="group"
-							aria-label="Projects menu"
-							onpointerenter={handleProjectsPointerEnter}
-							onpointerleave={handleProjectsPointerLeave}
+							aria-label={`${menu.label} menu`}
+							onpointerenter={(event) => handleMenuPointerEnter(event, item.href)}
+							onpointerleave={handleMenuPointerLeave}
 						>
 							<Button
-								href={resolve('projects')}
+								href={resolve(item.href)}
 								variant={current(item.href) ? 'secondary' : 'ghost'}
 								size="sm"
 								class="cursor-pointer gap-1"
-								aria-label="Browse projects"
+								aria-label={`Browse ${menu.label}`}
 								aria-haspopup="true"
-								aria-expanded={projectsMenuOpen}
-								onclick={() => (projectsMenuOpen = false)}
+								aria-expanded={openMenu === item.href}
+								onclick={() => (openMenu = null)}
 								onkeydown={(event) => {
-									if (event.key === 'Escape') projectsMenuOpen = false;
+									if (event.key === 'Escape') openMenu = null;
 								}}>{item.label}<ChevronDown size={15} /></Button
 							>
-							{#if projectsMenuOpen}
+							{#if openMenu === item.href}
 								<div
 									class="absolute top-full left-0 z-50 max-h-[70vh] w-72 overflow-y-auto rounded-md border border-border bg-popover p-1 text-popover-foreground shadow-md"
-									aria-label="Projects"
+									aria-label={menu.label}
 								>
 									<a
-										href={resolve('projects')}
+										href={resolve(item.href)}
 										class="flex items-center rounded-sm px-2 py-1.5 text-sm font-medium outline-none hover:bg-accent hover:text-accent-foreground focus-visible:bg-accent"
-										>all projects <ArrowRight size={14} class="ml-auto" /></a
+										>all {menu.label} <ArrowRight size={14} class="ml-auto" /></a
 									>
 									<div class="my-1 h-px bg-border"></div>
-									{#each projects as project (project.name)}
+									{#each menu.items as project (project.name)}
 										<!-- Internal project links use resolve; external URLs are from the project catalog. -->
 										<!-- eslint-disable svelte/no-navigation-without-resolve -->
 										<a
@@ -297,9 +312,9 @@
 								class="justify-start"
 								onclick={() => (menuOpen = false)}>{item.label}</Button
 							>
-							{#if item.href === '/projects'}
+							{#if menus[item.href]}
 								<div class="ml-3 flex flex-col border-l border-border pl-3">
-									{#each projects as project (project.name)}
+									{#each menus[item.href].items as project (project.name)}
 										<Button
 											href={project.external ? project.href : resolve(project.href)}
 											variant="ghost"
@@ -343,7 +358,7 @@
 			</Sheet.Root>
 		</div>
 	</header>
-	<main id="main" class="min-w-0 flex-1">{@render children()}</main>
+	<main id="main" class="isolate min-w-0 flex-1">{@render children()}</main>
 	<footer
 		class="mt-16 border-t border-[var(--site-border)]"
 		class:tracker-footer={page.route.id === '/projects/game-tracker'}
@@ -357,7 +372,7 @@
 					></span
 				>
 				<a
-					href="https://git.stanrunge.dev/stan/personal-website"
+					href="https://git.stanrunge.dev/stan/website"
 					rel="external"
 					class="inline-flex items-center gap-1 hover:text-[var(--site-text)]"
 					>source <ExternalLink size={14} aria-hidden="true" /></a

src/routes/+page.server.ts

@@ -1,33 +1,10 @@
 import { fail } from '@sveltejs/kit';
-import { db } from '#lib/server/db/index.js';
-import { listItemCompletions } from '#lib/server/db/schema/index.js';
-import { eq } from 'drizzle-orm';
+import { listSummaries } from '#lib/server/lists.js';
 import type { PageServerLoad } from './$types';
 
-export const load: PageServerLoad = async ({ locals }) => {
-	const lists = await db.query.lists.findMany({
-		columns: { id: true, name: true, slug: true, isProgress: true, pictureUrl: true },
-		with: { items: { columns: { id: true } } },
-		orderBy: { id: 'desc' }
-	});
-
-	const completed = new Set(
-		locals.user
-			? (
-					await db
-						.select({ itemId: listItemCompletions.itemId })
-						.from(listItemCompletions)
-						.where(eq(listItemCompletions.userId, locals.user.id))
-				).map((row) => row.itemId)
-			: []
-	);
-	return {
-		lists: lists.map(({ items, ...list }) => ({
-			...list,
-			total: items.length,
-			checked: list.isProgress ? items.filter((item) => completed.has(item.id)).length : 0
-		}))
-	};
+export const load: PageServerLoad = async () => {
+	// `done` is a property of the item now (one owner), so progress is the same for every visitor.
+	return { lists: await listSummaries() };
 };
 
 // Retire the old shared-token login; legacy cookies grant no permissions.

src/routes/+page.svelte

@@ -2,9 +2,8 @@
 	import { resolve } from '$app/paths';
 	import portrait from '#lib/assets/stan.jpg?url';
 	import ProgressBar from '#lib/components/ProgressBar.svelte';
-	import ProjectIcon from '#lib/components/ProjectIcon.svelte';
-	import * as Card from '#lib/components/ui/card/index.js';
-	import { projects } from '#lib/projects.js';
+	import CatalogGrid from '#lib/components/CatalogGrid.svelte';
+	import { projects, visibleTrackers } from '#lib/projects.js';
 	import ArrowRight from 'lucide-svelte/icons/arrow-right';
 	import ExternalLink from 'lucide-svelte/icons/external-link';
 	import Mail from 'lucide-svelte/icons/mail';
@@ -104,64 +103,21 @@
 				>projects <ArrowRight size={20} aria-hidden="true" /></a
 			>
 		</h2>
-		<ul class="grid gap-3 sm:grid-cols-2">
-			{#each projects as project (project.name)}
-				<li>
-					<Card.Root class="h-full py-0 transition-colors hover:bg-muted/50"
-						><Card.Content class="p-0">
-							{#if project.external}
+		<CatalogGrid items={projects} subtitleClass="mt-1 block text-base text-[var(--site-muted)]" />
+	</section>
+
+	<section aria-labelledby="trackers-heading" class="border-t border-[var(--site-border)] pt-8">
+		<h2 id="trackers-heading" class="mb-4 text-2xl font-semibold tracking-tight">
 			<a
-									href={project.href}
-									rel="external"
-									class="flex min-h-28 items-start justify-between gap-4 p-5"
+				href={resolve('trackers')}
+				class="inline-flex items-center gap-1 hover:text-[var(--site-muted)]"
+				>trackers <ArrowRight size={20} aria-hidden="true" /></a
 			>
-									<span class="flex min-w-0 items-start gap-3">
-										<span
-											class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
-										>
-											<ProjectIcon name={project.name} class="size-5" />
-										</span>
-										<span class="min-w-0">
-											<span class="block font-medium">{project.name}</span>
-											<span class="mt-1 block text-base text-[var(--site-muted)]"
-												>{project.subtitle}</span
-											>
-										</span>
-									</span><ExternalLink
-										size={18}
-										aria-hidden="true"
-										class="shrink-0 text-[var(--site-muted)]"
+		</h2>
+		<CatalogGrid
+			items={visibleTrackers(data.isOwner)}
+			subtitleClass="mt-1 block text-base text-[var(--site-muted)]"
 		/>
-								</a>
-							{:else}
-								<a
-									href={resolve(project.href)}
-									class="flex min-h-28 items-start justify-between gap-4 p-5"
-								>
-									<span class="flex min-w-0 items-start gap-3">
-										<span
-											class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
-										>
-											<ProjectIcon name={project.name} class="size-5" />
-										</span>
-										<span class="min-w-0">
-											<span class="block font-medium">{project.name}</span>
-											<span class="mt-1 block text-base text-[var(--site-muted)]"
-												>{project.subtitle}</span
-											>
-										</span>
-									</span><ArrowRight
-										size={18}
-										aria-hidden="true"
-										class="shrink-0 text-[var(--site-muted)]"
-									/>
-								</a>
-							{/if}
-						</Card.Content></Card.Root
-					>
-				</li>
-			{/each}
-		</ul>
 	</section>
 
 	<section aria-labelledby="lists-heading" class="pt-14 sm:pt-20">
@@ -205,7 +161,7 @@
 						<span
 							class="inline-flex min-w-16 items-center justify-end gap-1 whitespace-nowrap text-base text-[var(--site-muted)]"
 						>
-							{#if list.isProgress && data.user}
+							{#if list.isProgress}
 								{list.total ? Math.round((list.checked / list.total) * 100) : 0}%
 							{:else}
 								{list.total}

src/routes/lists/+page.server.ts

@@ -1,35 +1,11 @@
-import { db } from '#lib/server/db/index.js';
-import { listItemCompletions, lists } from '#lib/server/db/schema/index.js';
 import { requireAdmin } from '#lib/server/authorization.js';
 import { uniqueListSlug } from '#lib/server/slugify.js';
 import { listImageUrl } from '#lib/server/r2.js';
-import { eq } from 'drizzle-orm';
+import { createList, listSummaries } from '#lib/server/lists.js';
 import { fail, redirect } from '@sveltejs/kit';
 import type { Actions, PageServerLoad } from './$types';
 
-export const load: PageServerLoad = async ({ locals }) => {
-	const rows = await db.query.lists.findMany({
-		with: { items: { columns: { id: true } } },
-		orderBy: { id: 'desc' }
-	});
-	const completed = new Set(
-		locals.user
-			? (
-					await db
-						.select({ itemId: listItemCompletions.itemId })
-						.from(listItemCompletions)
-						.where(eq(listItemCompletions.userId, locals.user.id))
-				).map((row) => row.itemId)
-			: []
-	);
-	return {
-		lists: rows.map(({ items, ...list }) => ({
-			...list,
-			total: items.length,
-			checked: list.isProgress ? items.filter((item) => completed.has(item.id)).length : 0
-		}))
-	};
-};
+export const load: PageServerLoad = async () => ({ lists: await listSummaries() });
 
 export const actions: Actions = {
 	newList: async (event) => {
@@ -47,8 +23,9 @@ export const actions: Actions = {
 			return fail(400, { message: 'Enable JavaScript to upload an image.' });
 		const pictureUrl = pictureKey ? listImageUrl(pictureKey) : null;
 		if (pictureKey && !pictureUrl) return fail(400, { message: 'Invalid uploaded picture.' });
-		const slug = await uniqueListSlug(name);
-		await db.insert(lists).values({ name, slug, isProgress: type === 'progress', pictureUrl });
+		// meta.tables.slug allows at most 63 characters
+		const slug = (await uniqueListSlug(name.slice(0, 60))).slice(0, 63).replace(/-+$/, '');
+		await createList({ slug, name, isProgress: type === 'progress', pictureUrl });
 		redirect(303, `/lists/${slug}`);
 	}
 };

src/routes/lists/+page.svelte

@@ -123,7 +123,7 @@
 						>
 					{/if}
 					<span class="min-w-16 whitespace-nowrap text-right text-base text-[var(--site-muted)]">
-						{#if list.isProgress && data.user}
+						{#if list.isProgress}
 							{list.total ? Math.round((list.checked / list.total) * 100) : 0}%
 						{:else}
 							{list.total} {list.total === 1 ? 'item' : 'items'}

src/routes/lists/[slug]/+page.server.ts

@@ -1,15 +1,28 @@
 import { db } from '#lib/server/db/index.js';
 import { ORIGIN } from '$app/env/private';
-import { lists, listItems, listItemCompletions } from '#lib/server/db/schema/index.js';
-import { requireAdmin, requireUser } from '#lib/server/authorization.js';
+import { metaTables } from '#lib/server/db/schema/index.js';
+import { requireAdmin } from '#lib/server/authorization.js';
 import { deleteObject, listImageKey, listImageUrl } from '#lib/server/r2.js';
 import { validSlug } from '#lib/server/slugify.js';
+import {
+	archiveList,
+	deleteItem,
+	extraFields,
+	findList,
+	getItem,
+	getList,
+	insertItem,
+	listColumns,
+	setDone,
+	updateItem,
+	type ListColumn
+} from '#lib/server/lists.js';
 import { and, eq, ne } from 'drizzle-orm';
 import { error, fail, redirect } from '@sveltejs/kit';
 import type { Actions, PageServerLoad } from './$types';
 
 async function currentList(slug: string) {
-	const list = await db.query.lists.findFirst({ where: { slug } });
+	const list = await findList(slug);
 	if (!list) error(404, 'List not found');
 	return list;
 }
@@ -24,7 +37,7 @@ async function removeStoredPicture(url: string | null) {
 		console.error('Could not remove list picture from R2', cause);
 	}
 }
-function itemFields(form: FormData) {
+function itemFields(form: FormData, columns: ListColumn[]) {
 	const name = String(form.get('name') ?? '').trim();
 	const description = String(form.get('description') ?? '').trim();
 	const pictureKey = String(form.get('pictureKey') ?? '').trim();
@@ -37,54 +50,51 @@ function itemFields(form: FormData) {
 	if (pictureKey && removePicture) return { error: 'Choose a new picture or remove the old one.' };
 	const pictureUrl = pictureKey ? listImageUrl(pictureKey) : null;
 	if (pictureKey && !pictureUrl) return { error: 'Invalid uploaded picture.' };
+	const extras = extraFields(form, columns);
+	if ('error' in extras) return { error: extras.error };
 	return {
 		values: {
 			name,
 			description: description || null,
+			extras: extras.values,
 			...(pictureKey ? { pictureUrl } : removePicture ? { pictureUrl: null } : {})
 		}
 	};
 }
-export const load: PageServerLoad = async ({ params, locals }) => {
+function itemId(form: FormData) {
+	const id = Number(form.get('itemId'));
+	return Number.isSafeInteger(id) && id > 0 ? id : null;
+}
+
+export const load: PageServerLoad = async ({ params }) => {
 	if (/^[1-9]\d*$/.test(params.slug)) {
+		// Old numeric list URLs: list ids were preserved as meta.tables.sort_order.
 		const oldId = Number(params.slug);
 		if (Number.isSafeInteger(oldId)) {
-			const oldList = await db.query.lists.findFirst({ where: { id: oldId } });
-			if (oldList) redirect(308, `/lists/${oldList.slug}`);
+			const [old] = await db
+				.select({ slug: metaTables.slug })
+				.from(metaTables)
+				.where(and(eq(metaTables.kind, 'list'), eq(metaTables.sortOrder, oldId)));
+			if (old) redirect(308, `/lists/${old.slug}`);
 		}
 	}
-	const list = await db.query.lists.findFirst({
-		where: { slug: params.slug },
-		with: { items: { orderBy: { id: 'asc' } } }
-	});
+	const list = await getList(params.slug);
 	if (!list) error(404, 'List not found');
-	const completedIds =
-		locals.user && list.isProgress
-			? (
-					await db
-						.select({ itemId: listItemCompletions.itemId })
-						.from(listItemCompletions)
-						.where(eq(listItemCompletions.userId, locals.user.id))
-				).map((row) => row.itemId)
+	const completedIds = list.isProgress
+		? list.items.filter((item) => item.doneAt).map((item) => item.id)
 		: [];
-	const inList = completedIds.filter((id) => list.items.some((item) => item.id === id));
-	return { list, completedIds: inList, checked: inList.length, total: list.items.length };
+	return { list, completedIds, checked: completedIds.length, total: list.items.length };
 };
+
 export const actions: Actions = {
 	deleteList: async (event) => {
 		requireAdmin(event);
 		const list = await currentList(event.params.slug);
 		const confirmation = String((await event.request.formData()).get('confirmName') ?? '');
-		if (confirmation !== list.name)
+		if (confirmation !== list.displayName)
 			return fail(400, { message: 'Type the exact list name to confirm deletion.' });
-		const pictures = await db
-			.select({ pictureUrl: listItems.pictureUrl })
-			.from(listItems)
-			.where(eq(listItems.listId, list.id));
-		await db.delete(lists).where(eq(lists.id, list.id));
-		await Promise.all(
-			[...pictures.map((item) => item.pictureUrl), list.pictureUrl].map(removeStoredPicture)
-		);
+		// Archived, not dropped: the table and its pictures stay restorable for 7 days.
+		await archiveList(list.slug);
 		redirect(303, '/lists');
 	},
 	updateList: async (event) => {
@@ -94,15 +104,12 @@ export const actions: Actions = {
 		const slug = String(form.get('slug') ?? '')
 			.trim()
 			.toLowerCase();
-		const type = String(form.get('type') ?? '');
 		const pictureKey = String(form.get('pictureKey') ?? '').trim();
 		const removePicture = form.get('removePicture') === 'on';
 		const picture = form.get('picture');
 		if (!name || name.length > 200)
 			return fail(400, { message: 'Enter a name of 1–200 characters' });
-		if (type !== 'normal' && type !== 'progress')
-			return fail(400, { message: 'Choose a list type.' });
-		if (!validSlug(slug))
+		if (!validSlug(slug) || slug.length > 63)
 			return fail(400, { message: 'Use a lowercase slug with letters, numbers, and hyphens.' });
 		if (picture instanceof File && picture.size > 0)
 			return fail(400, { message: 'Enable JavaScript to upload an image.' });
@@ -112,20 +119,19 @@ export const actions: Actions = {
 		if (pictureKey && !pictureUrl) return fail(400, { message: 'Invalid uploaded picture.' });
 		const current = await currentList(event.params.slug);
 		const duplicate = await db
-			.select({ id: lists.id })
-			.from(lists)
-			.where(and(eq(lists.slug, slug), ne(lists.id, current.id)));
+			.select({ id: metaTables.id })
+			.from(metaTables)
+			.where(and(eq(metaTables.slug, slug), ne(metaTables.id, current.id)));
 		if (duplicate.length) return fail(409, { message: 'That list slug is already in use.' });
 		const [list] = await db
-			.update(lists)
+			.update(metaTables)
 			.set({
-				name,
+				displayName: name,
 				slug,
-				isProgress: type === 'progress',
 				...(pictureKey ? { pictureUrl } : removePicture ? { pictureUrl: null } : {})
 			})
-			.where(eq(lists.id, current.id))
-			.returning();
+			.where(eq(metaTables.id, current.id))
+			.returning({ pictureUrl: metaTables.pictureUrl });
 		if (!list) error(404, 'List not found');
 		if (list.pictureUrl !== current.pictureUrl) await removeStoredPicture(current.pictureUrl);
 		if (slug !== event.params.slug) redirect(303, `/lists/${slug}`);
@@ -133,66 +139,48 @@ export const actions: Actions = {
 	},
 	addItem: async (event) => {
 		requireAdmin(event);
-		const fields = itemFields(await event.request.formData());
-		if (fields.error) return fail(400, { message: fields.error });
 		const list = await currentList(event.params.slug);
-		await db.insert(listItems).values({ ...fields.values!, listId: list.id });
+		const fields = itemFields(await event.request.formData(), await listColumns(list));
+		if (fields.error) return fail(400, { message: fields.error });
+		await insertItem(list, fields.values!);
 		return { saved: true };
 	},
 	updateItem: async (event) => {
 		requireAdmin(event);
 		const form = await event.request.formData();
-		const id = Number(form.get('itemId'));
-		if (!Number.isSafeInteger(id) || id <= 0) return fail(400, { message: 'Invalid item.' });
-		const fields = itemFields(form);
-		if (fields.error) return fail(400, { message: fields.error });
+		const id = itemId(form);
+		if (!id) return fail(400, { message: 'Invalid item.' });
 		const list = await currentList(event.params.slug);
-		const existing = await db.query.listItems.findFirst({ where: { id, listId: list.id } });
+		const fields = itemFields(form, await listColumns(list));
+		if (fields.error) return fail(400, { message: fields.error });
+		const existing = await getItem(list, id);
 		if (!existing) error(404, 'Item not found');
-		const [item] = await db
-			.update(listItems)
-			.set(fields.values!)
-			.where(and(eq(listItems.id, id), eq(listItems.listId, list.id)))
-			.returning({ id: listItems.id });
-		if (!item) error(404, 'Item not found');
+		if (!(await updateItem(list, id, fields.values!))) error(404, 'Item not found');
 		if ('pictureUrl' in fields.values! && fields.values!.pictureUrl !== existing.pictureUrl)
 			await removeStoredPicture(existing.pictureUrl);
 		return { saved: true };
 	},
 	removeItem: async (event) => {
 		requireAdmin(event);
-		const id = Number((await event.request.formData()).get('itemId'));
-		if (!Number.isSafeInteger(id) || id <= 0) return fail(400, { message: 'Invalid item' });
+		const id = itemId(await event.request.formData());
+		if (!id) return fail(400, { message: 'Invalid item' });
 		const list = await currentList(event.params.slug);
-		const [item] = await db
-			.delete(listItems)
-			.where(and(eq(listItems.id, id), eq(listItems.listId, list.id)))
-			.returning({ pictureUrl: listItems.pictureUrl });
+		const item = await deleteItem(list, id);
 		if (!item) error(404, 'Item not found');
-		await removeStoredPicture(item.pictureUrl);
+		await removeStoredPicture(item.picture_url);
 		return { saved: true };
 	},
 	setCompletion: async (event) => {
-		const user = requireUser(event);
+		// One owner: `done` lives on the item, so only the admin can tick items off.
+		requireAdmin(event);
 		const list = await currentList(event.params.slug);
-		if (!list.isProgress) return fail(400, { message: 'This is not a progress list.' });
+		if (!list.hasDone) return fail(400, { message: 'This is not a progress list.' });
 		const form = await event.request.formData();
-		const id = Number(form.get('itemId'));
+		const id = itemId(form);
 		const completed = form.get('completed');
-		if (!Number.isSafeInteger(id) || id <= 0 || (completed !== 'yes' && completed !== 'no'))
+		if (!id || (completed !== 'yes' && completed !== 'no'))
 			return fail(400, { message: 'Invalid progress change.' });
-		const item = await db.query.listItems.findFirst({ where: { id, listId: list.id } });
-		if (!item) error(404, 'Item not found');
-		if (completed === 'yes') {
-			await db
-				.insert(listItemCompletions)
-				.values({ itemId: id, userId: user.id })
-				.onConflictDoNothing();
-		} else {
-			await db
-				.delete(listItemCompletions)
-				.where(and(eq(listItemCompletions.itemId, id), eq(listItemCompletions.userId, user.id)));
-		}
+		if (!(await setDone(list, id, completed === 'yes'))) error(404, 'Item not found');
 		return { saved: true };
 	}
 };

src/routes/lists/[slug]/+page.svelte

@@ -1,5 +1,4 @@
 <script lang="ts">
-	import { NativeSelect } from '#lib/components/ui/native-select/index.js';
 	import { Input } from '#lib/components/ui/input/index.js';
 	import { Textarea } from '#lib/components/ui/textarea/index.js';
 	import { Checkbox } from '#lib/components/ui/checkbox/index.js';
@@ -14,6 +13,7 @@
 	import { enhance, type SubmitFunction } from '$app/forms';
 	import ListPictureDropzone from '#lib/components/ListPictureDropzone.svelte';
 	import ProgressBar from '#lib/components/ProgressBar.svelte';
+	import ListExtraFields from '#lib/components/ListExtraFields.svelte';
 	import type { PageProps } from './$types';
 	let { data, form }: PageProps = $props();
 	let completed = $derived(new Set(data.completedIds));
@@ -109,7 +109,6 @@
 	{#if form?.message}<p role="alert" class="text-red-700">{form.message}</p>{/if}
 	{#if uploadError}<p role="alert" class="text-red-700">{uploadError}</p>{/if}
 	{#if data.list.isProgress}
-		{#if data.user}
 		<div class="border-y border-[var(--site-border)] py-4">
 			<p class="font-medium">
 				{data.checked} of {data.total} checked · {data.total
@@ -120,12 +119,6 @@
 				<ProgressBar value={data.checked} max={data.total} label="List progress" small />
 			</div>
 		</div>
-		{:else}
-			<p>
-				<a class="underline" href={resolve(`login?returnTo=/lists/${data.list.slug}`)}>Log in</a> to save
-				your progress.
-			</p>
-		{/if}
 	{/if}
 	{#if data.isAdmin && managing}
 		<Collapsible.Root class="border-b border-[var(--site-border)] pb-5">
@@ -159,12 +152,9 @@
 							class="block w-full rounded border p-2"
 						/></label
 					>
-					<label
-						>Type<NativeSelect name="type" class="block w-full rounded border p-2">
-							<option value="normal" selected={!data.list.isProgress}>Normal</option>
-							<option value="progress" selected={data.list.isProgress}>Progress</option>
-						</NativeSelect></label
-					>
+					<p class="self-end text-sm text-[var(--site-muted)]">
+						{data.list.isProgress ? 'Progress' : 'Normal'} list (type is fixed once created)
+					</p>
 					<div class="sm:col-span-2">
 						<ListPictureDropzone label="List picture (optional)" />
 						{#if data.list.pictureUrl}<label class="mt-2 block text-sm"
@@ -238,8 +228,21 @@
 							>
 								{item.description}
 							</p>{/if}
+						{#if data.list.columns.length}<p class="mt-1 text-sm text-[var(--site-muted)]">
+								{#each data.list.columns.filter((c) => item.extras[c.name] !== null && item.extras[c.name] !== '') as column, i (column.name)}{#if i}
+										·
+									{/if}{column.label}: {#if column.uiType === 'url'}<a
+											class="underline"
+											href={String(item.extras[column.name])}
+											rel="noopener noreferrer">link</a
+										>{:else if column.uiType === 'bool'}{item.extras[column.name]
+											? 'yes'
+											: 'no'}{:else if column.uiType === 'cents'}{(
+											Number(item.extras[column.name]) / 100
+										).toFixed(2)}{:else}{item.extras[column.name]}{/if}{/each}
+							</p>{/if}
 					</div>
-					{#if data.list.isProgress && data.user}
+					{#if data.list.isProgress && data.isAdmin}
 						<form method="POST" action="?/setCompletion" use:enhance class="shrink-0">
 							<input type="hidden" name="itemId" value={item.id} />
 							<input type="hidden" name="completed" value={completed.has(item.id) ? 'no' : 'yes'} />
@@ -251,6 +254,8 @@
 								{#if completed.has(item.id)}<Check size={16} aria-hidden="true" />{/if}
 							</Button>
 						</form>
+					{:else if data.list.isProgress && completed.has(item.id)}
+						<Check size={16} aria-label="Done" class="shrink-0" />
 					{/if}
 					{#if data.isAdmin && managing}<Button
 							type="button"
@@ -309,6 +314,7 @@
 							value={editingItem.description ?? ''}
 						/></label
 					>
+					<ListExtraFields columns={data.list.columns} values={editingItem.extras} />
 					<Button
 						type="submit"
 						disabled={uploading}
@@ -373,6 +379,7 @@
 							class="block w-full rounded border p-2"
 						/></label
 					>
+					<ListExtraFields columns={data.list.columns} />
 					<Button
 						type="submit"
 						disabled={uploading}

src/routes/projects/+page.svelte

@@ -1,10 +1,7 @@
 <script lang="ts">
 	import { resolve } from '$app/paths';
-	import ArrowRight from 'lucide-svelte/icons/arrow-right';
-	import ExternalLink from 'lucide-svelte/icons/external-link';
-	import * as Card from '#lib/components/ui/card/index.js';
 	import { Badge } from '#lib/components/ui/badge/index.js';
-	import ProjectIcon from '#lib/components/ProjectIcon.svelte';
+	import CatalogGrid from '#lib/components/CatalogGrid.svelte';
 	import { projects } from '#lib/projects.js';
 
 	const earlier = [
@@ -15,59 +12,12 @@
 </script>
 
 <div class="mx-auto max-w-6xl px-4 py-12 sm:px-6 sm:py-16">
-	<h1 class="mb-10 text-4xl font-semibold tracking-tight sm:text-5xl">projects</h1>
-	<ul class="grid gap-3 sm:grid-cols-2">
-		{#each projects as project (project.name)}
-			<li>
-				<Card.Root class="h-full py-0 transition-colors hover:bg-muted/50"
-					><Card.Content class="p-0">
-						{#if project.external}
-							<a
-								href={project.href}
-								rel="external"
-								class="flex min-h-28 items-start justify-between gap-4 p-5"
-							>
-								<span class="flex min-w-0 items-start gap-3">
-									<span
-										class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
-									>
-										<ProjectIcon name={project.name} class="size-5" />
-									</span>
-									<span class="min-w-0"
-										><span class="block font-medium">{project.name}</span><span
-											class="mt-1 block text-sm text-muted-foreground">{project.subtitle}</span
-										></span
-									>
-								</span><ExternalLink
-									size={18}
-									aria-hidden="true"
-									class="text-[var(--site-muted)]"
-								/>
-							</a>
-						{:else}
-							<a
-								href={resolve(project.href)}
-								class="flex min-h-28 items-start justify-between gap-4 p-5"
-							>
-								<span class="flex min-w-0 items-start gap-3">
-									<span
-										class="mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-md border border-border bg-[var(--site-surface)] text-[var(--site-muted)]"
-									>
-										<ProjectIcon name={project.name} class="size-5" />
-									</span>
-									<span class="min-w-0"
-										><span class="block font-medium">{project.name}</span><span
-											class="mt-1 block text-sm text-muted-foreground">{project.subtitle}</span
-										></span
-									>
-								</span><ArrowRight size={18} aria-hidden="true" class="text-[var(--site-muted)]" />
-							</a>
-						{/if}
-					</Card.Content></Card.Root
-				>
-			</li>
-		{/each}
-	</ul>
+	<h1 class="mb-3 text-4xl font-semibold tracking-tight sm:text-5xl">projects</h1>
+	<p class="mb-10 text-[var(--site-muted)]">
+		Things I built. Looking for the money, house, game or price trackers? They live under
+		<a class="underline" href={resolve('trackers')}>trackers</a>.
+	</p>
+	<CatalogGrid items={projects} />
 	<h2 class="mt-14 mb-3 text-2xl font-semibold">other</h2>
 	<ul>
 		{#each earlier as name (name)}

src/routes/projects/animaldex/admin/+page.server.ts

@@ -28,7 +28,7 @@ export const load: PageServerLoad = async (event) => {
 			sightingAcceptedAt: sightings.acceptedAt,
 			sightingDeniedAt: sightings.deniedAt,
 			photoUrl: sql<string>`(
-				SELECT url FROM photos
+				SELECT url FROM animaldex.sighting_photos
 				WHERE sighting_id = ${sightings.id}
 				ORDER BY sort_order ASC
 				LIMIT 1
@@ -40,7 +40,7 @@ export const load: PageServerLoad = async (event) => {
 			and(
 				eq(sightings.animalId, animals.id),
 				sql`${sightings.id} = (
-					SELECT id FROM sightings
+					SELECT id FROM animaldex.sightings
 					WHERE animal_id = ${animals.id}
 					ORDER BY submitted_at ASC
 					LIMIT 1

src/routes/projects/animaldex/api/map/+server.ts

@@ -45,7 +45,7 @@ export const GET: RequestHandler = async ({ url }) => {
 			lat: sightings.lat,
 			lng: sightings.lng,
 			photoUrl: sql<string>`(
-				SELECT url FROM photos
+				SELECT url FROM animaldex.sighting_photos
 				WHERE sighting_id = ${sightings.id}
 				ORDER BY sort_order ASC
 				LIMIT 1

src/routes/projects/cs-prices/+page.server.ts

@@ -5,13 +5,13 @@ import type { PageServerLoad } from './$types';
 export const load: PageServerLoad = async () => {
 	const [stats, dimensions, markets] = await Promise.all([
 		db.execute(sql`SELECT
-			(SELECT count(*)::int FROM cs_market_items) AS items,
-			(SELECT greatest(reltuples::bigint, 0) FROM pg_class WHERE oid = 'cs_price_observations'::regclass) AS observations,
-			(SELECT min(observed_at) FROM cs_price_observations) AS earliest,
-			(SELECT max(observed_at) FROM cs_price_observations) AS latest`),
+			(SELECT count(*)::int FROM cs.items) AS items,
+			(SELECT greatest(reltuples::bigint, 0) FROM pg_class WHERE oid = 'cs.price_observations'::regclass) AS observations,
+			(SELECT min(observed_at) FROM cs.price_observations) AS earliest,
+			(SELECT max(observed_at) FROM cs.price_observations) AS latest`),
 		db.execute(sql`SELECT key, count(DISTINCT value)::int AS values
-			FROM cs_item_dimensions GROUP BY key ORDER BY key`),
-		db.execute(sql`SELECT source, currency, kind FROM cs_price_streams ORDER BY 1, 2, 3`)
+			FROM cs.item_dimensions GROUP BY key ORDER BY key`),
+		db.execute(sql`SELECT source, currency, kind FROM cs.price_streams ORDER BY 1, 2, 3`)
 	]);
 	return {
 		stats: stats[0] as {

src/routes/projects/cs-prices/api/search/+server.ts

@@ -10,14 +10,14 @@ export const GET: RequestHandler = async ({ url }) => {
 	const pattern = `%${q.replaceAll('\\', '\\\\').replaceAll('%', '\\%').replaceAll('_', '\\_')}%`;
 	if (dimension === 'item') {
 		const rows = await db.execute(sql`SELECT id, name, market_hash_name, icon_url
-			FROM cs_market_items WHERE name ILIKE ${pattern} ESCAPE '\'
+			FROM cs.items WHERE name ILIKE ${pattern} ESCAPE '\'
 			ORDER BY name, id LIMIT ${limit} OFFSET ${offset}`);
 		return Response.json({ results: rows });
 	}
 	if (!/^[a-z][a-z0-9_]*$/.test(dimension))
 		return Response.json({ error: 'Invalid dimension' }, { status: 400 });
 	const rows = await db.execute(sql`SELECT value, count(*)::int AS items
-		FROM cs_item_dimensions WHERE key = ${dimension} AND value ILIKE ${pattern} ESCAPE '\'
+		FROM cs.item_dimensions WHERE key = ${dimension} AND value ILIKE ${pattern} ESCAPE '\'
 		GROUP BY value ORDER BY value LIMIT ${limit} OFFSET ${offset}`);
 	return Response.json({ results: rows });
 };

src/routes/projects/cs-prices/api/series/+server.ts

@@ -34,11 +34,11 @@ export const POST: RequestHandler = async ({ request }) => {
 	const seconds = Math.max(60, Math.ceil((+to - +from) / 1000 / 240 / 60) * 60);
 	const selection =
 		dimension === 'item'
-			? sql`JOIN cs_market_items i ON i.id = p.item_id AND i.id IN (${sql.join(
+			? sql`JOIN cs.items i ON i.id = p.item_id AND i.id IN (${sql.join(
 					ids.map((id) => sql`${id}`),
 					sql`,`
 				)})`
-			: sql`JOIN cs_item_dimensions d ON d.item_id = p.item_id AND d.key = ${dimension}
+			: sql`JOIN cs.item_dimensions d ON d.item_id = p.item_id AND d.key = ${dimension}
 			AND d.value IN (${sql.join(
 				values.map((value) => sql`${value}`),
 				sql`,`
@@ -53,7 +53,7 @@ export const POST: RequestHandler = async ({ request }) => {
 				sum(p.volume) AS volume,
 				min(p.price_cents) AS min_cents,
 				max(p.price_cents) AS max_cents
-			FROM cs_price_observations p ${selection}
+			FROM cs.price_observations p ${selection}
 			WHERE p.source = ${source} AND p.currency = ${currency} AND p.kind = ${kind}
 				AND p.observed_at >= ${from.toISOString()}::timestamptz
 				AND p.observed_at <= ${to.toISOString()}::timestamptz