diff --git a/.agents/skills/ask-matt/SKILL.md b/.agents/skills/ask-matt/SKILL.md
index 70b807b3..793caca7 100644
--- a/.agents/skills/ask-matt/SKILL.md
+++ b/.agents/skills/ask-matt/SKILL.md
@@ -16,14 +16,15 @@ The route most work travels. You have an idea and want it built.
 
 1. **`/grill-with-docs`** — sharpen the idea by interview. Start here when you **have a codebase**: it's stateful, retaining what it learns in `CONTEXT.md` and ADRs. (No codebase? Use `/grill-me` — see Standalone. Both run the same `/grilling` primitive; `grill-with-docs` is the one that leaves a paper trail.)
 2. **Branch — can you settle every question in conversation?** If a question needs a runnable answer (state, business logic, a UI you have to see), detour through a prototype, bridged by **`/handoff`** in both directions (see Crossing sessions):
-   - **`/handoff`** out, then open a fresh session against that file,
-   - **`/prototype`** to answer the question with throwaway code,
-   - **`/handoff`** back what you learned, and reference it from the original idea thread.
+    - **`/handoff`** out, then open a fresh session against that file,
+    - **`/prototype`** to answer the question with throwaway code,
+    - **`/handoff`** back what you learned, and reference it from the original idea thread.
 3. **Branch — is this a multi-session build?**
-   - **Yes** → **`/to-spec`** (turn the thread into a spec), then **`/to-tickets`** to split it into tracer-bullet tickets, each declaring its **blocking edges**. On a local tracker that's one file per ticket under `.scratch/<feature>/issues/`, worked blockers-first by hand; on a real tracker the edges become native blocking links, so any ticket whose blockers are done can be grabbed — kick off **`/implement`** per ticket, **clearing context between each one**.
-   - **No** → **`/implement`** right here, in the same context window.
 
-   Either way, **`/implement`** builds each issue by driving **`/tdd`** internally — one red-green slice at a time — then closes out by running **`/code-review`**, a two-axis review (Standards + Spec) of the diff, before committing. Reach for **`/tdd`** on its own when you just want to build a concrete behaviour test-first without a full spec, and **`/code-review`** on its own whenever you want to review a branch or PR against a fixed point.
+    - **Yes** → **`/to-spec`** (turn the thread into a spec), then **`/to-tickets`** to split it into tracer-bullet tickets, each declaring its **blocking edges**. On a local tracker that's one file per ticket under `.scratch/<feature>/issues/`, worked blockers-first by hand; on a real tracker the edges become native blocking links, so any ticket whose blockers are done can be grabbed — kick off **`/implement`** per ticket, **clearing context between each one**.
+    - **No** → **`/implement`** right here, in the same context window.
+
+    Either way, **`/implement`** builds each issue by driving **`/tdd`** internally — one red-green slice at a time — then closes out by running **`/code-review`**, a two-axis review (Standards + Spec) of the diff, before committing. Reach for **`/tdd`** on its own when you just want to build a concrete behaviour test-first without a full spec, and **`/code-review`** on its own whenever you want to review a branch or PR against a fixed point.
 
 ### Context hygiene
 
@@ -35,43 +36,43 @@ The limit on this is the **[smart zone](https://www.aihero.dev/ai-coding-diction
 
 A starting situation that generates work, then merges onto the main flow.
 
-- **Bugs and requests piling up** → **`/triage`**. It moves issues through triage roles and produces agent-ready issues, which **`/implement`** later picks up.
+-   **Bugs and requests piling up** → **`/triage`**. It moves issues through triage roles and produces agent-ready issues, which **`/implement`** later picks up.
 
-  Triage is only for issues **you didn't create** — bug reports, incoming feature requests, anything that arrives raw. Tickets that `/to-tickets` produced are already agent-ready, so **don't triage them**.
+    Triage is only for issues **you didn't create** — bug reports, incoming feature requests, anything that arrives raw. Tickets that `/to-tickets` produced are already agent-ready, so **don't triage them**.
 
-- **Something's broken** → **`/diagnosing-bugs`**. For the hard ones: the bug that resists a first glance, the intermittent flake, the regression that crept in between two known-good states. It refuses to theorise until it has a **tight feedback loop** — one command that already goes red on *this* bug — then fixes with a regression test. Its post-mortem hands off to **`/improve-codebase-architecture`** when the real finding is that there's no good seam to lock the bug down.
+-   **Something's broken** → **`/diagnosing-bugs`**. For the hard ones: the bug that resists a first glance, the intermittent flake, the regression that crept in between two known-good states. It refuses to theorise until it has a **tight feedback loop** — one command that already goes red on _this_ bug — then fixes with a regression test. Its post-mortem hands off to **`/improve-codebase-architecture`** when the real finding is that there's no good seam to lock the bug down.
 
-- **A huge, foggy effort — a greenfield project or a huge feature build, too big for one session** → **`/wayfinder`**, the most cognitively demanding flow here. When the way from here to the destination isn't visible yet, it charts a **shared map** of **decision tickets** on the issue tracker and resolves them one at a time — producing **decisions, not deliverables** — until the fog is pushed back and the way is clear. Where **`/grill-with-docs`** sharpens an idea you can hold in one session, wayfinder is for the idea you can't — and it's slower and denser, so save it for exactly that, never a well-scoped feature.
+-   **A huge, foggy effort — a greenfield project or a huge feature build, too big for one session** → **`/wayfinder`**, the most cognitively demanding flow here. When the way from here to the destination isn't visible yet, it charts a **shared map** of **decision tickets** on the issue tracker and resolves them one at a time — producing **decisions, not deliverables** — until the fog is pushed back and the way is clear. Where **`/grill-with-docs`** sharpens an idea you can hold in one session, wayfinder is for the idea you can't — and it's slower and denser, so save it for exactly that, never a well-scoped feature.
 
-  When the map clears, **it hands off, it doesn't build**: merge onto the main flow at **`/to-spec`**, which collapses the map's linked decisions into a buildable plan, then `/to-tickets` and `/implement` as usual. Looping the map straight into `/implement` skips that collapse and throws the linked detail away — go straight to `/implement` only when the effort turned out genuinely small.
+    When the map clears, **it hands off, it doesn't build**: merge onto the main flow at **`/to-spec`**, which collapses the map's linked decisions into a buildable plan, then `/to-tickets` and `/implement` as usual. Looping the map straight into `/implement` skips that collapse and throws the linked detail away — go straight to `/implement` only when the effort turned out genuinely small.
 
 ## Codebase health
 
 Not feature work — upkeep.
 
-- **`/improve-codebase-architecture`** — run whenever you have a spare moment to keep the codebase good for agents to operate in. It surfaces **deepening opportunities**; picking one _generates an idea_ you can take into the main flow at `/grill-with-docs`. It's the survey that finds the candidates; **`/codebase-design`** (below) is the bench you design the chosen one on.
+-   **`/improve-codebase-architecture`** — run whenever you have a spare moment to keep the codebase good for agents to operate in. It surfaces **deepening opportunities**; picking one _generates an idea_ you can take into the main flow at `/grill-with-docs`. It's the survey that finds the candidates; **`/codebase-design`** (below) is the bench you design the chosen one on.
 
 ## Vocabulary underneath
 
-Two model-invoked references that run *beneath* the other skills — each the single source of truth for its vocabulary. Reach for them directly when the **words**, not the process, are the problem; or let the skills above pull them in.
+Two model-invoked references that run _beneath_ the other skills — each the single source of truth for its vocabulary. Reach for them directly when the **words**, not the process, are the problem; or let the skills above pull them in.
 
-- **`/domain-modeling`** — sharpen the project's *domain* language: challenge a fuzzy term, resolve an overloaded word ("account" doing three jobs), record a hard-to-reverse decision as an ADR. It's the active discipline `/grill-with-docs` drives to keep `CONTEXT.md` a clean glossary.
-- **`/codebase-design`** — the deep-module vocabulary (module, interface, depth, seam, adapter, leverage, locality) for designing a module's *shape*: a lot of behaviour behind a small interface at a clean seam. `/tdd` and `/improve-codebase-architecture` both speak it.
+-   **`/domain-modeling`** — sharpen the project's _domain_ language: challenge a fuzzy term, resolve an overloaded word ("account" doing three jobs), record a hard-to-reverse decision as an ADR. It's the active discipline `/grill-with-docs` drives to keep `CONTEXT.md` a clean glossary.
+-   **`/codebase-design`** — the deep-module vocabulary (module, interface, depth, seam, adapter, leverage, locality) for designing a module's _shape_: a lot of behaviour behind a small interface at a clean seam. `/tdd` and `/improve-codebase-architecture` both speak it.
 
 ## Crossing sessions
 
-- **`/handoff`** — when a thread is full or you need to branch off (e.g. into a `/prototype` session), this compacts the conversation into a markdown file. You don't continue in place — you **open a new session and reference that file** to carry the context across. It's the bridge between context windows, in either direction. Use it when you want a **fresh session** but need the **current conversation preserved**.
-- **`/compact`** (built-in) — stay in the **same conversation**, letting the earlier turns be summarized. Use it at **intentional breaks between phases**, when you don't mind losing the verbatim history. Don't compact mid-phase — the agent can lose its way. `/handoff` forks; `/compact` continues.
+-   **`/handoff`** — when a thread is full or you need to branch off (e.g. into a `/prototype` session), this compacts the conversation into a markdown file. You don't continue in place — you **open a new session and reference that file** to carry the context across. It's the bridge between context windows, in either direction. Use it when you want a **fresh session** but need the **current conversation preserved**.
+-   **`/compact`** (built-in) — stay in the **same conversation**, letting the earlier turns be summarized. Use it at **intentional breaks between phases**, when you don't mind losing the verbatim history. Don't compact mid-phase — the agent can lose its way. `/handoff` forks; `/compact` continues.
 
 ## Standalone
 
 Off the main flow entirely.
 
-- **`/grill-me`** — the same relentless interview as `/grill-with-docs`, but for when you have **no codebase**. Stateless: it saves nothing locally, builds no `CONTEXT.md`. Reach for it to sharpen any plan or design that doesn't live in a repo.
-- **`/prototype`** — a small, throwaway program that answers one design question: does this state model feel right, or what should this UI look like. Throwaway from day one — keep the answer, delete the code. It's the detour in step 2 of the main flow, but reach for it any time a design question is hard to settle on paper.
-- **`/research`** — delegate reading legwork to a **background agent**: it investigates a question against **primary sources**, then leaves a cited Markdown file in the repo. Keep working while it reads. The file it produces is something to take *into* the main flow at `/grill-with-docs` — research feeds the thinking, it doesn't replace it.
-- **`/teach`** — learn a concept over multiple sessions, using the current directory as a stateful workspace.
-- **`/writing-great-skills`** — reference for writing and editing skills well.
+-   **`/grill-me`** — the same relentless interview as `/grill-with-docs`, but for when you have **no codebase**. Stateless: it saves nothing locally, builds no `CONTEXT.md`. Reach for it to sharpen any plan or design that doesn't live in a repo.
+-   **`/prototype`** — a small, throwaway program that answers one design question: does this state model feel right, or what should this UI look like. Throwaway from day one — keep the answer, delete the code. It's the detour in step 2 of the main flow, but reach for it any time a design question is hard to settle on paper.
+-   **`/research`** — delegate reading legwork to a **background agent**: it investigates a question against **primary sources**, then leaves a cited Markdown file in the repo. Keep working while it reads. The file it produces is something to take _into_ the main flow at `/grill-with-docs` — research feeds the thinking, it doesn't replace it.
+-   **`/teach`** — learn a concept over multiple sessions, using the current directory as a stateful workspace.
+-   **`/writing-great-skills`** — reference for writing and editing skills well.
 
 ## Precondition
 
diff --git a/.agents/skills/ask-matt/agents/openai.yaml b/.agents/skills/ask-matt/agents/openai.yaml
index 5c60d51b..f92e811c 100644
--- a/.agents/skills/ask-matt/agents/openai.yaml
+++ b/.agents/skills/ask-matt/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Ask Matt"
-  short_description: "Find the right skill or workflow"
+    display_name: "Ask Matt"
+    short_description: "Find the right skill or workflow"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/code-review/SKILL.md b/.agents/skills/code-review/SKILL.md
index 2a0b5240..eaf82367 100644
--- a/.agents/skills/code-review/SKILL.md
+++ b/.agents/skills/code-review/SKILL.md
@@ -5,8 +5,8 @@ description: Review the changes since a fixed point (commit, branch, tag, or mer
 
 Two-axis review of the diff between `HEAD` and a fixed point the user supplies:
 
-- **Standards** — does the code conform to this repo's documented coding standards?
-- **Spec** — does the code faithfully implement the originating issue / PRD / spec?
+-   **Standards** — does the code conform to this repo's documented coding standards?
+-   **Spec** — does the code faithfully implement the originating issue / PRD / spec?
 
 Both axes run as **parallel sub-agents** so they don't pollute each other's context, then this skill aggregates their findings.
 
@@ -37,23 +37,23 @@ Anything in the repo that documents how code should be written, such as `CODING_
 
 On top of whatever the repo documents, the Standards axis always carries the **smell baseline** below — a fixed set of Fowler code smells (_Refactoring_, ch.3) that applies even when a repo documents nothing. Two rules bind it:
 
-- **The repo overrides.** A documented repo standard always wins; where it endorses something the baseline would flag, suppress the smell.
-- **Always a judgement call.** Each smell is a labelled heuristic ("possible Feature Envy"), never a hard violation — and, like any standard here, skip anything tooling already enforces.
+-   **The repo overrides.** A documented repo standard always wins; where it endorses something the baseline would flag, suppress the smell.
+-   **Always a judgement call.** Each smell is a labelled heuristic ("possible Feature Envy"), never a hard violation — and, like any standard here, skip anything tooling already enforces.
 
-Each smell reads *what it is* → *how to fix*; match it against the diff:
+Each smell reads _what it is_ → _how to fix_; match it against the diff:
 
-- **Mysterious Name** — a function, variable, or type whose name doesn't reveal what it does or holds. → rename it; if no honest name comes, the design's murky.
-- **Duplicated Code** — the same logic shape appears in more than one hunk or file in the change. → extract the shared shape, call it from both.
-- **Feature Envy** — a method that reaches into another object's data more than its own. → move the method onto the data it envies.
-- **Data Clumps** — the same few fields or params keep travelling together (a type wanting to be born). → bundle them into one type, pass that.
-- **Primitive Obsession** — a primitive or string standing in for a domain concept that deserves its own type. → give the concept its own small type.
-- **Repeated Switches** — the same `switch`/`if`-cascade on the same type recurs across the change. → replace with polymorphism, or one map both sites share.
-- **Shotgun Surgery** — one logical change forces scattered edits across many files in the diff. → gather what changes together into one module.
-- **Divergent Change** — one file or module is edited for several unrelated reasons. → split so each module changes for one reason.
-- **Speculative Generality** — abstraction, parameters, or hooks added for needs the spec doesn't have. → delete it; inline back until a real need shows.
-- **Message Chains** — long `a.b().c().d()` navigation the caller shouldn't depend on. → hide the walk behind one method on the first object.
-- **Middle Man** — a class or function that mostly just delegates onward. → cut it, call the real target direct.
-- **Refused Bequest** — a subclass or implementer that ignores or overrides most of what it inherits. → drop the inheritance, use composition.
+-   **Mysterious Name** — a function, variable, or type whose name doesn't reveal what it does or holds. → rename it; if no honest name comes, the design's murky.
+-   **Duplicated Code** — the same logic shape appears in more than one hunk or file in the change. → extract the shared shape, call it from both.
+-   **Feature Envy** — a method that reaches into another object's data more than its own. → move the method onto the data it envies.
+-   **Data Clumps** — the same few fields or params keep travelling together (a type wanting to be born). → bundle them into one type, pass that.
+-   **Primitive Obsession** — a primitive or string standing in for a domain concept that deserves its own type. → give the concept its own small type.
+-   **Repeated Switches** — the same `switch`/`if`-cascade on the same type recurs across the change. → replace with polymorphism, or one map both sites share.
+-   **Shotgun Surgery** — one logical change forces scattered edits across many files in the diff. → gather what changes together into one module.
+-   **Divergent Change** — one file or module is edited for several unrelated reasons. → split so each module changes for one reason.
+-   **Speculative Generality** — abstraction, parameters, or hooks added for needs the spec doesn't have. → delete it; inline back until a real need shows.
+-   **Message Chains** — long `a.b().c().d()` navigation the caller shouldn't depend on. → hide the walk behind one method on the first object.
+-   **Middle Man** — a class or function that mostly just delegates onward. → cut it, call the real target direct.
+-   **Refused Bequest** — a subclass or implementer that ignores or overrides most of what it inherits. → drop the inheritance, use composition.
 
 ### 4. Spawn both sub-agents in parallel
 
@@ -61,15 +61,15 @@ Send a single message with two `Agent` tool calls. Use the `general-purpose` sub
 
 **Standards sub-agent prompt** — include:
 
-- The full diff command and commit list.
-- The list of standards-source files you found in step 3, **plus the smell baseline from step 3** pasted in full — the sub-agent has no other access to it.
-- The brief: "Report — per file/hunk where relevant — (a) every place the diff violates a documented standard: cite the standard (file + the rule); and (b) any baseline smell you spot: name it and quote the hunk. Distinguish hard violations from judgement calls — documented-standard breaches can be hard, but baseline smells are always judgement calls, and a documented repo standard overrides the baseline. Skip anything tooling enforces. Under 400 words."
+-   The full diff command and commit list.
+-   The list of standards-source files you found in step 3, **plus the smell baseline from step 3** pasted in full — the sub-agent has no other access to it.
+-   The brief: "Report — per file/hunk where relevant — (a) every place the diff violates a documented standard: cite the standard (file + the rule); and (b) any baseline smell you spot: name it and quote the hunk. Distinguish hard violations from judgement calls — documented-standard breaches can be hard, but baseline smells are always judgement calls, and a documented repo standard overrides the baseline. Skip anything tooling enforces. Under 400 words."
 
 **Spec sub-agent prompt** — include:
 
-- The diff command and commit list.
-- The path or fetched contents of the spec.
-- The brief: "Report: (a) requirements the spec asked for that are missing or partial; (b) behaviour in the diff that wasn't asked for (scope creep); (c) requirements that look implemented but where the implementation looks wrong. Quote the spec line for each finding. Under 400 words."
+-   The diff command and commit list.
+-   The path or fetched contents of the spec.
+-   The brief: "Report: (a) requirements the spec asked for that are missing or partial; (b) behaviour in the diff that wasn't asked for (scope creep); (c) requirements that look implemented but where the implementation looks wrong. Quote the spec line for each finding. Under 400 words."
 
 If the spec is missing, skip the Spec sub-agent and note this in the final report.
 
@@ -83,7 +83,7 @@ End with a one-line summary: total findings per axis, and the worst issue _withi
 
 A change can pass one axis and fail the other:
 
-- Code that follows every standard but implements the wrong thing → **Standards pass, Spec fail.**
-- Code that does exactly what the issue asked but breaks the project's conventions → **Spec pass, Standards fail.**
+-   Code that follows every standard but implements the wrong thing → **Standards pass, Spec fail.**
+-   Code that does exactly what the issue asked but breaks the project's conventions → **Spec pass, Standards fail.**
 
 Reporting them separately stops one axis from masking the other.
diff --git a/.agents/skills/code-review/agents/openai.yaml b/.agents/skills/code-review/agents/openai.yaml
index 9076774b..b818dc98 100644
--- a/.agents/skills/code-review/agents/openai.yaml
+++ b/.agents/skills/code-review/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Code Review"
-  short_description: "Review a diff on standards and spec"
+    display_name: "Code Review"
+    short_description: "Review a diff on standards and spec"
diff --git a/.agents/skills/codebase-design/DEEPENING.md b/.agents/skills/codebase-design/DEEPENING.md
index 3938457b..7f73de4d 100644
--- a/.agents/skills/codebase-design/DEEPENING.md
+++ b/.agents/skills/codebase-design/DEEPENING.md
@@ -18,7 +18,7 @@ Dependencies that have local test stand-ins (PGLite for Postgres, in-memory file
 
 Your own services across a network boundary (microservices, internal APIs). Define a **port** (interface) at the seam. The deep module owns the logic; the transport is injected as an **adapter**. Tests use an in-memory adapter. Production uses an HTTP/gRPC/queue adapter.
 
-Recommendation shape: *"Define a port at the seam, implement an HTTP adapter for production and an in-memory adapter for testing, so the logic sits in one deep module even though it's deployed across a network."*
+Recommendation shape: _"Define a port at the seam, implement an HTTP adapter for production and an in-memory adapter for testing, so the logic sits in one deep module even though it's deployed across a network."_
 
 ### 4. True external (Mock)
 
@@ -26,12 +26,12 @@ Third-party services (Stripe, Twilio, etc.) you don't control. The deepened modu
 
 ## Seam discipline
 
-- **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a port unless at least two adapters are justified (typically production + test). A single-adapter seam is just indirection.
-- **Internal seams vs external seams.** A deep module can have internal seams (private to its implementation, used by its own tests) as well as the external seam at its interface. Don't expose internal seams through the interface just because tests use them.
+-   **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a port unless at least two adapters are justified (typically production + test). A single-adapter seam is just indirection.
+-   **Internal seams vs external seams.** A deep module can have internal seams (private to its implementation, used by its own tests) as well as the external seam at its interface. Don't expose internal seams through the interface just because tests use them.
 
 ## Testing strategy: replace, don't layer
 
-- Old unit tests on shallow modules become waste once tests at the deepened module's interface exist — delete them.
-- Write new tests at the deepened module's interface. The **interface is the test surface**.
-- Tests assert on observable outcomes through the interface, not internal state.
-- Tests should survive internal refactors — they describe behaviour, not implementation. If a test has to change when the implementation changes, it's testing past the interface.
+-   Old unit tests on shallow modules become waste once tests at the deepened module's interface exist — delete them.
+-   Write new tests at the deepened module's interface. The **interface is the test surface**.
+-   Tests assert on observable outcomes through the interface, not internal state.
+-   Tests should survive internal refactors — they describe behaviour, not implementation. If a test has to change when the implementation changes, it's testing past the interface.
diff --git a/.agents/skills/codebase-design/DESIGN-IT-TWICE.md b/.agents/skills/codebase-design/DESIGN-IT-TWICE.md
index 49a7c42a..106ab66f 100644
--- a/.agents/skills/codebase-design/DESIGN-IT-TWICE.md
+++ b/.agents/skills/codebase-design/DESIGN-IT-TWICE.md
@@ -10,9 +10,9 @@ Uses the vocabulary in [SKILL.md](SKILL.md) — **module**, **interface**, **sea
 
 Before spawning sub-agents, write a user-facing explanation of the problem space for the chosen candidate:
 
-- The constraints any new interface would need to satisfy
-- The dependencies it would rely on, and which category they fall into (see [DEEPENING.md](DEEPENING.md))
-- A rough illustrative code sketch to ground the constraints — not a proposal, just a way to make the constraints concrete
+-   The constraints any new interface would need to satisfy
+-   The dependencies it would rely on, and which category they fall into (see [DEEPENING.md](DEEPENING.md))
+-   A rough illustrative code sketch to ground the constraints — not a proposal, just a way to make the constraints concrete
 
 Show this to the user, then immediately proceed to Step 2. The user reads and thinks while the sub-agents work in parallel.
 
@@ -22,10 +22,10 @@ Spawn 3+ sub-agents in parallel using the Agent tool. Each must produce a **radi
 
 Prompt each sub-agent with a separate technical brief (file paths, coupling details, dependency category from [DEEPENING.md](DEEPENING.md), what sits behind the seam). The brief is independent of the user-facing problem-space explanation in Step 1. Give each agent a different design constraint:
 
-- Agent 1: "Minimize the interface — aim for 1–3 entry points max. Maximise leverage per entry point."
-- Agent 2: "Maximise flexibility — support many use cases and extension."
-- Agent 3: "Optimise for the most common caller — make the default case trivial."
-- Agent 4 (if applicable): "Design around ports & adapters for cross-seam dependencies."
+-   Agent 1: "Minimize the interface — aim for 1–3 entry points max. Maximise leverage per entry point."
+-   Agent 2: "Maximise flexibility — support many use cases and extension."
+-   Agent 3: "Optimise for the most common caller — make the default case trivial."
+-   Agent 4 (if applicable): "Design around ports & adapters for cross-seam dependencies."
 
 Include both [SKILL.md](SKILL.md) vocabulary and CONTEXT.md vocabulary in the brief so each sub-agent names things consistently with the architecture language and the project's domain language.
 
diff --git a/.agents/skills/codebase-design/SKILL.md b/.agents/skills/codebase-design/SKILL.md
index 16620c24..0cd34b53 100644
--- a/.agents/skills/codebase-design/SKILL.md
+++ b/.agents/skills/codebase-design/SKILL.md
@@ -19,9 +19,9 @@ Use these terms exactly — don't substitute "component," "service," "API," or "
 
 **Depth** — leverage at the interface: the amount of behaviour a caller (or test) can exercise per unit of interface they have to learn. A module is **deep** when a large amount of behaviour sits behind a small interface, **shallow** when the interface is nearly as complex as the implementation.
 
-**Seam** _(Michael Feathers)_ — a place where you can alter behaviour without editing in that place; the *location* at which a module's interface lives. Where to put the seam is its own design decision, distinct from what goes behind it. _Avoid_: boundary (overloaded with DDD's bounded context).
+**Seam** _(Michael Feathers)_ — a place where you can alter behaviour without editing in that place; the _location_ at which a module's interface lives. Where to put the seam is its own design decision, distinct from what goes behind it. _Avoid_: boundary (overloaded with DDD's bounded context).
 
-**Adapter** — a concrete thing that satisfies an interface at a seam. Describes *role* (what slot it fills), not substance (what's inside).
+**Adapter** — a concrete thing that satisfies an interface at a seam. Describes _role_ (what slot it fills), not substance (what's inside).
 
 **Leverage** — what callers get from depth: more capability per unit of interface they learn. One implementation pays back across N call sites and M tests.
 
@@ -53,16 +53,16 @@ Use these terms exactly — don't substitute "component," "service," "API," or "
 
 When designing an interface, ask:
 
-- Can I reduce the number of methods?
-- Can I simplify the parameters?
-- Can I hide more complexity inside?
+-   Can I reduce the number of methods?
+-   Can I simplify the parameters?
+-   Can I hide more complexity inside?
 
 ## Principles
 
-- **Depth is a property of the interface, not the implementation.** A deep module can be internally composed of small, mockable, swappable parts — they just aren't part of the interface. A module can have **internal seams** (private to its implementation, used by its own tests) as well as the **external seam** at its interface.
-- **The deletion test.** Imagine deleting the module. If complexity vanishes, it was a pass-through. If complexity reappears across N callers, it was earning its keep.
-- **The interface is the test surface.** Callers and tests cross the same seam. If you want to test *past* the interface, the module is probably the wrong shape.
-- **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a seam unless something actually varies across it.
+-   **Depth is a property of the interface, not the implementation.** A deep module can be internally composed of small, mockable, swappable parts — they just aren't part of the interface. A module can have **internal seams** (private to its implementation, used by its own tests) as well as the **external seam** at its interface.
+-   **The deletion test.** Imagine deleting the module. If complexity vanishes, it was a pass-through. If complexity reappears across N callers, it was earning its keep.
+-   **The interface is the test surface.** Callers and tests cross the same seam. If you want to test _past_ the interface, the module is probably the wrong shape.
+-   **One adapter means a hypothetical seam. Two adapters means a real one.** Don't introduce a seam unless something actually varies across it.
 
 ## Designing for testability
 
@@ -70,45 +70,45 @@ Good interfaces make testing natural:
 
 1. **Accept dependencies, don't create them.**
 
-   ```typescript
-   // Testable
-   function processOrder(order, paymentGateway) {}
+    ```typescript
+    // Testable
+    function processOrder(order, paymentGateway) {}
 
-   // Hard to test
-   function processOrder(order) {
-     const gateway = new StripeGateway();
-   }
-   ```
+    // Hard to test
+    function processOrder(order) {
+    	const gateway = new StripeGateway();
+    }
+    ```
 
 2. **Return results, don't produce side effects.**
 
-   ```typescript
-   // Testable
-   function calculateDiscount(cart): Discount {}
+    ```typescript
+    // Testable
+    function calculateDiscount(cart): Discount {}
 
-   // Hard to test
-   function applyDiscount(cart): void {
-     cart.total -= discount;
-   }
-   ```
+    // Hard to test
+    function applyDiscount(cart): void {
+    	cart.total -= discount;
+    }
+    ```
 
 3. **Small surface area.** Fewer methods = fewer tests needed. Fewer params = simpler test setup.
 
 ## Relationships
 
-- A **Module** has exactly one **Interface** (the surface it presents to callers and tests).
-- **Depth** is a property of a **Module**, measured against its **Interface**.
-- A **Seam** is where a **Module**'s **Interface** lives.
-- An **Adapter** sits at a **Seam** and satisfies the **Interface**.
-- **Depth** produces **Leverage** for callers and **Locality** for maintainers.
+-   A **Module** has exactly one **Interface** (the surface it presents to callers and tests).
+-   **Depth** is a property of a **Module**, measured against its **Interface**.
+-   A **Seam** is where a **Module**'s **Interface** lives.
+-   An **Adapter** sits at a **Seam** and satisfies the **Interface**.
+-   **Depth** produces **Leverage** for callers and **Locality** for maintainers.
 
 ## Rejected framings
 
-- **Depth as ratio of implementation-lines to interface-lines** (Ousterhout): rewards padding the implementation. We use depth-as-leverage instead.
-- **"Interface" as the TypeScript `interface` keyword or a class's public methods**: too narrow — interface here includes every fact a caller must know.
-- **"Boundary"**: overloaded with DDD's bounded context. Say **seam** or **interface**.
+-   **Depth as ratio of implementation-lines to interface-lines** (Ousterhout): rewards padding the implementation. We use depth-as-leverage instead.
+-   **"Interface" as the TypeScript `interface` keyword or a class's public methods**: too narrow — interface here includes every fact a caller must know.
+-   **"Boundary"**: overloaded with DDD's bounded context. Say **seam** or **interface**.
 
 ## Going deeper
 
-- **Deepening a cluster given its dependencies** — see [DEEPENING.md](DEEPENING.md): dependency categories, seam discipline, and replace-don't-layer testing.
-- **Exploring alternative interfaces** — see [DESIGN-IT-TWICE.md](DESIGN-IT-TWICE.md): spin up parallel sub-agents to design the interface several radically different ways, then compare on depth, locality, and seam placement.
+-   **Deepening a cluster given its dependencies** — see [DEEPENING.md](DEEPENING.md): dependency categories, seam discipline, and replace-don't-layer testing.
+-   **Exploring alternative interfaces** — see [DESIGN-IT-TWICE.md](DESIGN-IT-TWICE.md): spin up parallel sub-agents to design the interface several radically different ways, then compare on depth, locality, and seam placement.
diff --git a/.agents/skills/codebase-design/agents/openai.yaml b/.agents/skills/codebase-design/agents/openai.yaml
index 3180715e..0d3adce7 100644
--- a/.agents/skills/codebase-design/agents/openai.yaml
+++ b/.agents/skills/codebase-design/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Codebase Design"
-  short_description: "Vocabulary for deep-module design"
+    display_name: "Codebase Design"
+    short_description: "Vocabulary for deep-module design"
diff --git a/.agents/skills/diagnosing-bugs/SKILL.md b/.agents/skills/diagnosing-bugs/SKILL.md
index f400de7c..5c0bfdb5 100644
--- a/.agents/skills/diagnosing-bugs/SKILL.md
+++ b/.agents/skills/diagnosing-bugs/SKILL.md
@@ -34,9 +34,9 @@ Build the right feedback loop, and the bug is 90% fixed.
 
 Treat the loop as a product. Once you have _a_ loop, **tighten** it:
 
-- Can I make it faster? (Cache setup, skip unrelated init, narrow the test scope.)
-- Can I make the signal sharper? (Assert on the specific symptom, not "didn't crash".)
-- Can I make it more deterministic? (Pin time, seed RNG, isolate filesystem, freeze network.)
+-   Can I make it faster? (Cache setup, skip unrelated init, narrow the test scope.)
+-   Can I make the signal sharper? (Assert on the specific symptom, not "didn't crash".)
+-   Can I make it more deterministic? (Pin time, seed RNG, isolate filesystem, freeze network.)
 
 A 30-second flaky loop is barely better than no loop; a 2-second deterministic one is tight — a debugging superpower.
 
@@ -52,10 +52,10 @@ Stop and say so explicitly. List what you tried. Ask the user for: (a) access to
 
 Phase 1 is done when the loop is **tight** and **red-capable**: you can name **one command** — a script path, a test invocation, a curl — that you have **already run at least once** (paste the invocation and its output), and that is:
 
-- [ ] **Red-capable** — it drives the actual bug code path and asserts the **user's exact symptom**, so it can go red on this bug and green once fixed. Not "runs without erroring" — it must be able to _catch this specific bug_.
-- [ ] **Deterministic** — same verdict every run (flaky bugs: a pinned, high reproduction rate, per above).
-- [ ] **Fast** — seconds, not minutes.
-- [ ] **Agent-runnable** — you can run it unattended; a human in the loop only via `scripts/hitl-loop.template.sh`.
+-   [ ] **Red-capable** — it drives the actual bug code path and asserts the **user's exact symptom**, so it can go red on this bug and green once fixed. Not "runs without erroring" — it must be able to _catch this specific bug_.
+-   [ ] **Deterministic** — same verdict every run (flaky bugs: a pinned, high reproduction rate, per above).
+-   [ ] **Fast** — seconds, not minutes.
+-   [ ] **Agent-runnable** — you can run it unattended; a human in the loop only via `scripts/hitl-loop.template.sh`.
 
 If you catch yourself reading code to build a theory before this command exists, **stop — jumping straight to a hypothesis is the exact failure this skill prevents.** No red-capable command, no Phase 2.
 
@@ -65,9 +65,9 @@ Run the loop. Watch it go red — the bug appears.
 
 Confirm:
 
-- [ ] The loop produces the failure mode the **user** described — not a different failure that happens to be nearby. Wrong bug = wrong fix.
-- [ ] The failure is reproducible across multiple runs (or, for non-deterministic bugs, reproducible at a high enough rate to debug against).
-- [ ] You have captured the exact symptom (error message, wrong output, slow timing) so later phases can verify the fix actually addresses it.
+-   [ ] The loop produces the failure mode the **user** described — not a different failure that happens to be nearby. Wrong bug = wrong fix.
+-   [ ] The failure is reproducible across multiple runs (or, for non-deterministic bugs, reproducible at a high enough rate to debug against).
+-   [ ] You have captured the exact symptom (error message, wrong output, slow timing) so later phases can verify the fix actually addresses it.
 
 ### Minimise
 
@@ -125,10 +125,10 @@ If a correct seam exists:
 
 Required before declaring done:
 
-- [ ] Original repro no longer reproduces (re-run the Phase 1 loop)
-- [ ] Regression test passes (or absence of seam is documented)
-- [ ] All `[DEBUG-...]` instrumentation removed (`grep` the prefix)
-- [ ] Throwaway prototypes deleted (or moved to a clearly-marked debug location)
-- [ ] The hypothesis that turned out correct is stated in the commit / PR message — so the next debugger learns
+-   [ ] Original repro no longer reproduces (re-run the Phase 1 loop)
+-   [ ] Regression test passes (or absence of seam is documented)
+-   [ ] All `[DEBUG-...]` instrumentation removed (`grep` the prefix)
+-   [ ] Throwaway prototypes deleted (or moved to a clearly-marked debug location)
+-   [ ] The hypothesis that turned out correct is stated in the commit / PR message — so the next debugger learns
 
 **Then ask: what would have prevented this bug?** If the answer involves architectural change (no good test seam, tangled callers, hidden coupling) hand off to the `/improve-codebase-architecture` skill with the specifics. Make the recommendation **after** the fix is in, not before — you have more information now than when you started.
diff --git a/.agents/skills/diagnosing-bugs/agents/openai.yaml b/.agents/skills/diagnosing-bugs/agents/openai.yaml
index a13a755a..a7a04400 100644
--- a/.agents/skills/diagnosing-bugs/agents/openai.yaml
+++ b/.agents/skills/diagnosing-bugs/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Diagnosing Bugs"
-  short_description: "Diagnose hard bugs and regressions"
+    display_name: "Diagnosing Bugs"
+    short_description: "Diagnose hard bugs and regressions"
diff --git a/.agents/skills/domain-modeling/ADR-FORMAT.md b/.agents/skills/domain-modeling/ADR-FORMAT.md
index da7e78ec..862f385c 100644
--- a/.agents/skills/domain-modeling/ADR-FORMAT.md
+++ b/.agents/skills/domain-modeling/ADR-FORMAT.md
@@ -12,15 +12,15 @@ Create the `docs/adr/` directory lazily — only when the first ADR is needed.
 {1-3 sentences: what's the context, what did we decide, and why.}
 ```
 
-That's it. An ADR can be a single paragraph. The value is in recording *that* a decision was made and *why* — not in filling out sections.
+That's it. An ADR can be a single paragraph. The value is in recording _that_ a decision was made and _why_ — not in filling out sections.
 
 ## Optional sections
 
 Only include these when they add genuine value. Most ADRs won't need them.
 
-- **Status** frontmatter (`proposed | accepted | deprecated | superseded by ADR-NNNN`) — useful when decisions are revisited
-- **Considered Options** — only when the rejected alternatives are worth remembering
-- **Consequences** — only when non-obvious downstream effects need to be called out
+-   **Status** frontmatter (`proposed | accepted | deprecated | superseded by ADR-NNNN`) — useful when decisions are revisited
+-   **Considered Options** — only when the rejected alternatives are worth remembering
+-   **Consequences** — only when non-obvious downstream effects need to be called out
 
 ## Numbering
 
@@ -38,10 +38,10 @@ If a decision is easy to reverse, skip it — you'll just reverse it. If it's no
 
 ### What qualifies
 
-- **Architectural shape.** "We're using a monorepo." "The write model is event-sourced, the read model is projected into Postgres."
-- **Integration patterns between contexts.** "Ordering and Billing communicate via domain events, not synchronous HTTP."
-- **Technology choices that carry lock-in.** Database, message bus, auth provider, deployment target. Not every library — just the ones that would take a quarter to swap out.
-- **Boundary and scope decisions.** "Customer data is owned by the Customer context; other contexts reference it by ID only." The explicit no-s are as valuable as the yes-s.
-- **Deliberate deviations from the obvious path.** "We're using manual SQL instead of an ORM because X." Anything where a reasonable reader would assume the opposite. These stop the next engineer from "fixing" something that was deliberate.
-- **Constraints not visible in the code.** "We can't use AWS because of compliance requirements." "Response times must be under 200ms because of the partner API contract."
-- **Rejected alternatives when the rejection is non-obvious.** If you considered GraphQL and picked REST for subtle reasons, record it — otherwise someone will suggest GraphQL again in six months.
+-   **Architectural shape.** "We're using a monorepo." "The write model is event-sourced, the read model is projected into Postgres."
+-   **Integration patterns between contexts.** "Ordering and Billing communicate via domain events, not synchronous HTTP."
+-   **Technology choices that carry lock-in.** Database, message bus, auth provider, deployment target. Not every library — just the ones that would take a quarter to swap out.
+-   **Boundary and scope decisions.** "Customer data is owned by the Customer context; other contexts reference it by ID only." The explicit no-s are as valuable as the yes-s.
+-   **Deliberate deviations from the obvious path.** "We're using manual SQL instead of an ORM because X." Anything where a reasonable reader would assume the opposite. These stop the next engineer from "fixing" something that was deliberate.
+-   **Constraints not visible in the code.** "We can't use AWS because of compliance requirements." "Response times must be under 200ms because of the partner API contract."
+-   **Rejected alternatives when the rejection is non-obvious.** If you considered GraphQL and picked REST for subtle reasons, record it — otherwise someone will suggest GraphQL again in six months.
diff --git a/.agents/skills/domain-modeling/CONTEXT-FORMAT.md b/.agents/skills/domain-modeling/CONTEXT-FORMAT.md
index eaf2a185..d1a9e818 100644
--- a/.agents/skills/domain-modeling/CONTEXT-FORMAT.md
+++ b/.agents/skills/domain-modeling/CONTEXT-FORMAT.md
@@ -24,10 +24,10 @@ _Avoid_: Client, buyer, account
 
 ## Rules
 
-- **Be opinionated.** When multiple words exist for the same concept, pick the best one and list the others under `_Avoid_`.
-- **Keep definitions tight.** One or two sentences max. Define what it IS, not what it does.
-- **Only include terms specific to this project's context.** General programming concepts (timeouts, error types, utility patterns) don't belong even if the project uses them extensively. Before adding a term, ask: is this a concept unique to this context, or a general programming concept? Only the former belongs.
-- **Group terms under subheadings** when natural clusters emerge. If all terms belong to a single cohesive area, a flat list is fine.
+-   **Be opinionated.** When multiple words exist for the same concept, pick the best one and list the others under `_Avoid_`.
+-   **Keep definitions tight.** One or two sentences max. Define what it IS, not what it does.
+-   **Only include terms specific to this project's context.** General programming concepts (timeouts, error types, utility patterns) don't belong even if the project uses them extensively. Before adding a term, ask: is this a concept unique to this context, or a general programming concept? Only the former belongs.
+-   **Group terms under subheadings** when natural clusters emerge. If all terms belong to a single cohesive area, a flat list is fine.
 
 ## Single vs multi-context repos
 
@@ -40,21 +40,21 @@ _Avoid_: Client, buyer, account
 
 ## Contexts
 
-- [Ordering](./src/ordering/CONTEXT.md) — receives and tracks customer orders
-- [Billing](./src/billing/CONTEXT.md) — generates invoices and processes payments
-- [Fulfillment](./src/fulfillment/CONTEXT.md) — manages warehouse picking and shipping
+-   [Ordering](./src/ordering/CONTEXT.md) — receives and tracks customer orders
+-   [Billing](./src/billing/CONTEXT.md) — generates invoices and processes payments
+-   [Fulfillment](./src/fulfillment/CONTEXT.md) — manages warehouse picking and shipping
 
 ## Relationships
 
-- **Ordering → Fulfillment**: Ordering emits `OrderPlaced` events; Fulfillment consumes them to start picking
-- **Fulfillment → Billing**: Fulfillment emits `ShipmentDispatched` events; Billing consumes them to generate invoices
-- **Ordering ↔ Billing**: Shared types for `CustomerId` and `Money`
+-   **Ordering → Fulfillment**: Ordering emits `OrderPlaced` events; Fulfillment consumes them to start picking
+-   **Fulfillment → Billing**: Fulfillment emits `ShipmentDispatched` events; Billing consumes them to generate invoices
+-   **Ordering ↔ Billing**: Shared types for `CustomerId` and `Money`
 ```
 
 The skill infers which structure applies:
 
-- If `CONTEXT-MAP.md` exists, read it to find contexts
-- If only a root `CONTEXT.md` exists, single context
-- If neither exists, create a root `CONTEXT.md` lazily when the first term is resolved
+-   If `CONTEXT-MAP.md` exists, read it to find contexts
+-   If only a root `CONTEXT.md` exists, single context
+-   If neither exists, create a root `CONTEXT.md` lazily when the first term is resolved
 
 When multiple contexts exist, infer which one the current topic relates to. If unclear, ask.
diff --git a/.agents/skills/domain-modeling/SKILL.md b/.agents/skills/domain-modeling/SKILL.md
index d0f7e1a5..b0e9464d 100644
--- a/.agents/skills/domain-modeling/SKILL.md
+++ b/.agents/skills/domain-modeling/SKILL.md
@@ -5,7 +5,7 @@ description: Build and sharpen a project's domain model. Use when the user wants
 
 # Domain Modeling
 
-Actively build and sharpen the project's domain model as you design. This is the *active* discipline — challenging terms, inventing edge-case scenarios, and writing the glossary and decisions down the moment they crystallise. (Merely *reading* `CONTEXT.md` for vocabulary is not this skill — that's a one-line habit any skill can do. This skill is for when you're changing the model, not just consuming it.)
+Actively build and sharpen the project's domain model as you design. This is the _active_ discipline — challenging terms, inventing edge-case scenarios, and writing the glossary and decisions down the moment they crystallise. (Merely _reading_ `CONTEXT.md` for vocabulary is not this skill — that's a one-line habit any skill can do. This skill is for when you're changing the model, not just consuming it.)
 
 ## File structure
 
diff --git a/.agents/skills/domain-modeling/agents/openai.yaml b/.agents/skills/domain-modeling/agents/openai.yaml
index 7f1522d2..08aeb759 100644
--- a/.agents/skills/domain-modeling/agents/openai.yaml
+++ b/.agents/skills/domain-modeling/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Domain Modeling"
-  short_description: "Build and sharpen a domain model"
+    display_name: "Domain Modeling"
+    short_description: "Build and sharpen a domain model"
diff --git a/.agents/skills/grill-me/agents/openai.yaml b/.agents/skills/grill-me/agents/openai.yaml
index 4d6fb0c7..4bc34ac7 100644
--- a/.agents/skills/grill-me/agents/openai.yaml
+++ b/.agents/skills/grill-me/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Grill Me"
-  short_description: "Sharpen a plan through interview"
+    display_name: "Grill Me"
+    short_description: "Sharpen a plan through interview"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/grill-with-docs/agents/openai.yaml b/.agents/skills/grill-with-docs/agents/openai.yaml
index 5dbe2780..2a8a1c17 100644
--- a/.agents/skills/grill-with-docs/agents/openai.yaml
+++ b/.agents/skills/grill-with-docs/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Grill with Docs"
-  short_description: "Grill a design and write its docs"
+    display_name: "Grill with Docs"
+    short_description: "Grill a design and write its docs"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/grilling/SKILL.md b/.agents/skills/grilling/SKILL.md
index 52d8eb3c..8c2d9fd0 100644
--- a/.agents/skills/grilling/SKILL.md
+++ b/.agents/skills/grilling/SKILL.md
@@ -7,6 +7,6 @@ Interview me relentlessly about every aspect of this until we reach a shared und
 
 Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+If a _fact_ can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The _decisions_, though, are mine — put each one to me and wait for my answer.
 
 Do not act on it until I confirm we have reached a shared understanding.
diff --git a/.agents/skills/grilling/agents/openai.yaml b/.agents/skills/grilling/agents/openai.yaml
index 85b12607..fbe97bab 100644
--- a/.agents/skills/grilling/agents/openai.yaml
+++ b/.agents/skills/grilling/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Grilling"
-  short_description: "Stress-test thinking one question at a time"
+    display_name: "Grilling"
+    short_description: "Stress-test thinking one question at a time"
diff --git a/.agents/skills/handoff/agents/openai.yaml b/.agents/skills/handoff/agents/openai.yaml
index 6e1d8da1..fb875948 100644
--- a/.agents/skills/handoff/agents/openai.yaml
+++ b/.agents/skills/handoff/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Handoff"
-  short_description: "Compact a conversation into a handoff"
+    display_name: "Handoff"
+    short_description: "Compact a conversation into a handoff"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/implement/agents/openai.yaml b/.agents/skills/implement/agents/openai.yaml
index f8794dc1..03996a74 100644
--- a/.agents/skills/implement/agents/openai.yaml
+++ b/.agents/skills/implement/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Implement"
-  short_description: "Build work from a spec or tickets"
+    display_name: "Implement"
+    short_description: "Build work from a spec or tickets"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/improve-codebase-architecture/HTML-REPORT.md b/.agents/skills/improve-codebase-architecture/HTML-REPORT.md
index 17f6d2c7..a0ef381d 100644
--- a/.agents/skills/improve-codebase-architecture/HTML-REPORT.md
+++ b/.agents/skills/improve-codebase-architecture/HTML-REPORT.md
@@ -7,29 +7,39 @@ The architectural review is rendered as a single self-contained HTML file in the
 ```html
 <!doctype html>
 <html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <title>Architecture review — {{repo name}}</title>
-    <script src="https://cdn.tailwindcss.com"></script>
-    <script type="module">
-      import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs";
-      mermaid.initialize({ startOnLoad: true, theme: "neutral", securityLevel: "loose" });
-    </script>
-    <style>
-      /* small custom layer for things Tailwind doesn't cover cleanly:
+	<head>
+		<meta charset="utf-8" />
+		<title>Architecture review — {{repo name}}</title>
+		<script src="https://cdn.tailwindcss.com"></script>
+		<script type="module">
+			import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs";
+			mermaid.initialize({
+				startOnLoad: true,
+				theme: "neutral",
+				securityLevel: "loose",
+			});
+		</script>
+		<style>
+			/* small custom layer for things Tailwind doesn't cover cleanly:
          dashed seam lines, hand-drawn-feeling arrow heads, etc. */
-      .seam { stroke-dasharray: 4 4; }
-      .leak { stroke: #dc2626; }
-      .deep { background: linear-gradient(135deg, #0f172a, #1e293b); }
-    </style>
-  </head>
-  <body class="bg-stone-50 text-slate-900 font-sans">
-    <main class="max-w-5xl mx-auto px-6 py-12 space-y-12">
-      <header>...</header>
-      <section id="candidates" class="space-y-10">...</section>
-      <section id="top-recommendation">...</section>
-    </main>
-  </body>
+			.seam {
+				stroke-dasharray: 4 4;
+			}
+			.leak {
+				stroke: #dc2626;
+			}
+			.deep {
+				background: linear-gradient(135deg, #0f172a, #1e293b);
+			}
+		</style>
+	</head>
+	<body class="bg-stone-50 font-sans text-slate-900">
+		<main class="mx-auto max-w-5xl space-y-12 px-6 py-12">
+			<header>...</header>
+			<section id="candidates" class="space-y-10">...</section>
+			<section id="top-recommendation">...</section>
+		</main>
+	</body>
 </html>
 ```
 
@@ -43,14 +53,14 @@ The diagrams carry the weight. Prose is sparse, plain, and uses the glossary ter
 
 Each candidate is one `<article>`:
 
-- **Title** — short, names the deepening (e.g. "Collapse the Order intake pipeline").
-- **Badge row** — recommendation strength (`Strong` = emerald, `Worth exploring` = amber, `Speculative` = slate), plus a tag for the dependency category (`in-process`, `local-substitutable`, `ports & adapters`, `mock`).
-- **Files** — monospaced list, `font-mono text-sm`.
-- **Before / After diagram** — the centrepiece. Two columns, side by side. See patterns below.
-- **Problem** — one sentence. What hurts.
-- **Solution** — one sentence. What changes.
-- **Wins** — bullets, ≤6 words each. e.g. "Tests hit one interface", "Pricing logic stops leaking", "Delete 4 shallow wrappers".
-- **ADR callout** (if applicable) — one line in an amber-tinted box.
+-   **Title** — short, names the deepening (e.g. "Collapse the Order intake pipeline").
+-   **Badge row** — recommendation strength (`Strong` = emerald, `Worth exploring` = amber, `Speculative` = slate), plus a tag for the dependency category (`in-process`, `local-substitutable`, `ports & adapters`, `mock`).
+-   **Files** — monospaced list, `font-mono text-sm`.
+-   **Before / After diagram** — the centrepiece. Two columns, side by side. See patterns below.
+-   **Problem** — one sentence. What hurts.
+-   **Solution** — one sentence. What changes.
+-   **Wins** — bullets, ≤6 words each. e.g. "Tests hit one interface", "Pricing logic stops leaking", "Delete 4 shallow wrappers".
+-   **ADR callout** (if applicable) — one line in an amber-tinted box.
 
 No paragraphs of explanation. If the diagram needs a paragraph to be understood, redraw the diagram.
 
@@ -64,14 +74,15 @@ Use a Mermaid `flowchart` or `graph` when the point is "X calls Y calls Z, and l
 
 ```html
 <div class="rounded-lg border border-slate-200 bg-white p-4">
-  <pre class="mermaid">
+	<pre class="mermaid">
     flowchart LR
       A[OrderHandler] --> B[OrderValidator]
       B --> C[OrderRepo]
       C -.leak.-> D[PricingClient]
       classDef leak stroke:#dc2626,stroke-width:2px;
       class C,D leak
-  </pre>
+  </pre
+	>
 </div>
 ```
 
@@ -93,11 +104,11 @@ Before: a tree of function calls rendered as nested boxes. After: the same tree
 
 ## Style guidance
 
-- Lean editorial, not corporate-dashboard. Generous whitespace. Serif optional for headings (`font-serif` works well with stone/slate).
-- Colour sparingly: one accent (emerald or indigo) plus red for leakage and amber for warnings.
-- Keep diagrams ~320px tall so before/after sits comfortably side by side without scrolling.
-- Use `text-xs uppercase tracking-wider` for module labels inside diagrams — they should read as schematic, not as UI.
-- The only scripts are the Tailwind CDN and the Mermaid ESM import. The report is otherwise static — no app code, no interactivity beyond Mermaid's own rendering.
+-   Lean editorial, not corporate-dashboard. Generous whitespace. Serif optional for headings (`font-serif` works well with stone/slate).
+-   Colour sparingly: one accent (emerald or indigo) plus red for leakage and amber for warnings.
+-   Keep diagrams ~320px tall so before/after sits comfortably side by side without scrolling.
+-   Use `text-xs uppercase tracking-wider` for module labels inside diagrams — they should read as schematic, not as UI.
+-   The only scripts are the Tailwind CDN and the Mermaid ESM import. The report is otherwise static — no app code, no interactivity beyond Mermaid's own rendering.
 
 ## Top recommendation section
 
@@ -113,11 +124,11 @@ Plain English, concise — but the architectural nouns and verbs come straight f
 
 **Phrasings that fit the style:**
 
-- "Order intake module is shallow — interface nearly matches the implementation."
-- "Pricing leaks across the seam."
-- "Deepen: one interface, one place to test."
-- "Two adapters justify the seam: HTTP in prod, in-memory in tests."
+-   "Order intake module is shallow — interface nearly matches the implementation."
+-   "Pricing leaks across the seam."
+-   "Deepen: one interface, one place to test."
+-   "Two adapters justify the seam: HTTP in prod, in-memory in tests."
 
-**Wins bullets** name the gain in glossary terms: *"locality: bugs concentrate in one module"*, *"leverage: one interface, N call sites"*, *"interface shrinks; implementation absorbs the wrappers"*. Don't write *"easier to maintain"* or *"cleaner code"* — those terms aren't in the glossary and don't earn their place.
+**Wins bullets** name the gain in glossary terms: _"locality: bugs concentrate in one module"_, _"leverage: one interface, N call sites"_, _"interface shrinks; implementation absorbs the wrappers"_. Don't write _"easier to maintain"_ or _"cleaner code"_ — those terms aren't in the glossary and don't earn their place.
 
 No hedging, no throat-clearing, no "it's worth noting that…". If a sentence could be a bullet, make it a bullet. If a bullet could be cut, cut it. If a term isn't in the `/codebase-design` glossary, reach for one that is before inventing a new one.
diff --git a/.agents/skills/improve-codebase-architecture/SKILL.md b/.agents/skills/improve-codebase-architecture/SKILL.md
index b56969e9..a84b6682 100644
--- a/.agents/skills/improve-codebase-architecture/SKILL.md
+++ b/.agents/skills/improve-codebase-architecture/SKILL.md
@@ -10,27 +10,27 @@ Surface architectural friction and propose **deepening opportunities** — refac
 
 This command is _informed_ by the project's domain model and built on a shared design vocabulary:
 
-- Run the `/codebase-design` skill for the architecture vocabulary (**module**, **interface**, **depth**, **seam**, **adapter**, **leverage**, **locality**) and its principles (the deletion test, "the interface is the test surface", "one adapter = hypothetical seam, two = real"). Use these terms exactly in every suggestion — don't drift into "component," "service," "API," or "boundary."
-- The domain language in `CONTEXT.md` gives names to good seams; ADRs in `docs/adr/` record decisions this command should not re-litigate.
+-   Run the `/codebase-design` skill for the architecture vocabulary (**module**, **interface**, **depth**, **seam**, **adapter**, **leverage**, **locality**) and its principles (the deletion test, "the interface is the test surface", "one adapter = hypothetical seam, two = real"). Use these terms exactly in every suggestion — don't drift into "component," "service," "API," or "boundary."
+-   The domain language in `CONTEXT.md` gives names to good seams; ADRs in `docs/adr/` record decisions this command should not re-litigate.
 
 ## Process
 
 ### 1. Explore
 
-**Scope before you scan — YAGNI.** Deepening a module pays off by making future changes to it easier, so put extra weight on the parts of the codebase that have recently changed. Decide *where* to look before you look:
+**Scope before you scan — YAGNI.** Deepening a module pays off by making future changes to it easier, so put extra weight on the parts of the codebase that have recently changed. Decide _where_ to look before you look:
 
-- If the user named a direction — a module, a subsystem, a pain point — take it, and skip the inference below.
-- Otherwise, walk back a good stretch of the commit history (`git log --oneline`) to find the codebase's hot spots — the files and areas that keep coming up — and let those paths pull your attention first. If the changes are scattered with no clear hot spot, widen the net.
+-   If the user named a direction — a module, a subsystem, a pain point — take it, and skip the inference below.
+-   Otherwise, walk back a good stretch of the commit history (`git log --oneline`) to find the codebase's hot spots — the files and areas that keep coming up — and let those paths pull your attention first. If the changes are scattered with no clear hot spot, widen the net.
 
 Read the project's domain glossary (`CONTEXT.md`) and any ADRs in the area you're touching first.
 
 Then use the Agent tool with `subagent_type=Explore` to walk the codebase. Don't follow rigid heuristics — explore organically and note where you experience friction:
 
-- Where does understanding one concept require bouncing between many small modules?
-- Where are modules **shallow** — interface nearly as complex as the implementation?
-- Where have pure functions been extracted just for testability, but the real bugs hide in how they're called (no **locality**)?
-- Where do tightly-coupled modules leak across their seams?
-- Which parts of the codebase are untested, or hard to test through their current interface?
+-   Where does understanding one concept require bouncing between many small modules?
+-   Where are modules **shallow** — interface nearly as complex as the implementation?
+-   Where have pure functions been extracted just for testability, but the real bugs hide in how they're called (no **locality**)?
+-   Where do tightly-coupled modules leak across their seams?
+-   Which parts of the codebase are untested, or hard to test through their current interface?
 
 Apply the **deletion test** to anything you suspect is shallow: would deleting it concentrate complexity, or just move it? A "yes, concentrates" is the signal you want.
 
@@ -42,12 +42,12 @@ The report uses **Tailwind via CDN** for layout and styling, and **Mermaid via C
 
 For each candidate, render a card with:
 
-- **Files** — which files/modules are involved
-- **Problem** — why the current architecture is causing friction
-- **Solution** — plain English description of what would change
-- **Benefits** — explained in terms of locality and leverage, and how tests would improve
-- **Before / After diagram** — side-by-side, custom-drawn, illustrating the shallowness and the deepening
-- **Recommendation strength** — one of `Strong`, `Worth exploring`, `Speculative`, rendered as a badge
+-   **Files** — which files/modules are involved
+-   **Problem** — why the current architecture is causing friction
+-   **Solution** — plain English description of what would change
+-   **Benefits** — explained in terms of locality and leverage, and how tests would improve
+-   **Before / After diagram** — side-by-side, custom-drawn, illustrating the shallowness and the deepening
+-   **Recommendation strength** — one of `Strong`, `Worth exploring`, `Speculative`, rendered as a badge
 
 End the report with a **Top recommendation** section: which candidate you'd tackle first and why.
 
@@ -65,7 +65,7 @@ Once the user picks a candidate, run the `/grilling` skill to walk the decision
 
 Side effects happen inline as decisions crystallize — run the `/domain-modeling` skill to keep the domain model current as you go:
 
-- **Naming a deepened module after a concept not in `CONTEXT.md`?** Add the term to `CONTEXT.md`. Create the file lazily if it doesn't exist.
-- **Sharpening a fuzzy term during the conversation?** Update `CONTEXT.md` right there.
-- **User rejects the candidate with a load-bearing reason?** Offer an ADR, framed as: _"Want me to record this as an ADR so future architecture reviews don't re-suggest it?"_ Only offer when the reason would actually be needed by a future explorer to avoid re-suggesting the same thing — skip ephemeral reasons ("not worth it right now") and self-evident ones.
-- **Want to explore alternative interfaces for the deepened module?** Run the `/codebase-design` skill and use its design-it-twice parallel sub-agent pattern.
+-   **Naming a deepened module after a concept not in `CONTEXT.md`?** Add the term to `CONTEXT.md`. Create the file lazily if it doesn't exist.
+-   **Sharpening a fuzzy term during the conversation?** Update `CONTEXT.md` right there.
+-   **User rejects the candidate with a load-bearing reason?** Offer an ADR, framed as: _"Want me to record this as an ADR so future architecture reviews don't re-suggest it?"_ Only offer when the reason would actually be needed by a future explorer to avoid re-suggesting the same thing — skip ephemeral reasons ("not worth it right now") and self-evident ones.
+-   **Want to explore alternative interfaces for the deepened module?** Run the `/codebase-design` skill and use its design-it-twice parallel sub-agent pattern.
diff --git a/.agents/skills/improve-codebase-architecture/agents/openai.yaml b/.agents/skills/improve-codebase-architecture/agents/openai.yaml
index 706fdca0..01f60cad 100644
--- a/.agents/skills/improve-codebase-architecture/agents/openai.yaml
+++ b/.agents/skills/improve-codebase-architecture/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Improve Codebase Architecture"
-  short_description: "Find and grill architecture improvements"
+    display_name: "Improve Codebase Architecture"
+    short_description: "Find and grill architecture improvements"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/prototype/LOGIC.md b/.agents/skills/prototype/LOGIC.md
index fe9a2c29..d16e77e2 100644
--- a/.agents/skills/prototype/LOGIC.md
+++ b/.agents/skills/prototype/LOGIC.md
@@ -4,10 +4,10 @@ A tiny interactive terminal app that lets the user drive a state model by hand.
 
 ## When this is the right shape
 
-- "I'm not sure if this state machine handles the edge case where X then Y."
-- "Does this data model actually let me represent the case where..."
-- "I want to feel out what the API should look like before writing it."
-- Anything where the user wants to **press buttons and watch state change**.
+-   "I'm not sure if this state machine handles the edge case where X then Y."
+-   "Does this data model actually let me represent the case where..."
+-   "I want to feel out what the API should look like before writing it."
+-   Anything where the user wants to **press buttons and watch state change**.
 
 If the question is "what should this look like" — wrong branch. Use [UI.md](UI.md).
 
@@ -29,12 +29,12 @@ Put the actual logic — the bit that's answering the question — behind a smal
 
 The right shape depends on the question:
 
-- **A pure reducer** — `(state, action) => state`. Good when actions are discrete events and state is a single value.
-- **A state machine** — explicit states and transitions. Good when "which actions are even legal right now" is part of the question.
-- **A small set of pure functions** over a plain data type. Good when there's no implicit current state — just transformations.
-- **A class or module with a clear method surface** when the logic genuinely owns ongoing internal state.
+-   **A pure reducer** — `(state, action) => state`. Good when actions are discrete events and state is a single value.
+-   **A state machine** — explicit states and transitions. Good when "which actions are even legal right now" is part of the question.
+-   **A small set of pure functions** over a plain data type. Good when there's no implicit current state — just transformations.
+-   **A class or module with a clear method surface** when the logic genuinely owns ongoing internal state.
 
-Pick whichever shape best fits the question being asked, *not* whichever is easiest to wire to a TUI. Keep it pure: no I/O, no terminal code, no `console.log` for control flow. The TUI imports it and calls into it; nothing flows the other direction.
+Pick whichever shape best fits the question being asked, _not_ whichever is easiest to wire to a TUI. Keep it pure: no I/O, no terminal code, no `console.log` for control flow. The TUI imports it and calls into it; nothing flows the other direction.
 
 This is what makes the prototype useful past its own lifetime: when the question's been answered, the validated reducer / machine / function set can be lifted into the real module on its own.
 
@@ -72,8 +72,8 @@ Once the prototype has answered its question, capture the answer, then capture t
 
 ## Anti-patterns
 
-- **Don't add tests.** A prototype that needs tests is no longer a prototype.
-- **Don't wire it to the real database.** Use an in-memory store unless the question is specifically about persistence.
-- **Don't generalise.** No "what if we wanted to support X later." The prototype answers one question.
-- **Don't blur the logic and the TUI together.** If the reducer / state machine references `console.log`, prompts, or terminal escape codes, it's no longer portable. Keep the TUI as a thin shell over a pure module.
-- **Don't ship the TUI shell into production.** The shell is optimised for being driven by hand from a terminal. The logic module behind it is the bit worth keeping.
+-   **Don't add tests.** A prototype that needs tests is no longer a prototype.
+-   **Don't wire it to the real database.** Use an in-memory store unless the question is specifically about persistence.
+-   **Don't generalise.** No "what if we wanted to support X later." The prototype answers one question.
+-   **Don't blur the logic and the TUI together.** If the reducer / state machine references `console.log`, prompts, or terminal escape codes, it's no longer portable. Keep the TUI as a thin shell over a pure module.
+-   **Don't ship the TUI shell into production.** The shell is optimised for being driven by hand from a terminal. The logic module behind it is the bit worth keeping.
diff --git a/.agents/skills/prototype/SKILL.md b/.agents/skills/prototype/SKILL.md
index e75d5331..5f5ff323 100644
--- a/.agents/skills/prototype/SKILL.md
+++ b/.agents/skills/prototype/SKILL.md
@@ -11,8 +11,8 @@ A prototype is **throwaway code that answers a question**. The question decides
 
 Identify which question is being answered — from the user's prompt, the surrounding code, or by asking if the user is around:
 
-- **"Does this logic / state model feel right?"** → [LOGIC.md](LOGIC.md). Build a tiny interactive terminal app that pushes the state machine through cases that are hard to reason about on paper.
-- **"What should this look like?"** → [UI.md](UI.md). Generate several radically different UI variations on a single route, switchable via a URL search param and a floating bottom bar.
+-   **"Does this logic / state model feel right?"** → [LOGIC.md](LOGIC.md). Build a tiny interactive terminal app that pushes the state machine through cases that are hard to reason about on paper.
+-   **"What should this look like?"** → [UI.md](UI.md). Generate several radically different UI variations on a single route, switchable via a URL search param and a floating bottom bar.
 
 The two branches produce very different artifacts — getting this wrong wastes the whole prototype. If the question is genuinely ambiguous and the user isn't reachable, default to whichever branch better matches the surrounding code (a backend module → logic; a page or component → UI) and state the assumption at the top of the prototype.
 
diff --git a/.agents/skills/prototype/UI.md b/.agents/skills/prototype/UI.md
index 76c0f601..5c9154b7 100644
--- a/.agents/skills/prototype/UI.md
+++ b/.agents/skills/prototype/UI.md
@@ -6,10 +6,10 @@ If the question is about logic/state rather than what something looks like — w
 
 ## When this is the right shape
 
-- "What should this page look like?"
-- "I want to see a few options for this dashboard before committing."
-- "Try a different layout for the settings screen."
-- Any time the user would otherwise spend a day picking between three vague mockups in their head.
+-   "What should this page look like?"
+-   "I want to see a few options for this dashboard before committing."
+-   "Try a different layout for the settings screen."
+-   Any time the user would otherwise spend a day picking between three vague mockups in their head.
 
 ## Two sub-shapes — strongly prefer sub-shape A
 
@@ -19,7 +19,7 @@ A UI prototype is much easier to judge when it's **butting up against the rest o
 
 The route already exists. Variants are rendered **on the same route**, gated by a `?variant=` URL search param. The existing data fetching, params, and auth all stay — only the rendering swaps. This is the default; pick it unless there's a specific reason not to.
 
-If the prototype is for something that doesn't yet have a page but *would naturally live inside one* (a new section of the dashboard, a new card on the settings screen, a new step in an existing flow) — that's still sub-shape A. Mount the variants inside the host page.
+If the prototype is for something that doesn't yet have a page but _would naturally live inside one_ (a new section of the dashboard, a new card on the settings screen, a new step in an existing flow) — that's still sub-shape A. Mount the variants inside the host page.
 
 ### Sub-shape B — a new page (last resort)
 
@@ -47,9 +47,9 @@ This works whether the user is here to push back or not.
 
 Draft each variant. Hold each one to:
 
-- The page's purpose and the data it has access to.
-- The project's component library / styling system (TailwindCSS, shadcn, MUI, plain CSS, whatever).
-- A clear exported component name, e.g. `VariantA`, `VariantB`, `VariantC`.
+-   The page's purpose and the data it has access to.
+-   The project's component library / styling system (TailwindCSS, shadcn, MUI, plain CSS, whatever).
+-   A clear exported component name, e.g. `VariantA`, `VariantB`, `VariantC`.
 
 Variants must be **structurally different** — different layout, different information hierarchy, different primary affordance, not just different colours. Three slightly-tweaked card grids isn't a UI prototype, it's wallpaper. If two drafts come out too similar, redo one with explicit "do not use a card grid" guidance.
 
@@ -59,14 +59,14 @@ Create a single switcher component on the route:
 
 ```tsx
 // pseudo-code — adapt to the project's framework
-const variant = searchParams.get('variant') ?? 'A';
+const variant = searchParams.get("variant") ?? "A";
 return (
-  <>
-    {variant === 'A' && <VariantA {...data} />}
-    {variant === 'B' && <VariantB {...data} />}
-    {variant === 'C' && <VariantC {...data} />}
-    <PrototypeSwitcher variants={['A','B','C']} current={variant} />
-  </>
+	<>
+		{variant === "A" && <VariantA {...data} />}
+		{variant === "B" && <VariantB {...data} />}
+		{variant === "C" && <VariantC {...data} />}
+		<PrototypeSwitcher variants={["A", "B", "C"]} current={variant} />
+	</>
 );
 ```
 
@@ -78,16 +78,16 @@ For sub-shape B (new page): the throwaway route under `/prototype/<name>` mounts
 
 A small fixed-position bar at the bottom-centre of the screen with three pieces:
 
-- **Left arrow** — cycles to the previous variant (wraps around).
-- **Variant label** — shows the current variant key and, if the variant exports a name, that name too. e.g. `B — Sidebar layout`.
-- **Right arrow** — cycles forward (wraps around).
+-   **Left arrow** — cycles to the previous variant (wraps around).
+-   **Variant label** — shows the current variant key and, if the variant exports a name, that name too. e.g. `B — Sidebar layout`.
+-   **Right arrow** — cycles forward (wraps around).
 
 Behaviour:
 
-- Clicking an arrow updates the URL search param (use the framework's router — `router.replace` on Next, `navigate` on React Router, etc) so the variant is shareable and reload-stable.
-- Keyboard: `←` and `→` arrow keys also cycle. Don't intercept arrow keys when an `<input>`, `<textarea>`, or `[contenteditable]` is focused.
-- Visually distinct from the page (e.g. high-contrast pill, subtle shadow) so it's obviously not part of the design being evaluated.
-- Hidden in production builds — gate on `process.env.NODE_ENV !== 'production'` or an equivalent check, so a stray prototype merge can't ship the bar to users.
+-   Clicking an arrow updates the URL search param (use the framework's router — `router.replace` on Next, `navigate` on React Router, etc) so the variant is shareable and reload-stable.
+-   Keyboard: `←` and `→` arrow keys also cycle. Don't intercept arrow keys when an `<input>`, `<textarea>`, or `[contenteditable]` is focused.
+-   Visually distinct from the page (e.g. high-contrast pill, subtle shadow) so it's obviously not part of the design being evaluated.
+-   Hidden in production builds — gate on `process.env.NODE_ENV !== 'production'` or an equivalent check, so a stray prototype merge can't ship the bar to users.
 
 Put the switcher in a single shared component so both sub-shapes can reuse it. Locate it wherever shared UI lives in the project.
 
@@ -99,14 +99,14 @@ Surface the URL (and the `?variant=` keys). The user will flip through whenever
 
 Once a variant has won, capture the answer — which variant and why — then capture the prototype the way the [SKILL](SKILL.md) describes. Fold the winner into the real code and move the rest onto the throwaway branch, not into main:
 
-- **Sub-shape A** — fold the winner into the existing page; drop the losing variants and the switcher from main.
-- **Sub-shape B** — promote the winning variant to a real route; drop the throwaway route and the switcher from main.
+-   **Sub-shape A** — fold the winner into the existing page; drop the losing variants and the switcher from main.
+-   **Sub-shape B** — promote the winning variant to a real route; drop the throwaway route and the switcher from main.
 
 The full set of variants is the primary source, so it lands on the throwaway branch, not the bin — variant components and the switcher left in the main branch rot fast and confuse the next reader.
 
 ## Anti-patterns
 
-- **Variants that differ only in colour or copy.** That's a tweak, not a prototype. Real variants disagree about structure.
-- **Sharing too much code between variants.** A shared `<Header>` is fine; a shared `<Layout>` defeats the point. Each variant should be free to throw out the layout.
-- **Wiring variants to real mutations.** Read-only prototypes are fine. If a variant needs to mutate, point it at a stub — the question is "what should this look like", not "does the backend work".
-- **Promoting the prototype directly to production.** The variant code was written under prototype constraints (no tests, minimal error handling). Rewrite it properly when you fold it in.
+-   **Variants that differ only in colour or copy.** That's a tweak, not a prototype. Real variants disagree about structure.
+-   **Sharing too much code between variants.** A shared `<Header>` is fine; a shared `<Layout>` defeats the point. Each variant should be free to throw out the layout.
+-   **Wiring variants to real mutations.** Read-only prototypes are fine. If a variant needs to mutate, point it at a stub — the question is "what should this look like", not "does the backend work".
+-   **Promoting the prototype directly to production.** The variant code was written under prototype constraints (no tests, minimal error handling). Rewrite it properly when you fold it in.
diff --git a/.agents/skills/prototype/agents/openai.yaml b/.agents/skills/prototype/agents/openai.yaml
index 1618b147..8692c9aa 100644
--- a/.agents/skills/prototype/agents/openai.yaml
+++ b/.agents/skills/prototype/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Prototype"
-  short_description: "Prototype to answer a design question"
+    display_name: "Prototype"
+    short_description: "Prototype to answer a design question"
diff --git a/.agents/skills/research/agents/openai.yaml b/.agents/skills/research/agents/openai.yaml
index e18b96ca..522a07c7 100644
--- a/.agents/skills/research/agents/openai.yaml
+++ b/.agents/skills/research/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Research"
-  short_description: "Research from high-trust sources"
+    display_name: "Research"
+    short_description: "Research from high-trust sources"
diff --git a/.agents/skills/resolving-merge-conflicts/agents/openai.yaml b/.agents/skills/resolving-merge-conflicts/agents/openai.yaml
index 331ffb9d..526afce8 100644
--- a/.agents/skills/resolving-merge-conflicts/agents/openai.yaml
+++ b/.agents/skills/resolving-merge-conflicts/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "Resolving Merge Conflicts"
-  short_description: "Resolve merge and rebase conflicts"
+    display_name: "Resolving Merge Conflicts"
+    short_description: "Resolve merge and rebase conflicts"
diff --git a/.agents/skills/setup-matt-pocock-skills/SKILL.md b/.agents/skills/setup-matt-pocock-skills/SKILL.md
index aecf8553..7f28e2fb 100644
--- a/.agents/skills/setup-matt-pocock-skills/SKILL.md
+++ b/.agents/skills/setup-matt-pocock-skills/SKILL.md
@@ -8,9 +8,9 @@ disable-model-invocation: true
 
 Scaffold the per-repo configuration that the engineering skills assume:
 
-- **Issue tracker** — where issues live (GitHub by default; local markdown is also supported out of the box)
-- **Triage labels** — the strings used for the five canonical triage roles
-- **Domain docs** — where `CONTEXT.md` and ADRs live, and the consumer rules for reading them
+-   **Issue tracker** — where issues live (GitHub by default; local markdown is also supported out of the box)
+-   **Triage labels** — the strings used for the five canonical triage roles
+-   **Domain docs** — where `CONTEXT.md` and ADRs live, and the consumer rules for reading them
 
 This is a prompt-driven skill, not a deterministic script. Explore, present what you found, confirm with the user, then write.
 
@@ -20,14 +20,14 @@ This is a prompt-driven skill, not a deterministic script. Explore, present what
 
 Look at the current repo to understand its starting state. Read whatever exists; don't assume:
 
-- `git remote -v` and `.git/config` — is this a GitHub repo? Which one?
-- `AGENTS.md` and `CLAUDE.md` at the repo root — does either exist? Is there already an `## Agent skills` section in either?
-- `CONTEXT.md` and `CONTEXT-MAP.md` at the repo root
-- `docs/adr/` and any `src/*/docs/adr/` directories
-- `docs/agents/` — does this skill's prior output already exist?
-- `.scratch/` — sign that a local-markdown issue tracker convention is already in use
-- Is the `triage` skill installed? (a `triage` skill folder alongside this one, or `triage` in your available skills.) This decides whether Section B runs at all.
-- Monorepo signals — a `pnpm-workspace.yaml`, a `workspaces` field in `package.json`, or a populated `packages/*` with its own `src/`. Present only in a genuinely large multi-package repo; their absence means single-context, which is almost every repo.
+-   `git remote -v` and `.git/config` — is this a GitHub repo? Which one?
+-   `AGENTS.md` and `CLAUDE.md` at the repo root — does either exist? Is there already an `## Agent skills` section in either?
+-   `CONTEXT.md` and `CONTEXT-MAP.md` at the repo root
+-   `docs/adr/` and any `src/*/docs/adr/` directories
+-   `docs/agents/` — does this skill's prior output already exist?
+-   `.scratch/` — sign that a local-markdown issue tracker convention is already in use
+-   Is the `triage` skill installed? (a `triage` skill folder alongside this one, or `triage` in your available skills.) This decides whether Section B runs at all.
+-   Monorepo signals — a `pnpm-workspace.yaml`, a `workspaces` field in `package.json`, or a populated `packages/*` with its own `src/`. Present only in a genuinely large multi-package repo; their absence means single-context, which is almost every repo.
 
 ### 2. Present findings and ask
 
@@ -41,10 +41,10 @@ Lead each section with the recommended answer so the user can accept it in a wor
 
 Default posture: these skills were designed for GitHub. If a `git remote` points at GitHub, propose that. If a `git remote` points at GitLab (`gitlab.com` or a self-hosted host), propose GitLab. Otherwise (or if the user prefers), offer:
 
-- **GitHub** — issues live in the repo's GitHub Issues (uses the `gh` CLI)
-- **GitLab** — issues live in the repo's GitLab Issues (uses the [`glab`](https://gitlab.com/gitlab-org/cli) CLI)
-- **Local markdown** — issues live as files under `.scratch/<feature>/` in this repo (good for solo projects or repos without a remote)
-- **Other** (Jira, Linear, etc.) — ask the user to describe the workflow in one paragraph; the skill will record it as freeform prose
+-   **GitHub** — issues live in the repo's GitHub Issues (uses the `gh` CLI)
+-   **GitLab** — issues live in the repo's GitLab Issues (uses the [`glab`](https://gitlab.com/gitlab-org/cli) CLI)
+-   **Local markdown** — issues live as files under `.scratch/<feature>/` in this repo (good for solo projects or repos without a remote)
+-   **Other** (Jira, Linear, etc.) — ask the user to describe the workflow in one paragraph; the skill will record it as freeform prose
 
 Record the choice in `docs/agents/issue-tracker.md`. The GitHub and GitLab templates carry a "PRs as a request surface" flag, defaulted **off** — leave it off and don't raise it; a user who wants external PRs in the triage queue can flip the flag in the file later.
 
@@ -64,8 +64,8 @@ Offer **multi-context** — a root `CONTEXT-MAP.md` pointing to per-context `CON
 
 Show the user a draft of:
 
-- The `## Agent skills` block to add to whichever of `CLAUDE.md` / `AGENTS.md` is being edited (see step 4 for selection rules)
-- The contents of `docs/agents/issue-tracker.md`, `docs/agents/domain.md`, and `docs/agents/triage-labels.md` (the last only when `triage` is installed)
+-   The `## Agent skills` block to add to whichever of `CLAUDE.md` / `AGENTS.md` is being edited (see step 4 for selection rules)
+-   The contents of `docs/agents/issue-tracker.md`, `docs/agents/domain.md`, and `docs/agents/triage-labels.md` (the last only when `triage` is installed)
 
 Let them edit before writing.
 
@@ -73,9 +73,9 @@ Let them edit before writing.
 
 **Pick the file to edit:**
 
-- If `CLAUDE.md` exists, edit it.
-- Else if `AGENTS.md` exists, edit it.
-- If neither exists, ask the user which one to create — don't pick for them.
+-   If `CLAUDE.md` exists, edit it.
+-   Else if `AGENTS.md` exists, edit it.
+-   If neither exists, ask the user which one to create — don't pick for them.
 
 Never create `AGENTS.md` when `CLAUDE.md` already exists (or vice versa) — always edit the one that's already there.
 
@@ -103,11 +103,11 @@ Include the `### Triage labels` sub-block, and write `docs/agents/triage-labels.
 
 Then write the docs files using the seed templates in this skill folder as a starting point:
 
-- [issue-tracker-github.md](./issue-tracker-github.md) — GitHub issue tracker
-- [issue-tracker-gitlab.md](./issue-tracker-gitlab.md) — GitLab issue tracker
-- [issue-tracker-local.md](./issue-tracker-local.md) — local-markdown issue tracker
-- [triage-labels.md](./triage-labels.md) — label mapping (only if `triage` is installed)
-- [domain.md](./domain.md) — domain doc consumer rules + layout
+-   [issue-tracker-github.md](./issue-tracker-github.md) — GitHub issue tracker
+-   [issue-tracker-gitlab.md](./issue-tracker-gitlab.md) — GitLab issue tracker
+-   [issue-tracker-local.md](./issue-tracker-local.md) — local-markdown issue tracker
+-   [triage-labels.md](./triage-labels.md) — label mapping (only if `triage` is installed)
+-   [domain.md](./domain.md) — domain doc consumer rules + layout
 
 For "other" issue trackers, write `docs/agents/issue-tracker.md` from scratch using the user's description.
 
diff --git a/.agents/skills/setup-matt-pocock-skills/agents/openai.yaml b/.agents/skills/setup-matt-pocock-skills/agents/openai.yaml
index 65a0da81..759ab593 100644
--- a/.agents/skills/setup-matt-pocock-skills/agents/openai.yaml
+++ b/.agents/skills/setup-matt-pocock-skills/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Setup Matt Pocock Skills"
-  short_description: "Configure a repo for the skills"
+    display_name: "Setup Matt Pocock Skills"
+    short_description: "Configure a repo for the skills"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/setup-matt-pocock-skills/domain.md b/.agents/skills/setup-matt-pocock-skills/domain.md
index b548c538..6cf60a27 100644
--- a/.agents/skills/setup-matt-pocock-skills/domain.md
+++ b/.agents/skills/setup-matt-pocock-skills/domain.md
@@ -4,9 +4,9 @@ How the engineering skills should consume this repo's domain documentation when
 
 ## Before exploring, read these
 
-- **`CONTEXT.md`** at the repo root, or
-- **`CONTEXT-MAP.md`** at the repo root if it exists — it points at one `CONTEXT.md` per context. Read each one relevant to the topic.
-- **`docs/adr/`** — read ADRs that touch the area you're about to work in. In multi-context repos, also check `src/<context>/docs/adr/` for context-scoped decisions.
+-   **`CONTEXT.md`** at the repo root, or
+-   **`CONTEXT-MAP.md`** at the repo root if it exists — it points at one `CONTEXT.md` per context. Read each one relevant to the topic.
+-   **`docs/adr/`** — read ADRs that touch the area you're about to work in. In multi-context repos, also check `src/<context>/docs/adr/` for context-scoped decisions.
 
 If any of these files don't exist, **proceed silently**. Don't flag their absence; don't suggest creating them upfront. The `/domain-modeling` skill (reached via `/grill-with-docs` and `/improve-codebase-architecture`) creates them lazily when terms or decisions actually get resolved.
 
diff --git a/.agents/skills/setup-matt-pocock-skills/issue-tracker-github.md b/.agents/skills/setup-matt-pocock-skills/issue-tracker-github.md
index 82cfbf5b..bd6df1de 100644
--- a/.agents/skills/setup-matt-pocock-skills/issue-tracker-github.md
+++ b/.agents/skills/setup-matt-pocock-skills/issue-tracker-github.md
@@ -4,12 +4,12 @@ Issues and PRDs for this repo live as GitHub issues. Use the `gh` CLI for all op
 
 ## Conventions
 
-- **Create an issue**: `gh issue create --title "..." --body "..."`. Use a heredoc for multi-line bodies.
-- **Read an issue**: `gh issue view <number> --comments`, filtering comments by `jq` and also fetching labels.
-- **List issues**: `gh issue list --state open --json number,title,body,labels,comments --jq '[.[] | {number, title, body, labels: [.labels[].name], comments: [.comments[].body]}]'` with appropriate `--label` and `--state` filters.
-- **Comment on an issue**: `gh issue comment <number> --body "..."`
-- **Apply / remove labels**: `gh issue edit <number> --add-label "..."` / `--remove-label "..."`
-- **Close**: `gh issue close <number> --comment "..."`
+-   **Create an issue**: `gh issue create --title "..." --body "..."`. Use a heredoc for multi-line bodies.
+-   **Read an issue**: `gh issue view <number> --comments`, filtering comments by `jq` and also fetching labels.
+-   **List issues**: `gh issue list --state open --json number,title,body,labels,comments --jq '[.[] | {number, title, body, labels: [.labels[].name], comments: [.comments[].body]}]'` with appropriate `--label` and `--state` filters.
+-   **Comment on an issue**: `gh issue comment <number> --body "..."`
+-   **Apply / remove labels**: `gh issue edit <number> --add-label "..."` / `--remove-label "..."`
+-   **Close**: `gh issue close <number> --comment "..."`
 
 Infer the repo from `git remote -v` — `gh` does this automatically when run inside a clone.
 
@@ -19,9 +19,9 @@ Infer the repo from `git remote -v` — `gh` does this automatically when run in
 
 When set to `yes`, PRs run through the same labels and states as issues, using the `gh pr` equivalents:
 
-- **Read a PR**: `gh pr view <number> --comments` and `gh pr diff <number>` for the diff.
-- **List external PRs for triage**: `gh pr list --state open --json number,title,body,labels,author,authorAssociation,comments` then keep only `authorAssociation` of `CONTRIBUTOR`, `FIRST_TIME_CONTRIBUTOR`, or `NONE` (drop `OWNER`/`MEMBER`/`COLLABORATOR`).
-- **Comment / label / close**: `gh pr comment`, `gh pr edit --add-label`/`--remove-label`, `gh pr close`.
+-   **Read a PR**: `gh pr view <number> --comments` and `gh pr diff <number>` for the diff.
+-   **List external PRs for triage**: `gh pr list --state open --json number,title,body,labels,author,authorAssociation,comments` then keep only `authorAssociation` of `CONTRIBUTOR`, `FIRST_TIME_CONTRIBUTOR`, or `NONE` (drop `OWNER`/`MEMBER`/`COLLABORATOR`).
+-   **Comment / label / close**: `gh pr comment`, `gh pr edit --add-label`/`--remove-label`, `gh pr close`.
 
 GitHub shares one number space across issues and PRs, so a bare `#42` may be either — resolve with `gh pr view 42` and fall back to `gh issue view 42`.
 
@@ -37,9 +37,9 @@ Run `gh issue view <number> --comments`.
 
 Used by `/wayfinder`. The **map** is a single issue with **child** issues as tickets.
 
-- **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `gh issue create --label wayfinder:map`.
-- **Child ticket**: an issue linked to the map as a GitHub sub-issue (`gh api` on the sub-issues endpoint). Where sub-issues aren't enabled, add the child to a task list in the map body and put `Part of #<map>` at the top of the child body. Labels: `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
-- **Blocking**: GitHub's **native issue dependencies** — the canonical, UI-visible representation. Add an edge with `gh api --method POST repos/<owner>/<repo>/issues/<child>/dependencies/blocked_by -F issue_id=<blocker-db-id>`, where `<blocker-db-id>` is the blocker's numeric **database id** (`gh api repos/<owner>/<repo>/issues/<n> --jq .id`, _not_ the `#number` or `node_id`). GitHub reports `issue_dependencies_summary.blocked_by` (open blockers only — the live gate). Where dependencies aren't available, fall back to a `Blocked by: #<n>, #<n>` line at the top of the child body. A ticket is unblocked when every blocker is closed.
-- **Frontier query**: list the map's open children (`gh issue list --state open`, scoped to the map's sub-issues / task list), drop any with an open blocker (`issue_dependencies_summary.blocked_by > 0`, or an open issue in the `Blocked by` line) or an assignee; first in map order wins.
-- **Claim**: `gh issue edit <n> --add-assignee @me` — the session's first write.
-- **Resolve**: `gh issue comment <n> --body "<answer>"`, then `gh issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
+-   **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `gh issue create --label wayfinder:map`.
+-   **Child ticket**: an issue linked to the map as a GitHub sub-issue (`gh api` on the sub-issues endpoint). Where sub-issues aren't enabled, add the child to a task list in the map body and put `Part of #<map>` at the top of the child body. Labels: `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
+-   **Blocking**: GitHub's **native issue dependencies** — the canonical, UI-visible representation. Add an edge with `gh api --method POST repos/<owner>/<repo>/issues/<child>/dependencies/blocked_by -F issue_id=<blocker-db-id>`, where `<blocker-db-id>` is the blocker's numeric **database id** (`gh api repos/<owner>/<repo>/issues/<n> --jq .id`, _not_ the `#number` or `node_id`). GitHub reports `issue_dependencies_summary.blocked_by` (open blockers only — the live gate). Where dependencies aren't available, fall back to a `Blocked by: #<n>, #<n>` line at the top of the child body. A ticket is unblocked when every blocker is closed.
+-   **Frontier query**: list the map's open children (`gh issue list --state open`, scoped to the map's sub-issues / task list), drop any with an open blocker (`issue_dependencies_summary.blocked_by > 0`, or an open issue in the `Blocked by` line) or an assignee; first in map order wins.
+-   **Claim**: `gh issue edit <n> --add-assignee @me` — the session's first write.
+-   **Resolve**: `gh issue comment <n> --body "<answer>"`, then `gh issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
diff --git a/.agents/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md b/.agents/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md
index 8a54714a..fadff4a1 100644
--- a/.agents/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md
+++ b/.agents/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md
@@ -4,13 +4,13 @@ Issues and PRDs for this repo live as GitLab issues. Use the [`glab`](https://gi
 
 ## Conventions
 
-- **Create an issue**: `glab issue create --title "..." --description "..."`. Use a heredoc for multi-line descriptions. Pass `--description -` to open an editor.
-- **Read an issue**: `glab issue view <number> --comments`. Use `-F json` for machine-readable output.
-- **List issues**: `glab issue list -F json` with appropriate `--label` filters.
-- **Comment on an issue**: `glab issue note <number> --message "..."`. GitLab calls comments "notes".
-- **Apply / remove labels**: `glab issue update <number> --label "..."` / `--unlabel "..."`. Multiple labels can be comma-separated or by repeating the flag.
-- **Close**: `glab issue close <number>`. `glab issue close` does not accept a closing comment, so post the explanation first with `glab issue note <number> --message "..."`, then close.
-- **Merge requests**: GitLab calls PRs "merge requests". Use `glab mr create`, `glab mr view`, `glab mr note`, etc. — the same shape as `gh pr ...` with `mr` in place of `pr` and `note`/`--message` in place of `comment`/`--body`.
+-   **Create an issue**: `glab issue create --title "..." --description "..."`. Use a heredoc for multi-line descriptions. Pass `--description -` to open an editor.
+-   **Read an issue**: `glab issue view <number> --comments`. Use `-F json` for machine-readable output.
+-   **List issues**: `glab issue list -F json` with appropriate `--label` filters.
+-   **Comment on an issue**: `glab issue note <number> --message "..."`. GitLab calls comments "notes".
+-   **Apply / remove labels**: `glab issue update <number> --label "..."` / `--unlabel "..."`. Multiple labels can be comma-separated or by repeating the flag.
+-   **Close**: `glab issue close <number>`. `glab issue close` does not accept a closing comment, so post the explanation first with `glab issue note <number> --message "..."`, then close.
+-   **Merge requests**: GitLab calls PRs "merge requests". Use `glab mr create`, `glab mr view`, `glab mr note`, etc. — the same shape as `gh pr ...` with `mr` in place of `pr` and `note`/`--message` in place of `comment`/`--body`.
 
 Infer the repo from `git remote -v` — `glab` does this automatically when run inside a clone.
 
@@ -20,9 +20,9 @@ Infer the repo from `git remote -v` — `glab` does this automatically when run
 
 When set to `yes`, MRs run through the same labels and states as issues, using the `glab mr` equivalents:
 
-- **Read an MR**: `glab mr view <number> --comments` and `glab mr diff <number>` for the diff.
-- **List external MRs for triage**: `glab mr list -F json`, then keep only MRs whose author is not a project member/owner (a contributor's MR, not a maintainer's in-flight work).
-- **Comment / label / close**: `glab mr note`, `glab mr update --label`/`--unlabel`, `glab mr close`.
+-   **Read an MR**: `glab mr view <number> --comments` and `glab mr diff <number>` for the diff.
+-   **List external MRs for triage**: `glab mr list -F json`, then keep only MRs whose author is not a project member/owner (a contributor's MR, not a maintainer's in-flight work).
+-   **Comment / label / close**: `glab mr note`, `glab mr update --label`/`--unlabel`, `glab mr close`.
 
 Unlike GitHub, GitLab numbers issues and MRs separately, so `#42` is unambiguous once you know which surface the maintainer means.
 
@@ -38,9 +38,9 @@ Run `glab issue view <number> --comments`.
 
 Used by `/wayfinder`. The **map** is a single issue with **child** issues as tickets.
 
-- **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `glab issue create --label wayfinder:map`. (On GitLab tiers with native epics, an epic may hold the map instead; a labelled issue works everywhere.)
-- **Child ticket**: an issue carrying `Part of #<map>` at the top of its description and labels `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
-- **Blocking**: GitLab's **native blocking link** — the canonical, UI-visible representation. Add it with the `/blocked_by #<n>` quick action, posted as a note (`glab issue note <child> --message "/blocked_by #<blocker>"`). Native blocking links are a Premium/Ultimate feature; on the free tier (or where unavailable) fall back to a `Blocked by: #<n>, #<n>` line at the top of the description. A ticket is unblocked when every blocker is closed.
-- **Frontier query**: `glab issue list -F json` scoped to the map's children, drop any with an open blocker — a native `blocked_by` link to an open issue (`glab api projects/:id/issues/:iid/links`), or an open issue in the `Blocked by` line — or an assignee; first in map order wins.
-- **Claim**: `glab issue update <n> --assignee @me` — the session's first write.
-- **Resolve**: `glab issue note <n> --message "<answer>"`, then `glab issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
+-   **Map**: a single issue labelled `wayfinder:map`, holding the Notes / Decisions-so-far / Fog body. `glab issue create --label wayfinder:map`. (On GitLab tiers with native epics, an epic may hold the map instead; a labelled issue works everywhere.)
+-   **Child ticket**: an issue carrying `Part of #<map>` at the top of its description and labels `wayfinder:<type>` (`research`/`prototype`/`grilling`/`task`). Once claimed, the ticket is assigned to the driving dev.
+-   **Blocking**: GitLab's **native blocking link** — the canonical, UI-visible representation. Add it with the `/blocked_by #<n>` quick action, posted as a note (`glab issue note <child> --message "/blocked_by #<blocker>"`). Native blocking links are a Premium/Ultimate feature; on the free tier (or where unavailable) fall back to a `Blocked by: #<n>, #<n>` line at the top of the description. A ticket is unblocked when every blocker is closed.
+-   **Frontier query**: `glab issue list -F json` scoped to the map's children, drop any with an open blocker — a native `blocked_by` link to an open issue (`glab api projects/:id/issues/:iid/links`), or an open issue in the `Blocked by` line — or an assignee; first in map order wins.
+-   **Claim**: `glab issue update <n> --assignee @me` — the session's first write.
+-   **Resolve**: `glab issue note <n> --message "<answer>"`, then `glab issue close <n>`, then append a context pointer (gist + link) to the map's Decisions-so-far.
diff --git a/.agents/skills/setup-matt-pocock-skills/issue-tracker-local.md b/.agents/skills/setup-matt-pocock-skills/issue-tracker-local.md
index 6b124b36..044850bf 100644
--- a/.agents/skills/setup-matt-pocock-skills/issue-tracker-local.md
+++ b/.agents/skills/setup-matt-pocock-skills/issue-tracker-local.md
@@ -4,11 +4,11 @@ Issues and specs (you may know a spec as a PRD) for this repo live as markdown f
 
 ## Conventions
 
-- One feature per directory: `.scratch/<feature-slug>/`
-- The spec is `.scratch/<feature-slug>/spec.md`
-- Implementation issues are one file per ticket at `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01` — never a single combined tickets file
-- Triage state is recorded as a `Status:` line near the top of each issue file (see `triage-labels.md` for the role strings)
-- Comments and conversation history append to the bottom of the file under a `## Comments` heading
+-   One feature per directory: `.scratch/<feature-slug>/`
+-   The spec is `.scratch/<feature-slug>/spec.md`
+-   Implementation issues are one file per ticket at `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01` — never a single combined tickets file
+-   Triage state is recorded as a `Status:` line near the top of each issue file (see `triage-labels.md` for the role strings)
+-   Comments and conversation history append to the bottom of the file under a `## Comments` heading
 
 ## When a skill says "publish to the issue tracker"
 
@@ -22,9 +22,9 @@ Read the file at the referenced path. The user will normally pass the path or th
 
 Used by `/wayfinder`. The **map** is a file with one **child** file per ticket.
 
-- **Map**: `.scratch/<effort>/map.md` — the Notes / Decisions-so-far / Fog body.
-- **Child ticket**: `.scratch/<effort>/issues/NN-<slug>.md`, numbered from `01`, with the question in the body. A `Type:` line records the ticket type (`research`/`prototype`/`grilling`/`task`); a `Status:` line records `claimed`/`resolved`.
-- **Blocking**: a `Blocked by: NN, NN` line near the top. A ticket is unblocked when every file it lists is `resolved`.
-- **Frontier**: scan `.scratch/<effort>/issues/` for files that are open, unblocked, and unclaimed; first by number wins.
-- **Claim**: set `Status: claimed` and save before any work.
-- **Resolve**: append the answer under an `## Answer` heading, set `Status: resolved`, then append a context pointer (gist + link) to the map's Decisions-so-far in `map.md`.
+-   **Map**: `.scratch/<effort>/map.md` — the Notes / Decisions-so-far / Fog body.
+-   **Child ticket**: `.scratch/<effort>/issues/NN-<slug>.md`, numbered from `01`, with the question in the body. A `Type:` line records the ticket type (`research`/`prototype`/`grilling`/`task`); a `Status:` line records `claimed`/`resolved`.
+-   **Blocking**: a `Blocked by: NN, NN` line near the top. A ticket is unblocked when every file it lists is `resolved`.
+-   **Frontier**: scan `.scratch/<effort>/issues/` for files that are open, unblocked, and unclaimed; first by number wins.
+-   **Claim**: set `Status: claimed` and save before any work.
+-   **Resolve**: append the answer under an `## Answer` heading, set `Status: resolved`, then append a context pointer (gist + link) to the map's Decisions-so-far in `map.md`.
diff --git a/.agents/skills/tdd/SKILL.md b/.agents/skills/tdd/SKILL.md
index 9a2e1d2a..c17621c2 100644
--- a/.agents/skills/tdd/SKILL.md
+++ b/.agents/skills/tdd/SKILL.md
@@ -25,12 +25,12 @@ Ask: "What's the public interface, and which seams should we test?"
 
 ## Anti-patterns
 
-- **Implementation-coupled** — mocks internal collaborators, tests private methods, or verifies through a side channel (querying the database instead of using the interface). The tell: the test breaks when you refactor but behavior hasn't changed.
-- **Tautological** — the assertion recomputes the expected value the way the code does (`expect(add(a, b)).toBe(a + b)`, a snapshot derived by hand the same way, a constant asserted equal to itself), so it passes by construction and can never disagree with the code. Expected values must come from an independent source of truth — a known-good literal, a worked example, the spec.
-- **Horizontal slicing** — writing all tests first, then all implementation. Bulk tests verify _imagined_ behavior: you test the _shape_ of things rather than user-facing behavior, the tests go insensitive to real changes, and you commit to test structure before understanding the implementation. Work in **vertical slices** instead — one test → one implementation → repeat, each test a **tracer bullet** that responds to what the last cycle taught you.
+-   **Implementation-coupled** — mocks internal collaborators, tests private methods, or verifies through a side channel (querying the database instead of using the interface). The tell: the test breaks when you refactor but behavior hasn't changed.
+-   **Tautological** — the assertion recomputes the expected value the way the code does (`expect(add(a, b)).toBe(a + b)`, a snapshot derived by hand the same way, a constant asserted equal to itself), so it passes by construction and can never disagree with the code. Expected values must come from an independent source of truth — a known-good literal, a worked example, the spec.
+-   **Horizontal slicing** — writing all tests first, then all implementation. Bulk tests verify _imagined_ behavior: you test the _shape_ of things rather than user-facing behavior, the tests go insensitive to real changes, and you commit to test structure before understanding the implementation. Work in **vertical slices** instead — one test → one implementation → repeat, each test a **tracer bullet** that responds to what the last cycle taught you.
 
 ## Rules of the loop
 
-- **Red before green.** Write the failing test first, then only enough code to pass it. Don't anticipate future tests or add speculative features.
-- **One slice at a time.** One seam, one test, one minimal implementation per cycle.
-- **Refactoring is not part of the loop.** It belongs to the review stage (see the `code-review` skill), not the red → green implementation cycle.
+-   **Red before green.** Write the failing test first, then only enough code to pass it. Don't anticipate future tests or add speculative features.
+-   **One slice at a time.** One seam, one test, one minimal implementation per cycle.
+-   **Refactoring is not part of the loop.** It belongs to the review stage (see the `code-review` skill), not the red → green implementation cycle.
diff --git a/.agents/skills/tdd/agents/openai.yaml b/.agents/skills/tdd/agents/openai.yaml
index 651b838a..ed358377 100644
--- a/.agents/skills/tdd/agents/openai.yaml
+++ b/.agents/skills/tdd/agents/openai.yaml
@@ -1,3 +1,3 @@
 interface:
-  display_name: "TDD"
-  short_description: "Test-driven red-green-refactor"
+    display_name: "TDD"
+    short_description: "Test-driven red-green-refactor"
diff --git a/.agents/skills/tdd/mocking.md b/.agents/skills/tdd/mocking.md
index 71cbfee6..3eadf4a1 100644
--- a/.agents/skills/tdd/mocking.md
+++ b/.agents/skills/tdd/mocking.md
@@ -2,16 +2,16 @@
 
 Mock at **system boundaries** only:
 
-- External APIs (payment, email, etc.)
-- Databases (sometimes - prefer test DB)
-- Time/randomness
-- File system (sometimes)
+-   External APIs (payment, email, etc.)
+-   Databases (sometimes - prefer test DB)
+-   Time/randomness
+-   File system (sometimes)
 
 Don't mock:
 
-- Your own classes/modules
-- Internal collaborators
-- Anything you control
+-   Your own classes/modules
+-   Internal collaborators
+-   Anything you control
 
 ## Designing for Mockability
 
@@ -24,13 +24,13 @@ Pass external dependencies in rather than creating them internally:
 ```typescript
 // Easy to mock
 function processPayment(order, paymentClient) {
-  return paymentClient.charge(order.total);
+	return paymentClient.charge(order.total);
 }
 
 // Hard to mock
 function processPayment(order) {
-  const client = new StripeClient(process.env.STRIPE_KEY);
-  return client.charge(order.total);
+	const client = new StripeClient(process.env.STRIPE_KEY);
+	return client.charge(order.total);
 }
 ```
 
@@ -41,19 +41,20 @@ Create specific functions for each external operation instead of one generic fun
 ```typescript
 // GOOD: Each function is independently mockable
 const api = {
-  getUser: (id) => fetch(`/users/${id}`),
-  getOrders: (userId) => fetch(`/users/${userId}/orders`),
-  createOrder: (data) => fetch('/orders', { method: 'POST', body: data }),
+	getUser: (id) => fetch(`/users/${id}`),
+	getOrders: (userId) => fetch(`/users/${userId}/orders`),
+	createOrder: (data) => fetch("/orders", { method: "POST", body: data }),
 };
 
 // BAD: Mocking requires conditional logic inside the mock
 const api = {
-  fetch: (endpoint, options) => fetch(endpoint, options),
+	fetch: (endpoint, options) => fetch(endpoint, options),
 };
 ```
 
 The SDK approach means:
-- Each mock returns one specific shape
-- No conditional logic in test setup
-- Easier to see which endpoints a test exercises
-- Type safety per endpoint
+
+-   Each mock returns one specific shape
+-   No conditional logic in test setup
+-   Easier to see which endpoints a test exercises
+-   Type safety per endpoint
diff --git a/.agents/skills/tdd/tests.md b/.agents/skills/tdd/tests.md
index 7ab86479..820c77c1 100644
--- a/.agents/skills/tdd/tests.md
+++ b/.agents/skills/tdd/tests.md
@@ -7,20 +7,20 @@
 ```typescript
 // GOOD: Tests observable behavior
 test("user can checkout with valid cart", async () => {
-  const cart = createCart();
-  cart.add(product);
-  const result = await checkout(cart, paymentMethod);
-  expect(result.status).toBe("confirmed");
+	const cart = createCart();
+	cart.add(product);
+	const result = await checkout(cart, paymentMethod);
+	expect(result.status).toBe("confirmed");
 });
 ```
 
 Characteristics:
 
-- Tests behavior users/callers care about
-- Uses public API only
-- Survives internal refactors
-- Describes WHAT, not HOW
-- One logical assertion per test
+-   Tests behavior users/callers care about
+-   Uses public API only
+-   Survives internal refactors
+-   Describes WHAT, not HOW
+-   One logical assertion per test
 
 ## Bad Tests
 
@@ -29,34 +29,34 @@ Characteristics:
 ```typescript
 // BAD: Tests implementation details
 test("checkout calls paymentService.process", async () => {
-  const mockPayment = jest.mock(paymentService);
-  await checkout(cart, payment);
-  expect(mockPayment.process).toHaveBeenCalledWith(cart.total);
+	const mockPayment = jest.mock(paymentService);
+	await checkout(cart, payment);
+	expect(mockPayment.process).toHaveBeenCalledWith(cart.total);
 });
 ```
 
 Red flags:
 
-- Mocking internal collaborators
-- Testing private methods
-- Asserting on call counts/order
-- Test breaks when refactoring without behavior change
-- Test name describes HOW not WHAT
-- Verifying through external means instead of interface
+-   Mocking internal collaborators
+-   Testing private methods
+-   Asserting on call counts/order
+-   Test breaks when refactoring without behavior change
+-   Test name describes HOW not WHAT
+-   Verifying through external means instead of interface
 
 ```typescript
 // BAD: Bypasses interface to verify
 test("createUser saves to database", async () => {
-  await createUser({ name: "Alice" });
-  const row = await db.query("SELECT * FROM users WHERE name = ?", ["Alice"]);
-  expect(row).toBeDefined();
+	await createUser({ name: "Alice" });
+	const row = await db.query("SELECT * FROM users WHERE name = ?", ["Alice"]);
+	expect(row).toBeDefined();
 });
 
 // GOOD: Verifies through interface
 test("createUser makes user retrievable", async () => {
-  const user = await createUser({ name: "Alice" });
-  const retrieved = await getUser(user.id);
-  expect(retrieved.name).toBe("Alice");
+	const user = await createUser({ name: "Alice" });
+	const retrieved = await getUser(user.id);
+	expect(retrieved.name).toBe("Alice");
 });
 ```
 
@@ -65,13 +65,13 @@ test("createUser makes user retrievable", async () => {
 ```typescript
 // BAD: Expected value is recomputed the way the code computes it
 test("calculateTotal sums line items", () => {
-  const items = [{ price: 10 }, { price: 5 }];
-  const expected = items.reduce((sum, i) => sum + i.price, 0);
-  expect(calculateTotal(items)).toBe(expected);
+	const items = [{ price: 10 }, { price: 5 }];
+	const expected = items.reduce((sum, i) => sum + i.price, 0);
+	expect(calculateTotal(items)).toBe(expected);
 });
 
 // GOOD: Expected value is an independent, known literal
 test("calculateTotal sums line items", () => {
-  expect(calculateTotal([{ price: 10 }, { price: 5 }])).toBe(15);
+	expect(calculateTotal([{ price: 10 }, { price: 5 }])).toBe(15);
 });
 ```
diff --git a/.agents/skills/teach/GLOSSARY-FORMAT.md b/.agents/skills/teach/GLOSSARY-FORMAT.md
index 9cae84c4..9b78fe03 100644
--- a/.agents/skills/teach/GLOSSARY-FORMAT.md
+++ b/.agents/skills/teach/GLOSSARY-FORMAT.md
@@ -26,10 +26,10 @@ _Avoid_: Effort score, intensity rating
 
 ## Rules
 
-- **Add a term only when the user understands it.** The glossary is a record of compressed knowledge, not a dictionary the user reads to learn. If the user has just been introduced to a concept, wait until they can use it correctly before promoting it here.
-- **Be opinionated.** When several words exist for the same concept, pick the best one and list the rest as aliases to avoid. This is how language compresses.
-- **Keep definitions tight.** One or two sentences. Define what the term IS, not what it does or how to do it.
-- **Use the glossary's own terms inside definitions.** Once a term is in the glossary, prefer it everywhere — including inside other definitions. This is what makes complex terms easier to grasp later.
-- **Group under subheadings** when natural clusters emerge (e.g. `## Anatomy`, `## Programming`). A flat list is fine when terms cohere.
-- **Flag ambiguities explicitly.** If a term is used loosely in the wider field, note the resolution: "In this workspace, 'set' always means a working set — warm-ups are tracked separately."
-- **Revise as understanding deepens.** A definition the user wrote in week one may be wrong by week six. Update in place; do not leave stale entries.
+-   **Add a term only when the user understands it.** The glossary is a record of compressed knowledge, not a dictionary the user reads to learn. If the user has just been introduced to a concept, wait until they can use it correctly before promoting it here.
+-   **Be opinionated.** When several words exist for the same concept, pick the best one and list the rest as aliases to avoid. This is how language compresses.
+-   **Keep definitions tight.** One or two sentences. Define what the term IS, not what it does or how to do it.
+-   **Use the glossary's own terms inside definitions.** Once a term is in the glossary, prefer it everywhere — including inside other definitions. This is what makes complex terms easier to grasp later.
+-   **Group under subheadings** when natural clusters emerge (e.g. `## Anatomy`, `## Programming`). A flat list is fine when terms cohere.
+-   **Flag ambiguities explicitly.** If a term is used loosely in the wider field, note the resolution: "In this workspace, 'set' always means a working set — warm-ups are tracked separately."
+-   **Revise as understanding deepens.** A definition the user wrote in week one may be wrong by week six. Update in place; do not leave stale entries.
diff --git a/.agents/skills/teach/LEARNING-RECORD-FORMAT.md b/.agents/skills/teach/LEARNING-RECORD-FORMAT.md
index 2faa7c98..f1858589 100644
--- a/.agents/skills/teach/LEARNING-RECORD-FORMAT.md
+++ b/.agents/skills/teach/LEARNING-RECORD-FORMAT.md
@@ -18,9 +18,9 @@ That is the whole format. A learning record can be a single paragraph. The value
 
 Only include these when they add genuine value. Most records won't need them.
 
-- **Status** frontmatter (`active | superseded by LR-NNNN`) — useful when an earlier understanding turns out to be wrong and is replaced.
-- **Evidence** — how the user demonstrated the understanding (a question answered, an exercise completed, prior experience cited). Useful when the claim might be revisited.
-- **Implications** — what this unlocks or rules out for future sessions. Worth recording when non-obvious.
+-   **Status** frontmatter (`active | superseded by LR-NNNN`) — useful when an earlier understanding turns out to be wrong and is replaced.
+-   **Evidence** — how the user demonstrated the understanding (a question answered, an exercise completed, prior experience cited). Useful when the claim might be revisited.
+-   **Implications** — what this unlocks or rules out for future sessions. Worth recording when non-obvious.
 
 ## Numbering
 
@@ -37,9 +37,9 @@ Write one when any of these is true:
 
 ### What does _not_ qualify
 
-- Material that was merely covered. Coverage is not learning. Wait for evidence.
-- Anything already captured tersely in [[GLOSSARY.md]] as a term definition. Don't duplicate.
-- Session-by-session activity logs. Learning records are not a journal — they are decision-grade insights.
+-   Material that was merely covered. Coverage is not learning. Wait for evidence.
+-   Anything already captured tersely in [[GLOSSARY.md]] as a term definition. Don't duplicate.
+-   Session-by-session activity logs. Learning records are not a journal — they are decision-grade insights.
 
 ## Supersession
 
diff --git a/.agents/skills/teach/MISSION-FORMAT.md b/.agents/skills/teach/MISSION-FORMAT.md
index 5dac184a..09f71006 100644
--- a/.agents/skills/teach/MISSION-FORMAT.md
+++ b/.agents/skills/teach/MISSION-FORMAT.md
@@ -8,24 +8,28 @@
 # Mission: {Topic}
 
 ## Why
+
 {1-3 sentences. The concrete real-world goal the user is chasing. What changes in their life or work when they have this skill? Avoid abstract framings like "to understand X" — push for the underlying outcome.}
 
 ## Success looks like
-- {A specific, observable thing the user will be able to do}
-- {Another specific thing}
-- {…}
+
+-   {A specific, observable thing the user will be able to do}
+-   {Another specific thing}
+-   {…}
 
 ## Constraints
-- {Time, budget, prior commitments, learning preferences, anything that bounds the approach}
+
+-   {Time, budget, prior commitments, learning preferences, anything that bounds the approach}
 
 ## Out of scope
-- {Adjacent topics the user explicitly does not want to chase right now — protects the zone of proximal development}
+
+-   {Adjacent topics the user explicitly does not want to chase right now — protects the zone of proximal development}
 ```
 
 ## Rules
 
-- **One mission per workspace.** If the user wants to learn two unrelated things, that is two workspaces.
-- **Concrete over abstract.** "Run a half marathon by October" beats "get fitter." "Ship a Rust CLI to my team" beats "learn Rust."
-- **Push back on vagueness.** If the user cannot articulate why, interview them before writing anything. A bad mission is worse than no mission.
-- **Revise when reality shifts.** Missions change. When the user's goal moves, update this file — don't leave a stale mission steering future sessions.
-- **Keep it short.** If `MISSION.md` runs past a screen, it has stopped being a compass and started being a plan.
+-   **One mission per workspace.** If the user wants to learn two unrelated things, that is two workspaces.
+-   **Concrete over abstract.** "Run a half marathon by October" beats "get fitter." "Ship a Rust CLI to my team" beats "learn Rust."
+-   **Push back on vagueness.** If the user cannot articulate why, interview them before writing anything. A bad mission is worse than no mission.
+-   **Revise when reality shifts.** Missions change. When the user's goal moves, update this file — don't leave a stale mission steering future sessions.
+-   **Keep it short.** If `MISSION.md` runs past a screen, it has stopped being a compass and started being a plan.
diff --git a/.agents/skills/teach/RESOURCES-FORMAT.md b/.agents/skills/teach/RESOURCES-FORMAT.md
index c94aac6a..0e9925de 100644
--- a/.agents/skills/teach/RESOURCES-FORMAT.md
+++ b/.agents/skills/teach/RESOURCES-FORMAT.md
@@ -9,24 +9,24 @@
 
 ## Knowledge
 
-- [Book: _The Science and Practice of Strength Training_ — Zatsiorsky & Kraemer](https://example.com)
-  Foundational text on programming and adaptation. Use for: anything to do with periodisation, recovery, intensity zones.
-- [Article: "How Much Should I Train?" — Greg Nuckols (Stronger By Science)](https://example.com)
-  Evidence-based review of volume landmarks. Use for: weekly set targets per muscle group.
+-   [Book: _The Science and Practice of Strength Training_ — Zatsiorsky & Kraemer](https://example.com)
+    Foundational text on programming and adaptation. Use for: anything to do with periodisation, recovery, intensity zones.
+-   [Article: "How Much Should I Train?" — Greg Nuckols (Stronger By Science)](https://example.com)
+    Evidence-based review of volume landmarks. Use for: weekly set targets per muscle group.
 
 ## Wisdom (Communities)
 
-- [r/weightroom](https://reddit.com/r/weightroom)
-  High-signal subreddit, moderated against bro-science. Use for: programme critique, plateau troubleshooting.
-- Local: Tuesday strength class at {gym name}
-  Use for: real-time coaching feedback on lifts.
+-   [r/weightroom](https://reddit.com/r/weightroom)
+    High-signal subreddit, moderated against bro-science. Use for: programme critique, plateau troubleshooting.
+-   Local: Tuesday strength class at {gym name}
+    Use for: real-time coaching feedback on lifts.
 ```
 
 ## Rules
 
-- **High-trust only.** Prefer primary sources, recognised experts, peer-reviewed work, and communities with strong moderation. If a resource is marketing dressed as education, leave it out.
-- **Annotate every entry.** A bare link is useless in three months. Add one line: what it covers and when to reach for it.
-- **Group by Knowledge / Wisdom.** Mirrors the philosophy in [SKILL.md](./SKILL.md). It is fine for a resource to appear in only one group.
-- **Surface gaps explicitly.** If no good resource exists for an area the mission needs, write a `## Gaps` section listing what is missing. This drives future search.
-- **Prune ruthlessly.** A resource that turned out to be wrong, shallow, or off-mission should be removed, not buried. Better five sharp sources than thirty mediocre ones.
-- **Record community preferences.** If the user has opted out of joining communities, note it here so future sessions don't keep proposing them.
+-   **High-trust only.** Prefer primary sources, recognised experts, peer-reviewed work, and communities with strong moderation. If a resource is marketing dressed as education, leave it out.
+-   **Annotate every entry.** A bare link is useless in three months. Add one line: what it covers and when to reach for it.
+-   **Group by Knowledge / Wisdom.** Mirrors the philosophy in [SKILL.md](./SKILL.md). It is fine for a resource to appear in only one group.
+-   **Surface gaps explicitly.** If no good resource exists for an area the mission needs, write a `## Gaps` section listing what is missing. This drives future search.
+-   **Prune ruthlessly.** A resource that turned out to be wrong, shallow, or off-mission should be removed, not buried. Better five sharp sources than thirty mediocre ones.
+-   **Record community preferences.** If the user has opted out of joining communities, note it here so future sessions don't keep proposing them.
diff --git a/.agents/skills/teach/SKILL.md b/.agents/skills/teach/SKILL.md
index b1603e5a..6cc7bfbf 100644
--- a/.agents/skills/teach/SKILL.md
+++ b/.agents/skills/teach/SKILL.md
@@ -11,21 +11,21 @@ The user has asked you to teach them something. This is a stateful request - the
 
 Treat the current directory as a teaching workspace. The state of their learning is captured in this directory in several files:
 
-- `MISSION.md`: A document capturing the _reason_ the user is interested in the topic. This should be used to ground all teaching. Use the format in [MISSION-FORMAT.md](./MISSION-FORMAT.md).
-- `./reference/*.html`: A directory of reference materials. These are the compressed learnings from the lessons - cheat sheets, reference algorithms, syntax, yoga poses, glossaries. They are the raw units of learning. They should be beautiful documents which print out well, and are designed for quick reference.
-- `RESOURCES.md`: A list of resources which can be explored to ground your teaching in contextual knowledge, or to acquire knowledge and wisdom. Use the format in [RESOURCES-FORMAT.md](./RESOURCES-FORMAT.md).
-- `./learning-records/*.md`: A directory of learning records, which capture what the user has learned. These are loosely equivalent to architectural decision records in software development - they capture non-obvious lessons and key insights that may need to be revised later, or drive future sessions. These should be used to calculate the zone of proximal development. They are titled `0001-<dash-case-name>.md`, where the number increments each time. Use the format in [LEARNING-RECORD-FORMAT.md](./LEARNING-RECORD-FORMAT.md).
-- `./lessons/*.html`: A directory of lessons. A **lesson** is a single, self-contained HTML output that teaches one tightly-scoped thing tied to the mission. This is the primary unit of teaching in this workspace.
-- `./assets/*`: Reusable **components** shared across lessons. See [Assets](#assets).
-- `NOTES.md`: A scratchpad for you to jot down user preferences, or working notes.
+-   `MISSION.md`: A document capturing the _reason_ the user is interested in the topic. This should be used to ground all teaching. Use the format in [MISSION-FORMAT.md](./MISSION-FORMAT.md).
+-   `./reference/*.html`: A directory of reference materials. These are the compressed learnings from the lessons - cheat sheets, reference algorithms, syntax, yoga poses, glossaries. They are the raw units of learning. They should be beautiful documents which print out well, and are designed for quick reference.
+-   `RESOURCES.md`: A list of resources which can be explored to ground your teaching in contextual knowledge, or to acquire knowledge and wisdom. Use the format in [RESOURCES-FORMAT.md](./RESOURCES-FORMAT.md).
+-   `./learning-records/*.md`: A directory of learning records, which capture what the user has learned. These are loosely equivalent to architectural decision records in software development - they capture non-obvious lessons and key insights that may need to be revised later, or drive future sessions. These should be used to calculate the zone of proximal development. They are titled `0001-<dash-case-name>.md`, where the number increments each time. Use the format in [LEARNING-RECORD-FORMAT.md](./LEARNING-RECORD-FORMAT.md).
+-   `./lessons/*.html`: A directory of lessons. A **lesson** is a single, self-contained HTML output that teaches one tightly-scoped thing tied to the mission. This is the primary unit of teaching in this workspace.
+-   `./assets/*`: Reusable **components** shared across lessons. See [Assets](#assets).
+-   `NOTES.md`: A scratchpad for you to jot down user preferences, or working notes.
 
 ## Philosophy
 
 To learn at a deep level, the user needs three things:
 
-- **Knowledge**, captured from high-quality, high-trust resources
-- **Skills**, acquired through highly-relevant interactive lessons devised by you, based on the knowledge
-- **Wisdom**, which comes from interacting with other learners and practitioners
+-   **Knowledge**, captured from high-quality, high-trust resources
+-   **Skills**, acquired through highly-relevant interactive lessons devised by you, based on the knowledge
+-   **Wisdom**, which comes from interacting with other learners and practitioners
 
 Before the `RESOURCES.md` is well-populated, your focus should be to find high-quality resources which will help the user acquire knowledge. Never trust your parametric knowledge.
 
@@ -35,14 +35,14 @@ Some topics may require more skills than knowledge. Learning more about theoreti
 
 You should be careful to split between two types of learning:
 
-- **Fluency strength**: in-the-moment retrieval of knowledge
-- **Storage strength**: long-term retention of knowledge
+-   **Fluency strength**: in-the-moment retrieval of knowledge
+-   **Storage strength**: long-term retention of knowledge
 
 Fluency can give the user an illusory sense of mastery, but storage strength is the real goal. Try to design lessons which build long-term retention by desirable difficulty:
 
-- Using retrieval practice (recall from memory)
-- Spacing (distributing practice over time)
-- Interleaving (mixing up different but related topics in practice - for skills practice only)
+-   Using retrieval practice (recall from memory)
+-   Spacing (distributing practice over time)
+-   Interleaving (mixing up different but related topics in practice - for skills practice only)
 
 ## Lessons
 
@@ -84,9 +84,9 @@ Each lesson, the user should always feel as if they are being challenged 'just e
 
 The user may specify an exact thing they want to learn. If they don't, figure out their zone of proximal development by:
 
-- Reading their `learning-records`
-- Figuring out the right thing to teach them based on their mission
-- Teach the most relevant thing that fits in their zone of proximal development
+-   Reading their `learning-records`
+-   Figuring out the right thing to teach them based on their mission
+-   Teach the most relevant thing that fits in their zone of proximal development
 
 ## Knowledge
 
@@ -102,8 +102,8 @@ If knowledge is all about acquisition, skills are about durability and flexibili
 
 For skill acquisition, difficulty is the tool. Effortful retrieval is what builds storage strength. Skills should be taught through interactive lessons. There are several tools at your disposal:
 
-- Interactive lessons, using quizzes and light in-browser tasks
-- Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)
+-   Interactive lessons, using quizzes and light in-browser tasks
+-   Lessons which guide the user through a list of real-world steps to take (for instance, yoga poses)
 
 Each of these should be based on a **feedback loop**, where the user receives feedback on their performance. This feedback loop should be as tight as possible, giving feedback immediately - and ideally automatically.
 
@@ -127,11 +127,11 @@ Lessons will rarely be revisited later - reference documents will be. They shoul
 
 Some learning topics lend themselves to reference:
 
-- Syntax and code snippets for programming
-- Algorithms and flowcharts for processes
-- Yoga poses and sequences for yoga
-- Exercises and routines for fitness
-- Glossaries for any topic with its own nomenclature
+-   Syntax and code snippets for programming
+-   Algorithms and flowcharts for processes
+-   Yoga poses and sequences for yoga
+-   Exercises and routines for fitness
+-   Glossaries for any topic with its own nomenclature
 
 Glossaries, in particular, are an essential reference. Once one is created, it should be adhered to in every lesson.
 
diff --git a/.agents/skills/teach/agents/openai.yaml b/.agents/skills/teach/agents/openai.yaml
index 3452a850..70cba1fc 100644
--- a/.agents/skills/teach/agents/openai.yaml
+++ b/.agents/skills/teach/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Teach"
-  short_description: "Learn a concept in a guided workspace"
+    display_name: "Teach"
+    short_description: "Learn a concept in a guided workspace"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/to-spec/SKILL.md b/.agents/skills/to-spec/SKILL.md
index f3cca8d3..967fa55d 100644
--- a/.agents/skills/to-spec/SKILL.md
+++ b/.agents/skills/to-spec/SKILL.md
@@ -44,13 +44,13 @@ This list of user stories should be extremely extensive and cover all aspects of
 
 A list of implementation decisions that were made. This can include:
 
-- The modules that will be built/modified
-- The interfaces of those modules that will be modified
-- Technical clarifications from the developer
-- Architectural decisions
-- Schema changes
-- API contracts
-- Specific interactions
+-   The modules that will be built/modified
+-   The interfaces of those modules that will be modified
+-   Technical clarifications from the developer
+-   Architectural decisions
+-   Schema changes
+-   API contracts
+-   Specific interactions
 
 Do NOT include specific file paths or code snippets. They may end up being outdated very quickly.
 
@@ -60,9 +60,9 @@ Exception: if a prototype produced a snippet that encodes a decision more precis
 
 A list of testing decisions that were made. Include:
 
-- A description of what makes a good test (only test external behavior, not implementation details)
-- Which modules will be tested
-- Prior art for the tests (i.e. similar types of tests in the codebase)
+-   A description of what makes a good test (only test external behavior, not implementation details)
+-   Which modules will be tested
+-   Prior art for the tests (i.e. similar types of tests in the codebase)
 
 ## Out of Scope
 
diff --git a/.agents/skills/to-spec/agents/openai.yaml b/.agents/skills/to-spec/agents/openai.yaml
index 549e6f76..8c451da7 100644
--- a/.agents/skills/to-spec/agents/openai.yaml
+++ b/.agents/skills/to-spec/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "To Spec"
-  short_description: "Turn a conversation into a spec"
+    display_name: "To Spec"
+    short_description: "Turn a conversation into a spec"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/to-tickets/SKILL.md b/.agents/skills/to-tickets/SKILL.md
index 23140c57..d7a47685 100644
--- a/.agents/skills/to-tickets/SKILL.md
+++ b/.agents/skills/to-tickets/SKILL.md
@@ -28,10 +28,10 @@ Break the work into **tracer bullet** tickets.
 
 <vertical-slice-rules>
 
-- Each slice cuts a narrow but COMPLETE path through every layer (schema, API, UI, tests) — vertical, NOT a horizontal slice of one layer
-- A completed slice is demoable or verifiable on its own
-- Each slice is sized to fit in a single fresh context window
-- Any prefactoring should be done first
+-   Each slice cuts a narrow but COMPLETE path through every layer (schema, API, UI, tests) — vertical, NOT a horizontal slice of one layer
+-   A completed slice is demoable or verifiable on its own
+-   Each slice is sized to fit in a single fresh context window
+-   Any prefactoring should be done first
 
 </vertical-slice-rules>
 
@@ -43,15 +43,15 @@ Give each ticket its **blocking edges** — the other tickets that must complete
 
 Present the proposed breakdown as a numbered list. For each ticket, show:
 
-- **Title**: short descriptive name
-- **Blocked by**: which other tickets (if any) must complete first
-- **What it delivers**: the end-to-end behaviour this ticket makes work
+-   **Title**: short descriptive name
+-   **Blocked by**: which other tickets (if any) must complete first
+-   **What it delivers**: the end-to-end behaviour this ticket makes work
 
 Ask the user:
 
-- Does the granularity feel right? (too coarse / too fine)
-- Are the blocking edges correct — does each ticket only depend on tickets that genuinely gate it?
-- Should any tickets be merged or split further?
+-   Does the granularity feel right? (too coarse / too fine)
+-   Are the blocking edges correct — does each ticket only depend on tickets that genuinely gate it?
+-   Should any tickets be merged or split further?
 
 Iterate until the user approves the breakdown.
 
@@ -59,8 +59,8 @@ Iterate until the user approves the breakdown.
 
 Publish the approved tickets. **How** depends on the tracker `/setup-matt-pocock-skills` configured — the tickets are the same either way, only the shape of the blocking edges changes:
 
-- **Local files** → write one file per ticket under `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01` in dependency order (blockers first). Each file's "Blocked by" lists the numbers/titles it depends on. Use the per-ticket file template below — one ticket per file, never a single combined file.
-- **A real issue tracker (GitHub, Linear, …)** → publish one issue per ticket in dependency order (blockers first) so each ticket's blocking edges can reference real identifiers. Use the platform's native blocking / sub-issue relationship where it has one; otherwise set each ticket's "Blocked by" to the blocking issues. Apply the `ready-for-agent` triage label unless instructed otherwise — the tickets are agent-grabbable by construction.
+-   **Local files** → write one file per ticket under `.scratch/<feature-slug>/issues/<NN>-<slug>.md`, numbered from `01` in dependency order (blockers first). Each file's "Blocked by" lists the numbers/titles it depends on. Use the per-ticket file template below — one ticket per file, never a single combined file.
+-   **A real issue tracker (GitHub, Linear, …)** → publish one issue per ticket in dependency order (blockers first) so each ticket's blocking edges can reference real identifiers. Use the platform's native blocking / sub-issue relationship where it has one; otherwise set each ticket's "Blocked by" to the blocking issues. Apply the `ready-for-agent` triage label unless instructed otherwise — the tickets are agent-grabbable by construction.
 
 Work the **frontier**: any ticket whose blockers are all done. For a purely linear chain that means top to bottom.
 
@@ -76,8 +76,8 @@ Do NOT close or modify any parent issue.
 
 **Status:** ready-for-agent
 
-- [ ] Acceptance criterion 1
-- [ ] Acceptance criterion 2
+-   [ ] Acceptance criterion 1
+-   [ ] Acceptance criterion 2
 
 </local-ticket-template>
 
@@ -93,12 +93,12 @@ The end-to-end behaviour this ticket makes work, from the user's perspective —
 
 ## Acceptance criteria
 
-- [ ] Criterion 1
-- [ ] Criterion 2
+-   [ ] Criterion 1
+-   [ ] Criterion 2
 
 ## Blocked by
 
-- A reference to each blocking ticket, or "None — can start immediately".
+-   A reference to each blocking ticket, or "None — can start immediately".
 
 </issue-template>
 
diff --git a/.agents/skills/to-tickets/agents/openai.yaml b/.agents/skills/to-tickets/agents/openai.yaml
index 24605a5d..7e094ac2 100644
--- a/.agents/skills/to-tickets/agents/openai.yaml
+++ b/.agents/skills/to-tickets/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "To Tickets"
-  short_description: "Split a plan into tracer-bullet tickets"
+    display_name: "To Tickets"
+    short_description: "Split a plan into tracer-bullet tickets"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/triage/AGENT-BRIEF.md b/.agents/skills/triage/AGENT-BRIEF.md
index 6535c9bd..36627a44 100644
--- a/.agents/skills/triage/AGENT-BRIEF.md
+++ b/.agents/skills/triage/AGENT-BRIEF.md
@@ -2,7 +2,7 @@
 
 An agent brief is a structured comment posted on a GitHub issue or PR when it moves to `ready-for-agent`. It is the authoritative specification that an AFK agent will work from. The original body and discussion are context — the agent brief is the contract.
 
-The brief states **what the agent should do**, which stretches to both surfaces: for an issue, that's building the change from nothing; for a PR, it's what's left to do *to the existing diff* — finish it, close gaps, address review points. Same principles either way; the PR example below shows the difference.
+The brief states **what the agent should do**, which stretches to both surfaces: for an issue, that's building the change from nothing; for a PR, it's what's left to do _to the existing diff_ — finish it, close gaps, address review points. Same principles either way; the PR example below shows the difference.
 
 ## Principles
 
@@ -10,27 +10,27 @@ The brief states **what the agent should do**, which stretches to both surfaces:
 
 The issue may sit in `ready-for-agent` for days or weeks. The codebase will change in the meantime. Write the brief so it stays useful even as files are renamed, moved, or refactored.
 
-- **Do** describe interfaces, types, and behavioral contracts
-- **Do** name specific types, function signatures, or config shapes that the agent should look for or modify
-- **Don't** reference file paths — they go stale
-- **Don't** reference line numbers
-- **Don't** assume the current implementation structure will remain the same
+-   **Do** describe interfaces, types, and behavioral contracts
+-   **Do** name specific types, function signatures, or config shapes that the agent should look for or modify
+-   **Don't** reference file paths — they go stale
+-   **Don't** reference line numbers
+-   **Don't** assume the current implementation structure will remain the same
 
 ### Behavioral, not procedural
 
 Describe **what** the system should do, not **how** to implement it. The agent will explore the codebase fresh and make its own implementation decisions.
 
-- **Good:** "The `SkillConfig` type should accept an optional `schedule` field of type `CronExpression`"
-- **Bad:** "Open src/types/skill.ts and add a schedule field on line 42"
-- **Good:** "When a user runs `/triage` with no arguments, they should see a summary of issues needing attention"
-- **Bad:** "Add a switch statement in the main handler function"
+-   **Good:** "The `SkillConfig` type should accept an optional `schedule` field of type `CronExpression`"
+-   **Bad:** "Open src/types/skill.ts and add a schedule field on line 42"
+-   **Good:** "When a user runs `/triage` with no arguments, they should see a summary of issues needing attention"
+-   **Bad:** "Add a switch statement in the main handler function"
 
 ### Complete acceptance criteria
 
 The agent needs to know when it's done. Every agent brief must have concrete, testable acceptance criteria. Each criterion should be independently verifiable.
 
-- **Good:** "Running `gh issue list --label needs-triage` returns issues that have been through initial classification"
-- **Bad:** "Triage should work correctly"
+-   **Good:** "Running `gh issue list --label needs-triage` returns issues that have been through initial classification"
+-   **Bad:** "Triage should work correctly"
 
 ### Explicit scope boundaries
 
@@ -53,18 +53,21 @@ Describe what should happen after the agent's work is complete.
 Be specific about edge cases and error conditions.
 
 **Key interfaces:**
-- `TypeName` — what needs to change and why
-- `functionName()` return type — what it currently returns vs what it should return
-- Config shape — any new configuration options needed
+
+-   `TypeName` — what needs to change and why
+-   `functionName()` return type — what it currently returns vs what it should return
+-   Config shape — any new configuration options needed
 
 **Acceptance criteria:**
-- [ ] Specific, testable criterion 1
-- [ ] Specific, testable criterion 2
-- [ ] Specific, testable criterion 3
+
+-   [ ] Specific, testable criterion 1
+-   [ ] Specific, testable criterion 2
+-   [ ] Specific, testable criterion 3
 
 **Out of scope:**
-- Thing that should NOT be changed or addressed in this issue
-- Adjacent feature that might seem related but is separate
+
+-   Thing that should NOT be changed or addressed in this issue
+-   Adjacent feature that might seem related but is separate
 ```
 
 ## Examples
@@ -87,21 +90,24 @@ Truncation should break at the last word boundary before 1024 characters
 and append "..." to indicate truncation.
 
 **Key interfaces:**
-- The `SkillMetadata` type's `description` field — no type change needed,
-  but the validation/processing logic that populates it needs to respect
-  word boundaries
-- Any function that reads SKILL.md frontmatter and extracts the description
+
+-   The `SkillMetadata` type's `description` field — no type change needed,
+    but the validation/processing logic that populates it needs to respect
+    word boundaries
+-   Any function that reads SKILL.md frontmatter and extracts the description
 
 **Acceptance criteria:**
-- [ ] Descriptions under 1024 chars are unchanged
-- [ ] Descriptions over 1024 chars are truncated at the last word boundary
-      before 1024 chars
-- [ ] Truncated descriptions end with "..."
-- [ ] The total length including "..." does not exceed 1024 chars
+
+-   [ ] Descriptions under 1024 chars are unchanged
+-   [ ] Descriptions over 1024 chars are truncated at the last word boundary
+        before 1024 chars
+-   [ ] Truncated descriptions end with "..."
+-   [ ] The total length including "..." does not exceed 1024 chars
 
 **Out of scope:**
-- Changing the 1024 char limit itself
-- Multi-line description support
+
+-   Changing the 1024 char limit itself
+-   Multi-line description support
 ```
 
 ### Good agent brief (enhancement)
@@ -125,24 +131,27 @@ requested the feature. When triaging new issues, these files should be
 checked for matches.
 
 **Key interfaces:**
-- Markdown file format in `.out-of-scope/` — each file should have a
-  `# Concept Name` heading, a `**Decision:**` line, a `**Reason:**` line,
-  and a `**Prior requests:**` list with issue links
-- The triage workflow should read all `.out-of-scope/*.md` files early
-  and match incoming issues against them by concept similarity
+
+-   Markdown file format in `.out-of-scope/` — each file should have a
+    `# Concept Name` heading, a `**Decision:**` line, a `**Reason:**` line,
+    and a `**Prior requests:**` list with issue links
+-   The triage workflow should read all `.out-of-scope/*.md` files early
+    and match incoming issues against them by concept similarity
 
 **Acceptance criteria:**
-- [ ] Closing a feature as wontfix creates/updates a file in `.out-of-scope/`
-- [ ] The file includes the decision, reasoning, and link to the closed issue
-- [ ] If a matching `.out-of-scope/` file already exists, the new issue is
-      appended to its "Prior requests" list rather than creating a duplicate
-- [ ] During triage, existing `.out-of-scope/` files are checked and surfaced
-      when a new issue matches a prior rejection
+
+-   [ ] Closing a feature as wontfix creates/updates a file in `.out-of-scope/`
+-   [ ] The file includes the decision, reasoning, and link to the closed issue
+-   [ ] If a matching `.out-of-scope/` file already exists, the new issue is
+        appended to its "Prior requests" list rather than creating a duplicate
+-   [ ] During triage, existing `.out-of-scope/` files are checked and surfaced
+        when a new issue matches a prior rejection
 
 **Out of scope:**
-- Automated matching (human confirms the match)
-- Reopening previously rejected features
-- Bug reports (only enhancement rejections go to `.out-of-scope/`)
+
+-   Automated matching (human confirms the match)
+-   Reopening previously rejected features
+-   Bug reports (only enhancement rejections go to `.out-of-scope/`)
 ```
 
 ### Good agent brief (PR)
@@ -167,19 +176,22 @@ and the command's exit codes are unchanged. The existing human-readable output
 is untouched when the flag is absent.
 
 **Key interfaces:**
-- The command's error path should emit `{ "error": string }` under `--json`
-  instead of the plain-text error
-- Reuse the existing serializer the PR already added; don't introduce a second
+
+-   The command's error path should emit `{ "error": string }` under `--json`
+    instead of the plain-text error
+-   Reuse the existing serializer the PR already added; don't introduce a second
 
 **Acceptance criteria:**
-- [ ] `triage list --json` emits valid JSON for both success and error cases
-- [ ] Exit codes match the non-JSON command
-- [ ] A test covers the `--json` success output and one error case
-- [ ] Default (non-JSON) output is byte-for-byte unchanged
+
+-   [ ] `triage list --json` emits valid JSON for both success and error cases
+-   [ ] Exit codes match the non-JSON command
+-   [ ] A test covers the `--json` success output and one error case
+-   [ ] Default (non-JSON) output is byte-for-byte unchanged
 
 **Out of scope:**
-- Adding `--json` to any other command
-- Changing the JSON shape of the success payload the PR already defined
+
+-   Adding `--json` to any other command
+-   Changing the JSON shape of the success payload the PR already defined
 ```
 
 ### Bad agent brief
@@ -194,14 +206,16 @@ The triage thing is broken. Look at the main file and fix it.
 The function around line 150 has the issue.
 
 **Files to change:**
-- src/triage/handler.ts (line 150)
-- src/types.ts (line 42)
+
+-   src/triage/handler.ts (line 150)
+-   src/types.ts (line 42)
 ```
 
 This is bad because:
-- No category
-- Vague description ("the triage thing is broken")
-- References file paths and line numbers that will go stale
-- No acceptance criteria
-- No scope boundaries
-- No description of current vs desired behavior
+
+-   No category
+-   Vague description ("the triage thing is broken")
+-   References file paths and line numbers that will go stale
+-   No acceptance criteria
+-   No scope boundaries
+-   No description of current vs desired behavior
diff --git a/.agents/skills/triage/OUT-OF-SCOPE.md b/.agents/skills/triage/OUT-OF-SCOPE.md
index fc0e39f5..f2960fef 100644
--- a/.agents/skills/triage/OUT-OF-SCOPE.md
+++ b/.agents/skills/triage/OUT-OF-SCOPE.md
@@ -20,7 +20,7 @@ One file per **concept**, not per issue. Multiple issues requesting the same thi
 
 The file should be written in a relaxed, readable style — more like a short design document than a database entry. Use paragraphs, code samples, and examples to make the reasoning clear and useful to someone encountering it for the first time.
 
-```markdown
+````markdown
 # Dark Mode
 
 This project does not support dark mode or user-facing theming.
@@ -30,9 +30,9 @@ This project does not support dark mode or user-facing theming.
 The rendering pipeline assumes a single color palette defined in
 `ThemeConfig`. Supporting multiple themes would require:
 
-- A theme context provider wrapping the entire component tree
-- Per-component theme-aware style resolution
-- A persistence layer for user theme preferences
+-   A theme context provider wrapping the entire component tree
+-   Per-component theme-aware style resolution
+-   A persistence layer for user theme preferences
 
 This is a significant architectural change that doesn't align with the
 project's focus on content authoring. Theming is a concern for downstream
@@ -41,16 +41,18 @@ consumers who embed or redistribute the output.
 ```ts
 // The current ThemeConfig interface is not designed for runtime switching:
 interface ThemeConfig {
-  colors: ColorPalette; // single palette, resolved at build time
-  fonts: FontStack;
+	colors: ColorPalette; // single palette, resolved at build time
+	fonts: FontStack;
 }
 ```
+````
 
 ## Prior requests
 
-- #42 — "Add dark mode support"
-- #87 — "Night theme for accessibility"
-- #134 — "Dark theme option"
+-   #42 — "Add dark mode support"
+-   #87 — "Night theme for accessibility"
+-   #134 — "Dark theme option"
+
 ```
 
 ### Naming the file
@@ -103,3 +105,4 @@ If the maintainer changes their mind about a previously rejected concept:
 - Delete the `.out-of-scope/` file
 - The skill does not need to reopen old issues — they're historical records
 - The new issue that triggered the reconsideration proceeds through normal triage
+```
diff --git a/.agents/skills/triage/SKILL.md b/.agents/skills/triage/SKILL.md
index be47b781..c8096053 100644
--- a/.agents/skills/triage/SKILL.md
+++ b/.agents/skills/triage/SKILL.md
@@ -18,23 +18,23 @@ Every comment or issue posted to the issue tracker during triage **must** start
 
 ## Reference docs
 
-- [AGENT-BRIEF.md](AGENT-BRIEF.md) — how to write durable agent briefs
-- [OUT-OF-SCOPE.md](OUT-OF-SCOPE.md) — how the `.out-of-scope/` knowledge base works
+-   [AGENT-BRIEF.md](AGENT-BRIEF.md) — how to write durable agent briefs
+-   [OUT-OF-SCOPE.md](OUT-OF-SCOPE.md) — how the `.out-of-scope/` knowledge base works
 
 ## Roles
 
 Two **category** roles:
 
-- `bug` — something is broken
-- `enhancement` — new feature or improvement
+-   `bug` — something is broken
+-   `enhancement` — new feature or improvement
 
 Five **state** roles:
 
-- `needs-triage` — maintainer needs to evaluate
-- `needs-info` — waiting on reporter for more information
-- `ready-for-agent` — fully specified, ready for an AFK agent
-- `ready-for-human` — needs human implementation
-- `wontfix` — will not be actioned
+-   `needs-triage` — maintainer needs to evaluate
+-   `needs-info` — waiting on reporter for more information
+-   `ready-for-agent` — fully specified, ready for an AFK agent
+-   `ready-for-human` — needs human implementation
+-   `wontfix` — will not be actioned
 
 For a PR, the same states read against the attached code: `ready-for-agent` means a brief is attached and an agent should take the next step on the diff; `ready-for-human` means it's ready for a human to merge.
 
@@ -48,10 +48,10 @@ State transitions: an unlabeled issue normally goes to `needs-triage` first; fro
 
 The maintainer invokes `/triage` and describes what they want in natural language. Interpret the request and act. Examples:
 
-- "Show me anything that needs my attention"
-- "Let's look at #42" (issue or PR)
-- "Move #42 to ready-for-agent"
-- "What's ready for agents to pick up?"
+-   "Show me anything that needs my attention"
+-   "Let's look at #42" (issue or PR)
+-   "Move #42 to ready-for-agent"
+-   "What's ready for agents to pick up?"
 
 ## Show what needs attention
 
@@ -61,7 +61,7 @@ Query the issue tracker and present three buckets, oldest first:
 2. **`needs-triage`** — evaluation in progress.
 3. **`needs-info` with reporter activity since the last triage notes** — needs re-evaluation.
 
-When PRs are in scope, include external PRs in these buckets and tag each line `[PR]` or `[issue]`. Discovery surfaces only *external* PRs (the tracker config defines who counts as external) — a collaborator's in-flight PR is not triage work. This filter is discovery-only; an explicitly named PR is always triaged regardless of author.
+When PRs are in scope, include external PRs in these buckets and tag each line `[PR]` or `[issue]`. Discovery surfaces only _external_ PRs (the tracker config defines who counts as external) — a collaborator's in-flight PR is not triage work. This filter is discovery-only; an explicitly named PR is always triaged regardless of author.
 
 Show counts and a one-line summary per item. Let the maintainer pick.
 
@@ -76,14 +76,14 @@ Show counts and a one-line summary per item. Let the maintainer pick.
 4. **Grill (if needed).** If the request needs fleshing out, run the `/grilling` and `/domain-modeling` skills together — grill it into shape one question at a time, sharpening domain terms and updating `CONTEXT.md`/ADRs inline as decisions land.
 
 5. **Apply the outcome:**
-   - `ready-for-agent` — post an agent brief comment ([AGENT-BRIEF.md](AGENT-BRIEF.md)).
-   - `ready-for-human` — same structure as an agent brief, but note why it can't be delegated (judgment calls, external access, design decisions, manual testing).
-   - `needs-info` — post triage notes (template below).
-   - `wontfix` — close, with the comment depending on *why*:
-     - **Already implemented** — the change already exists in the codebase. Point to where it lives; do **not** write to `.out-of-scope/` (that KB is for *rejected* requests, not built ones).
-     - **Rejected (bug)** — polite explanation, then close.
-     - **Rejected (enhancement)** — write to `.out-of-scope/`, link to it from a comment, then close ([OUT-OF-SCOPE.md](OUT-OF-SCOPE.md)).
-   - `needs-triage` — apply the role. Optional comment if there's partial progress.
+    - `ready-for-agent` — post an agent brief comment ([AGENT-BRIEF.md](AGENT-BRIEF.md)).
+    - `ready-for-human` — same structure as an agent brief, but note why it can't be delegated (judgment calls, external access, design decisions, manual testing).
+    - `needs-info` — post triage notes (template below).
+    - `wontfix` — close, with the comment depending on _why_:
+        - **Already implemented** — the change already exists in the codebase. Point to where it lives; do **not** write to `.out-of-scope/` (that KB is for _rejected_ requests, not built ones).
+        - **Rejected (bug)** — polite explanation, then close.
+        - **Rejected (enhancement)** — write to `.out-of-scope/`, link to it from a comment, then close ([OUT-OF-SCOPE.md](OUT-OF-SCOPE.md)).
+    - `needs-triage` — apply the role. Optional comment if there's partial progress.
 
 ## Quick state override
 
@@ -96,13 +96,13 @@ If the maintainer says "move #42 to ready-for-agent", trust them and apply the r
 
 **What we've established so far:**
 
-- point 1
-- point 2
+-   point 1
+-   point 2
 
 **What we still need from you (@reporter):**
 
-- question 1
-- question 2
+-   question 1
+-   question 2
 ```
 
 Capture everything resolved during grilling under "established so far" so the work isn't lost. Questions must be specific and actionable, not "please provide more info".
diff --git a/.agents/skills/triage/agents/openai.yaml b/.agents/skills/triage/agents/openai.yaml
index acb366cf..a0064285 100644
--- a/.agents/skills/triage/agents/openai.yaml
+++ b/.agents/skills/triage/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Triage"
-  short_description: "Move issues through triage roles"
+    display_name: "Triage"
+    short_description: "Move issues through triage roles"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/wayfinder/SKILL.md b/.agents/skills/wayfinder/SKILL.md
index 42e3644c..75bc243f 100644
--- a/.agents/skills/wayfinder/SKILL.md
+++ b/.agents/skills/wayfinder/SKILL.md
@@ -14,7 +14,7 @@ Wayfinder is **planning** by default: each ticket resolves a decision, and the m
 
 ## Refer by name
 
-Every map and ticket is an issue, so it has a **name** — its title. In everything the human reads — narration, the map's Decisions-so-far — refer to it by that name, never by a bare id, number, or slug. A wall of `#42, #43, #44` is illegible; names read at a glance. The id and URL don't vanish — a name wraps its link — but they ride *inside* the name, never stand in for it.
+Every map and ticket is an issue, so it has a **name** — its title. In everything the human reads — narration, the map's Decisions-so-far — refer to it by that name, never by a bare id, number, or slug. A wall of `#42, #43, #44` is illegible; names read at a glance. The id and URL don't vanish — a name wraps its link — but they ride _inside_ the name, never stand in for it.
 
 ## The Map
 
@@ -41,7 +41,7 @@ The whole map at low resolution, loaded once per session. Open tickets are **not
 
 <!-- the index — one line per closed ticket: enough to judge relevance, then zoom the link for the detail the ticket holds -->
 
-- [<closed ticket title>](link) — <one-line gist of the answer>
+-   [<closed ticket title>](link) — <one-line gist of the answer>
 
 ## Not yet specified
 
@@ -72,12 +72,12 @@ The answer isn't part of the body — it's recorded on resolution (see [Work thr
 
 ## Ticket Types
 
-Every ticket is either **HITL** — human in the loop, worked *with* a human who speaks for themselves — or **AFK**, driven by the agent alone. A HITL ticket only resolves through that live exchange; the agent never stands in for the human's side of it (a grilling agent that answers its own questions has broken this).
+Every ticket is either **HITL** — human in the loop, worked _with_ a human who speaks for themselves — or **AFK**, driven by the agent alone. A HITL ticket only resolves through that live exchange; the agent never stands in for the human's side of it (a grilling agent that answers its own questions has broken this).
 
-- **Research** (AFK): Reading documentation, third-party APIs, or local resources like knowledge bases to surface a fact a decision waits on. Resolved by a `/research` **subagent**. Use when knowledge outside the current working directory is required.
-- **Prototype** (HITL): Raise the fidelity of the discussion by making a cheap, rough, concrete artifact to react to — an outline, a rough take, a stub, or UI/logic code via the /prototype skill. Links the prototype as an asset. Use when "how should it look" or "how should it behave" is the key question.
-- **Grilling** (HITL): Conversation via the /grilling and /domain-modeling skills, one question at a time. The default case.
-- **Task** (HITL or AFK): Manual work that must happen before a *decision* can be made — nothing to decide, prototype, or research, but the discussion is blocked until it's done. Signing up for a service so its API can be judged, provisioning access, moving data so its shape can be seen. This is the one type that *does* rather than decides — and it earns its place by unblocking a decision, not by delivering the destination. The agent drives it alone where it can (AFK); otherwise it hands the human a precise checklist (HITL). Resolved when the work is done; the answer records what was done and any resulting facts (credentials location, new URLs, row counts) later tickets depend on.
+-   **Research** (AFK): Reading documentation, third-party APIs, or local resources like knowledge bases to surface a fact a decision waits on. Resolved by a `/research` **subagent**. Use when knowledge outside the current working directory is required.
+-   **Prototype** (HITL): Raise the fidelity of the discussion by making a cheap, rough, concrete artifact to react to — an outline, a rough take, a stub, or UI/logic code via the /prototype skill. Links the prototype as an asset. Use when "how should it look" or "how should it behave" is the key question.
+-   **Grilling** (HITL): Conversation via the /grilling and /domain-modeling skills, one question at a time. The default case.
+-   **Task** (HITL or AFK): Manual work that must happen before a _decision_ can be made — nothing to decide, prototype, or research, but the discussion is blocked until it's done. Signing up for a service so its API can be judged, provisioning access, moving data so its shape can be seen. This is the one type that _does_ rather than decides — and it earns its place by unblocking a decision, not by delivering the destination. The agent drives it alone where it can (AFK); otherwise it hands the human a precise checklist (HITL). Resolved when the work is done; the answer records what was done and any resulting facts (credentials location, new URLs, row counts) later tickets depend on.
 
 ## Fog of war
 
@@ -87,8 +87,8 @@ The map's **Not yet specified** section is where that dim view is written down:
 
 **Fog or ticket?** The test is whether you can state the question precisely now — _not_ whether you can answer it now.
 
-- **Ticket when** the question is already sharp — even if it's blocked and you can't act on it yet.
-- **Not yet specified when** you can't yet phrase it that sharply. Don't pre-slice the fog into ticket-sized pieces: it's coarser than a ticket, and one patch may graduate into several tickets, or none, once the frontier reaches it.
+-   **Ticket when** the question is already sharp — even if it's blocked and you can't act on it yet.
+-   **Not yet specified when** you can't yet phrase it that sharply. Don't pre-slice the fog into ticket-sized pieces: it's coarser than a ticket, and one patch may graduate into several tickets, or none, once the frontier reaches it.
 
 **Not yet specified** excludes what's already decided (Decisions so far), what's already a live ticket, and what's out of scope (the next section).
 
diff --git a/.agents/skills/wayfinder/agents/openai.yaml b/.agents/skills/wayfinder/agents/openai.yaml
index b3754475..a18c146a 100644
--- a/.agents/skills/wayfinder/agents/openai.yaml
+++ b/.agents/skills/wayfinder/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Wayfinder"
-  short_description: "Map a large effort as decision tickets"
+    display_name: "Wayfinder"
+    short_description: "Map a large effort as decision tickets"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.agents/skills/writing-great-skills/GLOSSARY.md b/.agents/skills/writing-great-skills/GLOSSARY.md
index 0269ca89..652f63b1 100644
--- a/.agents/skills/writing-great-skills/GLOSSARY.md
+++ b/.agents/skills/writing-great-skills/GLOSSARY.md
@@ -72,9 +72,9 @@ How a skill's content is arranged, and how far down the ladder each piece sits.
 
 A skill's content ranked by how immediately the agent needs it — a single ladder, produced by two cuts: in-file or behind a pointer, and step or reference. The rungs:
 
-- **Steps** — in-file, primary
-- **Reference**, in-file — secondary
-- **Reference**, disclosed — behind a **context pointer**
+-   **Steps** — in-file, primary
+-   **Reference**, in-file — secondary
+-   **Reference**, disclosed — behind a **context pointer**
 
 A skill with no **steps** uses just the bottom two rungs — often a legitimately flat peer-set (e.g. every rule of a review on one rung), which is a fine arrangement, not a smell. The hierarchy is independent of invocation: a skill can be model- or user-invoked whether it is all steps, all reference, or both. When a skill has steps, in-file reference that should be disclosed buries them and turns attending to them into a coin-flip — a variance lever, not just a legibility one. Keep the top of the ladder legible; push down it whatever you can.
 
diff --git a/.agents/skills/writing-great-skills/SKILL.md b/.agents/skills/writing-great-skills/SKILL.md
index 82abd0dc..c5b6a82f 100644
--- a/.agents/skills/writing-great-skills/SKILL.md
+++ b/.agents/skills/writing-great-skills/SKILL.md
@@ -12,8 +12,8 @@ A skill exists to wrangle determinism out of a stochastic system. **Predictabili
 
 Two choices, trading different costs:
 
-- A **model-invoked** skill keeps a **description**, so the agent can fire it autonomously _and_ other skills can reach it (you can still type its name too). It contributes to **context load** — the description sits in the window every turn. Mechanics: omit `disable-model-invocation`, and write a model-facing description with rich trigger phrasing ("Use when the user wants…, mentions…").
-- A **user-invoked** skill strips the description from the agent's reach: only you, typing its name, can invoke it — and no other skill can. Zero context load, but it spends **cognitive load**: _you_ are the index that must remember it exists. Mechanics: set `disable-model-invocation: true`; the `description` becomes human-facing — a one-line summary, trigger lists stripped.
+-   A **model-invoked** skill keeps a **description**, so the agent can fire it autonomously _and_ other skills can reach it (you can still type its name too). It contributes to **context load** — the description sits in the window every turn. Mechanics: omit `disable-model-invocation`, and write a model-facing description with rich trigger phrasing ("Use when the user wants…, mentions…").
+-   A **user-invoked** skill strips the description from the agent's reach: only you, typing its name, can invoke it — and no other skill can. Zero context load, but it spends **cognitive load**: _you_ are the index that must remember it exists. Mechanics: set `disable-model-invocation: true`; the `description` becomes human-facing — a one-line summary, trigger lists stripped.
 
 Pick model-invocation only when the agent must reach the skill on its own, or another skill must. If it only ever fires by hand, make it user-invoked and pay no context load.
 
@@ -23,9 +23,9 @@ When user-invoked skills multiply past what you can remember, that piled-up cogn
 
 A model-invoked **description** does two jobs — state what the skill is, and list the **branches** that should trigger it. Every word increases **context load**, so a description earns even harder pruning than the body:
 
-- **Front-load the skill's leading word** — the description is where it does its invocation work.
-- **One trigger per branch.** Synonyms that rename a single branch are **duplication** — "build features using TDD … asks for test-first development" is one branch written twice. Collapse them; keep only genuinely distinct branches.
-- **Cut identity that's already in the body.** Keep the description to triggers, plus any "when another skill needs…" reach clause.
+-   **Front-load the skill's leading word** — the description is where it does its invocation work.
+-   **One trigger per branch.** Synonyms that rename a single branch are **duplication** — "build features using TDD … asks for test-first development" is one branch written twice. Collapse them; keep only genuinely distinct branches.
+-   **Cut identity that's already in the body.** Keep the description to triggers, plus any "when another skill needs…" reach clause.
 
 ## Information hierarchy
 
@@ -47,8 +47,8 @@ Where the ladder decides _how far down_ a piece sits, **co-location** decides _w
 
 **Granularity** is how finely you divide skills, and each cut spends one of the two loads, so split only when the cut earns it. Two cuts:
 
-- **By invocation** — split off a **model-invoked** skill when you have a distinct **leading word** that should trigger it on its own, or another skill must reach it. You pay **context load** for the new always-loaded **description**, so that independent reach has to be worth it.
-- **By sequence** — split a run of **steps** when the steps still ahead (a step's **post-completion steps**) tempt the agent to rush the one in front of it (**premature completion**). Keeping them out of view encourages the agent to do more **legwork** on the current task.
+-   **By invocation** — split off a **model-invoked** skill when you have a distinct **leading word** that should trigger it on its own, or another skill must reach it. You pay **context load** for the new always-loaded **description**, so that independent reach has to be worth it.
+-   **By sequence** — split a run of **steps** when the steps still ahead (a step's **post-completion steps**) tempt the agent to rush the one in front of it (**premature completion**). Keeping them out of view encourages the agent to do more **legwork** on the current task.
 
 ## Pruning
 
@@ -66,8 +66,8 @@ It serves predictability twice. In the body it anchors _execution_: the agent re
 
 Hunt for opportunities to refactor skills to use leading words. A triad spelled out at three sites (**duplication**), a description spending a sentence to gesture at one idea — each is a passage begging to **collapse** into a single token. Examples include:
 
-- "fast, deterministic, low-overhead" -> _tight_ — one quality restated across a phase — into a single pretrained word (a _tight_ loop).
-- "a loop you believe in" -> _red_ — converts a fuzzy gate into a binary observable state (the loop goes _red_ on the bug, or it doesn't).
+-   "fast, deterministic, low-overhead" -> _tight_ — one quality restated across a phase — into a single pretrained word (a _tight_ loop).
+-   "a loop you believe in" -> _red_ — converts a fuzzy gate into a binary observable state (the loop goes _red_ on the bug, or it doesn't).
 
 You win twice over: fewer tokens, _and_ a sharper hook for the agent to hang its thinking on. Assume every skill is carrying restatements that leading words retire — go find them.
 
@@ -75,9 +75,9 @@ You win twice over: fewer tokens, _and_ a sharper hook for the agent to hang its
 
 Use these to diagnose issues the user may be having with the skill.
 
-- **Premature completion** — ending a step before it's genuinely done, attention slipping to _being done_. Defence, in order: sharpen the completion criterion first (cheap, local); only if it is irreducibly fuzzy _and_ you observe the rush, hide the post-completion steps by splitting (the sequence cut).
-- **Duplication** — the same meaning in more than one place. Costs maintenance and tokens, and inflates a meaning's prominence on the ladder past its real rank.
-- **Sediment** — stale layers that settle because adding feels safe and removing feels risky. The default fate of any skill without a pruning discipline.
-- **Sprawl** — a skill simply too long, even when every line is live and unique. Hurts readability and maintainability and wastes tokens. The cure is the ladder: disclose **reference** behind pointers, and split by **branch** or sequence so each path carries only what it needs.
-- **No-op** — a line the model already obeys by default, so you pay load to say nothing. The test: does it change behaviour versus the default? A weak leading word (_be thorough_ when the agent is already thorough-ish) is a no-op; the fix is a stronger word (_relentless_), not a different technique.
-- **Negation** — steering by prohibition backfires: _don't think of an elephant_ names the elephant and makes it more available, not less. Prompt the **positive** — state the target behaviour so the banned one is never spoken; keep a prohibition only as a hard guardrail you can't phrase positively, and even then pair it with what to do instead.
+-   **Premature completion** — ending a step before it's genuinely done, attention slipping to _being done_. Defence, in order: sharpen the completion criterion first (cheap, local); only if it is irreducibly fuzzy _and_ you observe the rush, hide the post-completion steps by splitting (the sequence cut).
+-   **Duplication** — the same meaning in more than one place. Costs maintenance and tokens, and inflates a meaning's prominence on the ladder past its real rank.
+-   **Sediment** — stale layers that settle because adding feels safe and removing feels risky. The default fate of any skill without a pruning discipline.
+-   **Sprawl** — a skill simply too long, even when every line is live and unique. Hurts readability and maintainability and wastes tokens. The cure is the ladder: disclose **reference** behind pointers, and split by **branch** or sequence so each path carries only what it needs.
+-   **No-op** — a line the model already obeys by default, so you pay load to say nothing. The test: does it change behaviour versus the default? A weak leading word (_be thorough_ when the agent is already thorough-ish) is a no-op; the fix is a stronger word (_relentless_), not a different technique.
+-   **Negation** — steering by prohibition backfires: _don't think of an elephant_ names the elephant and makes it more available, not less. Prompt the **positive** — state the target behaviour so the banned one is never spoken; keep a prohibition only as a hard guardrail you can't phrase positively, and even then pair it with what to do instead.
diff --git a/.agents/skills/writing-great-skills/agents/openai.yaml b/.agents/skills/writing-great-skills/agents/openai.yaml
index d677a13f..7b8e177a 100644
--- a/.agents/skills/writing-great-skills/agents/openai.yaml
+++ b/.agents/skills/writing-great-skills/agents/openai.yaml
@@ -1,5 +1,5 @@
 interface:
-  display_name: "Writing Great Skills"
-  short_description: "Principles for predictable skills"
+    display_name: "Writing Great Skills"
+    short_description: "Principles for predictable skills"
 policy:
-  allow_implicit_invocation: false
+    allow_implicit_invocation: false
diff --git a/.github/workflows/prettier.yml b/.github/workflows/prettier.yml
index c0c6c8c0..a0a6c18c 100644
--- a/.github/workflows/prettier.yml
+++ b/.github/workflows/prettier.yml
@@ -10,19 +10,18 @@ jobs:
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v2
+              uses: actions/checkout@v4
 
             - name: Set up Node.js
-              uses: actions/setup-node@v2
+              uses: actions/setup-node@v4
               with:
-                  node-version: "20"
+                  node-version: "22.17.0"
 
             - name: Install pnpm
-              run: |
-                  npm install -g pnpm
+              uses: pnpm/action-setup@v4
 
             - name: Install dependencies
-              run: pnpm install
+              run: pnpm install --frozen-lockfile
 
             - name: Run Prettier check
               run: pnpm run format-check
diff --git a/.github/workflows/web.yml b/.github/workflows/web.yml
index 7c584089..e2a0dc4b 100644
--- a/.github/workflows/web.yml
+++ b/.github/workflows/web.yml
@@ -28,19 +28,37 @@ jobs:
                     --health-timeout 5s
                     --health-retries 5
 
+            mysql:
+                image: mysql:8.4
+                env:
+                    MYSQL_ROOT_PASSWORD: mysql
+                    MYSQL_DATABASE: hackkit
+                ports:
+                    - 3306:3306
+                options: >-
+                    --health-cmd "mysqladmin ping -h 127.0.0.1 -pmysql"
+                    --health-interval 10s
+                    --health-timeout 5s
+                    --health-retries 10
+            libsql:
+                image: ghcr.io/tursodatabase/libsql-server:latest
+                env:
+                    SQLD_NODE: standalone
+                    SQLD_HTTP_LISTEN_ADDR: 0.0.0.0:8080
+                ports:
+                    - 8080:8080
+
         steps:
             - name: Checkout code
               uses: actions/checkout@v4
 
             - name: Set up pnpm
               uses: pnpm/action-setup@v4
-              with:
-                  version: 8.3.1
 
             - name: Set up Node.js
               uses: actions/setup-node@v4
               with:
-                  node-version: "20"
+                  node-version: "22.17.0"
                   cache: pnpm
 
             - name: Install dependencies
@@ -53,56 +71,27 @@ jobs:
               working-directory: apps/web
               run: pnpm plugin:sync
 
-            - name: Regenerate native schema files
-              working-directory: apps/web
-              run: |
-                  pnpm schema:generate
-                  pnpm auth:schema
+            - name: Verify generated plugin files are current
+              run: git diff --exit-code -- apps/web/app apps/web/hackkit.lock
 
-            - name: Verify generated files are current
-              run: |
-                  changed="$(git status --porcelain -- apps/web/app/discord apps/web/app/invites/page.tsx apps/web/app/teams/page.tsx apps/web/app/hackkit-plugin-actions.ts apps/web/db/schema apps/web/hackkit.lock)"
-                  if [ -n "$changed" ]; then
-                      echo "$changed"
-                      git diff -- apps/web/app/discord apps/web/app/invites/page.tsx apps/web/app/teams/page.tsx apps/web/app/hackkit-plugin-actions.ts apps/web/db/schema apps/web/hackkit.lock
-                      exit 1
-                  fi
-
-            - name: Validate and apply migrations
-              working-directory: apps/web
+            - name: Wait for network libSQL
+              run: curl --fail --retry 20 --retry-connrefused --retry-delay 2 http://127.0.0.1:8080/health
+
+            - name: Test all SQL drivers against committed migrations
               env:
-                  DATABASE_URL: file:.data/ci.db
-              run: |
-                  mkdir -p .data
-                  pnpm drizzle-kit check
-                  pnpm db:generate
-                  changed="$(git status --porcelain -- db/migrations)"
-                  if [ -n "$changed" ]; then
-                      echo "$changed"
-                      git diff -- db/migrations
-                      exit 1
-                  fi
-                  pnpm db:migrate
+                  HACKKIT_REQUIRE_DATABASE_MATRIX: "1"
+                  HACKKIT_TEST_POSTGRESQL_URL: postgresql://postgres:postgres@127.0.0.1:5432/hackkit
+                  HACKKIT_TEST_MYSQL_URL: mysql://root:mysql@127.0.0.1:3306/hackkit
+                  HACKKIT_TEST_LIBSQL_URL: http://127.0.0.1:8080
+              run: pnpm --filter web test:db-matrix
 
             - name: Test database workflow isolation
               run: pnpm --filter web test:db-workflow
 
-            - name: Validate PostgreSQL migration fixture
-              run: |
-                  pnpm --filter @hackkit/db-drizzle exec drizzle-kit check --config test-fixtures/postgres/drizzle.config.ts
-                  pnpm --filter @hackkit/db-drizzle exec drizzle-kit generate --config test-fixtures/postgres/drizzle.config.ts
-                  changed="$(git status --porcelain -- packages/db-drizzle/test-fixtures/postgres)"
-                  if [ -n "$changed" ]; then
-                      echo "$changed"
-                      git diff -- packages/db-drizzle/test-fixtures/postgres
-                      exit 1
-                  fi
-
             - name: Package tests
               run: |
                   pnpm --filter web test
                   pnpm --filter @hackkit/core test
-                  POSTGRES_TEST_URL=postgres://postgres:postgres@localhost:5432/hackkit pnpm --filter @hackkit/db-drizzle test
                   pnpm --filter @hackkit/cli test
                   pnpm --filter @hackkit/config test
                   pnpm --filter @hackkit/next test
@@ -110,13 +99,20 @@ jobs:
                   pnpm --filter @hackkit/plugin-discord test
                   pnpm --filter @hackkit/plugin-notifications-email test
 
+            - name: Prepare isolated build database
+              env:
+                  DATABASE_URL: file:.data/ci.db
+              run: |
+                  mkdir -p apps/web/.data
+                  pnpm --filter web db:migrate
+                  pnpm --filter web db:seed
+
             - name: Typecheck
               run: pnpm --filter web typecheck
 
             - name: Build web
               env:
-                  DATABASE_URL: libsql://web-ci.turso.io
-                  TURSO_AUTH_TOKEN: ci-token
+                  DATABASE_URL: file:.data/ci.db
                   NEXT_PUBLIC_APP_URL: https://web-ci.example.com
                   BETTER_AUTH_URL: https://web-ci.example.com
                   BETTER_AUTH_SECRET: ci-web-secret-that-is-at-least-32-characters
@@ -131,3 +127,6 @@ jobs:
                   DISCORD_INTERNAL_AUTH_KEY: ci-internal-auth-key
                   DISCORD_PARTICIPANT_ROLE_ID: ci-participant-role
               run: pnpm --filter web build
+
+            - name: Test production HTTP runtime
+              run: pnpm --filter web test:runtime
diff --git a/.prettierignore b/.prettierignore
index ab1ec330..b2940643 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,8 +1,5 @@
-packages/db/drizzle/meta/**
 pnpm-lock.yaml
 pnpm-workspace.yaml
 **/package.json
 *.json
-apps/web/db/schema/**
 apps/web/db/migrations/**
-packages/db-drizzle/test-fixtures/**
diff --git a/CONTEXT.md b/CONTEXT.md
index 93c03fab..923f834a 100644
--- a/CONTEXT.md
+++ b/CONTEXT.md
@@ -17,7 +17,7 @@ A replaceable component package that renders HackKit interfaces by consuming Hac
 _Avoid_: Web app, core
 
 **HackKit CLI**:
-A command-line tool for creating HackKit projects, managing plugin-provided project files, generating adapter-native schema, and explicitly seeding configured role data.
+A command-line tool for creating HackKit projects, managing plugin-provided project files, generating and explicitly applying app-owned MikroORM migrations, and explicitly seeding configured role data.
 _Avoid_: Runtime, core
 
 **HackKit Plugin**:
@@ -25,28 +25,21 @@ An extension passed to HackKit Core at creation time that may add capabilities,
 _Avoid_: App fork, core patch
 
 **Auth ID**:
-The provider-issued identifier for the authenticated person using a HackKit application.
+The Better Auth user identifier for the authenticated person using a HackKit application.
 _Avoid_: Clerk ID, internal user ID, auth subject
 
-**Auth Adapter**:
-An integration boundary that translates an authentication provider's session and profile into HackKit's Auth ID and User identity fields.
-_Avoid_: HackKit Core auth system, session store
+**Core Authentication**:
+Better Auth constructed by Core, with app-supplied secrets, providers, origins, and options. Next owns HTTP and cookie integration.
 
-**Database Adapter**:
-An integration boundary that persists HackKit's canonical data models using a concrete database technology.
-_Avoid_: App schema mapper, repository bundle
+**MikroORM Entity**:
+A native `defineEntity` definition shared by runtime and migrations. Core, plugins, and apps contribute entities before ORM initialization.
 
-**Storage Schema**:
-An adapter-neutral description of HackKit model fields, constraints, and model relationships that database adapters compile into concrete storage schemas.
-_Avoid_: Drizzle schema, SQL migration, app-owned table mapping
-
-**Drizzle Database Adapter**:
-A Database Adapter that persists HackKit's canonical data models through Drizzle ORM.
-_Avoid_: Existing app database package, app schema mapper
+**Request Scope**:
+A fresh EntityManager and domain API set associated with one request, action, job, or CLI operation. Connections are shared; managed entity state is not.
 
 **HackKit Logger**:
 A replaceable logging boundary for HackKit runtime diagnostics and operational messages, configured when creating **HackKit Core** (similar in spirit to Better Auth’s built-in logger: levels, disable switch, optional custom `log` implementation).
-_Avoid_: Legacy `error_log` tables, **Audit Log**, **Auth Adapter** session storage
+_Avoid_: Legacy `error_log` tables, **Audit Log**, authentication session storage
 
 **Log Level**:
 The minimum severity a **HackKit Logger** emits: `debug`, `info`, `warn`, or `error`.
@@ -247,49 +240,29 @@ _Avoid_: **Organiser Approval** queue, **Hackathon Capacity**, automatic accepta
 -   **HackKit CLI** runs from a **HackKit Web App** project directory (not a monorepo root) and reads that app’s `hackkit.config.ts` for plugins and database settings.
 -   **HackKit CLI** uses the same **HackKit Logger** from `hackkit.config.ts` when run from a **HackKit Web App** directory, falling back to the environment-based default **Log Level** when `logger` is omitted.
 -   **HackKit CLI** may explicitly seed configured roles into the app database, but it does not assign those roles to users.
--   **HackKit CLI** may generate a concrete adapter-native schema file from merged **Storage Schema**, but it does not generate, apply, inspect, baseline, or roll back database migrations.
+-   **HackKit CLI** explicitly generates or applies app-owned MikroORM migrations from the same entity collection as runtime. Plugin sync and application startup never apply migrations.
 -   A **HackKit Plugin** may add capabilities to a **HackKit Web App** without changing **HackKit Core** source.
 -   **HackKit Core** accepts an optional **HackKit Logger** at creation time; when omitted, a default console **HackKit Logger** applies with a configurable **Log Level** defaulting to `info` in development and `warn` in production unless overridden.
 -   **HackKit Web Apps** may replace the default **HackKit Logger** with a custom implementation (for example forwarding to a hosted logging service) without changing **HackKit Core** source.
 -   **HackKit Core** emits operational messages for significant domain APIs (such as **Hacker Registration**, **Organiser Approval**, **Hackathon Check-in**) through the **HackKit Logger** at **Log Level**s such as `info` or `debug`; this is not a separate persisted **Audit Log** model in v1.
 -   **Log Context** for those messages includes action name, outcome, **Auth ID**s, relevant record ids, and error codes on failure; it excludes PII and form payloads.
 -   **Hackathon Setting** changes are emitted through the **HackKit Logger** with **Log Context** including the actor **Auth ID** and setting key, but v1 stores only the latest setting value rather than a persisted change history.
--   **HackKit Core** receives **HackKit Plugins** through `createHackkit`.
+-   **HackKit Core** receives **HackKit Plugins** through `initializeHackkit`.
 -   **HackKit Plugins** should be configured in one place so package-specific integration details stay contained inside plugin packages.
--   **HackKit Plugins** expose storage schema contributions using **Storage Schema** without requiring every plugin to implement every database dialect.
--   **Storage Schema** can express field-level single-column references between plugin models and **HackKit Core** models.
+-   **HackKit Plugins** contribute native MikroORM entities with namespaced table names and real relations to Core entities.
 -   **HackKit Core** owns **Notification Intents** and typed notification payloads; **Notification Channel Plugins** own channel-specific destination resolution, rendering, delivery, and **Notification Delivery Attempts**.
 -   **Notification Intents** are persisted before delivery so channel plugins may process them asynchronously and retry failed **Notification Delivery Attempts**.
 -   The **Email Notification Plugin** is configured as a **HackKit Plugin**; **HackKit Core** does not send email directly.
--   **Storage Schema** uses domain property names; database adapters map them to concrete column names.
--   Database adapters derive table names from namespaced model keys using deterministic naming conventions.
--   SQLite table names use a `hackkit_` prefix followed by namespace and snake-cased model name.
--   Database adapters map **Storage Schema** field names to snake_case column names by default.
--   Database adapters translate query inputs and returned records so **HackKit Core** only sees domain property names.
--   **Storage Schema** supports static default values and symbolic dynamic defaults such as creation timestamps and generated string IDs.
--   Database adapters apply **Storage Schema** defaults before inserting records to keep behavior consistent across dialects.
--   **HackKit Core** may still set domain timestamps and IDs explicitly in application behavior.
--   **Storage Schema** distinguishes integer fields from general numeric fields.
--   **Storage Schema** supports string enum fields for constrained domain values.
--   **Storage Schema** represents arrays and structured objects as JSON fields.
--   **Storage Schema** supports field-level and composite uniqueness constraints.
--   **Storage Schema** supports simple single-field and composite non-unique indexes.
--   Persistent model descriptors combine typed model identity with **Storage Schema** so model keys and storage definitions do not drift.
--   Persistent model record types are inferred from **Storage Schema** definitions.
--   **Storage Schema** distinguishes selected record types from insert input types so defaulted fields can be optional on insert and present after persistence.
--   Database adapters accept insert input types and return selected record types derived from persistent model descriptors.
--   Public Core record types such as **User**, **Role**, and **Hacker** are inferred aliases from Core model descriptors.
--   **HackKit Core** merges its base **Storage Schema** with **HackKit Plugin** storage schemas before initializing adapter factories.
--   **HackKit Core** initializes adapter factories with plugin contributions so applications do not pass plugin config to each adapter separately.
--   An **Auth Adapter** supplies **Auth IDs** and User identity fields to a **HackKit Web App** before it calls **HackKit Core**.
+-   Core, auth, enabled plugin, and app entities are collected before initialization. Duplicate names and tables fail initialization.
+-   Native entity metadata defines constraints, relations, defaults, and inferred DTO types. SQL column names use snake_case across dialects.
+-   Core and server plugins query a scoped EntityManager directly. Domain operations retain authorization and validation.
+-   Better Auth owns identity and email. The linked HackKit profile owns editable profile and domain state; signup creates both atomically, and session reads never overwrite the profile.
+-   Each request, action, job, and CLI operation gets a fresh identity map. Public domain results are plain DTOs.
 -   The **Better Auth** integration may forward **HackKit Logger** messages through Better Auth’s own `logger` configuration so a single custom `log` implementation in `hackkit.config.ts` covers auth and **HackKit Core** output.
 -   A **User Data** onboarding flow may display the authenticated **User** while collecting **User Data**.
 -   **HackKit UI** treats authenticated **User** information passed to forms as display context, not as authorization input.
--   A **Database Adapter** persists **HackKit Core** models using HackKit-owned canonical storage shapes.
--   The **Drizzle Database Adapter** supports SQLite/libSQL and PostgreSQL through dialect-specific entrypoints.
--   The **Drizzle Database Adapter** exposes dialect-specific entrypoints so each dialect can use native Drizzle schema definitions.
--   The **Drizzle Database Adapter** generates concrete Drizzle schema from merged **Storage Schema** while Drizzle Kit remains the application's migration tool.
--   The **HackKit Web App** commits separately generated HackKit and Better Auth schema files and delegates migration generation and application entirely to Drizzle Kit.
+-   **HackKit Web Apps** commit reviewed MikroORM migrations and snapshots for PostgreSQL, MySQL, and SQLite/libSQL. Generation, application, and seeding are explicit release steps.
+-   This redesign targets fresh databases; deployed data and existing accounts require a separately designed migration.
 -   A **Blob Storage Adapter** stores files outside **HackKit Core**; **HackKit Core** stores only **Stored File References** supplied by the **HackKit Web App**.
 -   **HackKit Web Apps** choose a **Blob Storage Adapter** implementation via configuration; local filesystem adapters suit development, S3-compatible adapters suit production.
 -   A **User** is identified by exactly one **Auth ID** in a HackKit application.
@@ -313,7 +286,7 @@ _Avoid_: **Organiser Approval** queue, **Hackathon Capacity**, automatic accepta
 -   **Hackathon Capacity**, not **Group** membership, controls how many **Hackers** may receive **Organiser Approval**.
 -   Organizers and judges are **Users** with **Roles**, not **Hackers**, unless they are also competing.
 -   A **User** has one **Role** in v1.
--   Completing **Hacker Registration** assigns the hackathon’s default competitor **Role** from `hackkit.config.ts`; auth sign-up and `ensureUser` do not assign a **Role** by themselves.
+-   Completing **Hacker Registration** assigns the hackathon’s default competitor **Role** from `hackkit.config.ts`; auth sign-up do not assign a **Role** by themselves.
 -   A **Role** grants zero or more **Permissions**.
 -   **Permissions** use namespaced keys so plugins can add capabilities without collisions.
 -   **Admin Permission** is represented by `core.admin`.
@@ -394,6 +367,6 @@ _Avoid_: **Organiser Approval** queue, **Hackathon Capacity**, automatic accepta
 -   Admin experiences should surface when the current **Hacker** or approved **Hacker** count exceeds the configured **Maximum Registrations** or **Hackathon Capacity**.
 -   Resume on **Hacker Registration** — resolved: optional `resumeUrl` only; no legacy “no resume provided” sentinel URL.
 -   **Hacker** `group` assignment — resolved: **Group** is a HackKit participant cohort assigned at **Organiser Approval** time by round-robin distribution unless an organizer has already assigned one; it is separate from **Team** and may map to Discord roles through a plugin.
--   Default competitor **Role** on onboarding — resolved: applied when **Hacker Registration** completes, not at auth/`ensureUser` (legacy-aligned).
+-   Default competitor **Role** on onboarding — resolved: applied when **Hacker Registration** completes, not at auth signup (legacy-aligned).
 -   **Hacker** vs **User** for **Event Pass** could mean competitors only — resolved: attendance uses **Auth ID** for any **User**, matching the original HackKit convention that all participants share one identity record.
 -   Legacy storage used one scan row per user and event with an incrementing count — resolved: HackKit Core stores each scan as a separate **Event Scan** row with its own identifier.
diff --git a/README.md b/README.md
index 1e62cc23..cf74a5da 100644
--- a/README.md
+++ b/README.md
@@ -12,9 +12,14 @@
 
 -   TypeScript
 -   Next.js
--   Drizzle ORM
+-   MikroORM
+-   Better Auth
 -   Tailwind CSS
 
+## Development
+
+See [the reference app setup](apps/web/README.md) and [the persistence decision](docs/adr/0013-mikroorm-and-core-auth.md). This migration targets fresh databases.
+
 ## Join The Team
 
 Want to help us build HackKit? Please reach out to us at `tech@acmutsa.org` or join us on [Discord](https://go.acmutsa.org/projectsdiscord)!
diff --git a/apps/web/README.md b/apps/web/README.md
index e53d549d..f1a256a8 100644
--- a/apps/web/README.md
+++ b/apps/web/README.md
@@ -1,199 +1,86 @@
-# web
+# HackKit reference web app
 
-Production-ready **HackKit Web App** for Better Auth, libSQL/Turso, HackKit UI flows, Teams, RSVP, Discord verification, and notifications.
+Next.js app using MikroORM, Core-owned Better Auth, HackKit UI, Teams, Discord verification, and notifications. This migration targets a fresh database. Existing databases and user accounts are not converted.
 
 ## Local setup
 
-Run every command below from the repository root.
+Use Node.js 22.17 or newer and pnpm 8.3.1. Run these commands from the repository root:
 
-### 1. Install prerequisites and dependencies
+1. Install dependencies with `pnpm install`.
+2. Build workspace packages with `pnpm exec turbo run build --filter=web^...`.
+3. Sync plugin routes and actions with `pnpm --filter web sync`.
+4. Apply committed migrations with `pnpm --filter web db:migrate`.
+5. Insert configured roles with `pnpm --filter web db:seed`.
+6. Start Next.js with `pnpm --filter web dev`.
 
--   Node.js 20.x
--   pnpm 8.3.1
+Development defaults use `http://localhost:3000`, SQLite at `apps/web/.data/web.db`, and local blob storage. OAuth, email, and Discord providers are optional locally. The runtime does not migrate or seed on startup. Plugin sync only updates routes, actions, and `hackkit.lock`.
 
-The repository enforces pnpm through `preinstall`.
+After signup, bootstrap an owner explicitly by assigning `core.owner` to that user's `role_id` in `core_user`, selected by `id`. Better Auth's `user.id` is the canonical ID. The runtime does not infer ownership from email.
 
-```bash
-pnpm install
-```
+`pnpm --filter web db:reset` drops registered tables and migration history in the selected local SQLite database, then migrates and seeds. It refuses production and non-SQLite drivers. Never use it for data you need to retain.
 
-### 2. Build the workspace dependencies
+## Database selection
 
-Build the packages that `web` imports before running commands that use the `hackkit` CLI:
+| Driver                 | DATABASE_URL                               | HACKKIT_DATABASE_DIALECT           |
+| ---------------------- | ------------------------------------------ | ---------------------------------- |
+| SQLite                 | `file:.data/web.db`                        | `sqlite` (default for local paths) |
+| local libSQL           | `file:.data/web.db`                        | `libsql` (explicit)                |
+| network libSQL / Turso | `libsql://...` or `https://...`            | `libsql` (inferred)                |
+| PostgreSQL             | `postgresql://user:password@host/database` | `postgresql` (inferred)            |
+| MySQL                  | `mysql://user:password@host/database`      | `mysql` (inferred)                 |
 
-```bash
-pnpm exec turbo run build --filter=web^...
-```
+Set `TURSO_AUTH_TOKEN` when the libSQL endpoint requires authentication. Driver options live in [lib/database-config.ts](lib/database-config.ts).
 
-This builds the CLI, database adapter, and other workspace packages that the app imports. `dev` repeats this dependency build.
+## Entity and migration workflow
 
-### 3. Configure local integrations (optional)
+Core, Better Auth, installed plugins (including disabled plugins), and application entities form one native MikroORM registry. Add app-owned `defineEntity` definitions through `entities` in `hackkit.config.ts`; plugins expose an `entities` array. Runtime and app migration scripts use the same registry. Auth plugins requiring extra tables or fields must declare them before initialization; undeclared schema fails early.
 
-No environment file is required for a basic local run. Development defaults use:
+Migrations and snapshots are committed under `db/migrations/postgresql`, `db/migrations/mysql`, and `db/migrations/sqlite`. libSQL uses the SQLite chain. After changing entities:
 
--   `http://localhost:3000` for the app and Better Auth URLs
--   `file:.data/web.db` for the database
--   local storage in `.data/uploads`
--   no email provider and no Discord bot role-sync provider
+1. Select a disposable development database for the dialect using the variables above.
+2. Run `pnpm --filter web db:generate --name describe-change`.
+3. Review the generated TypeScript migration and snapshot. Repeat generation for the other dialects.
+4. Apply with `pnpm --filter web db:migrate` and validate against fresh databases.
+5. Commit every dialect's reviewed migration and snapshot.
 
-OAuth, email delivery, S3 storage, Turso, and Discord bot role sync are optional locally; configure them only when testing those integrations.
+Set `enabled: false` on a registered plugin to disable behavior while keeping its schema and data. Removing it can generate table drops. Review data retention before applying them. `db:seed` only inserts missing configured role IDs; it does not update existing roles or assign them to users.
 
-### 4. Generate app-owned files and apply migrations
+The database commands now use application-owned utility scripts, independently of the CLI. Use `db:status`, `db:check`, staged `db:migrate --to`, `db:rollback`, and `db:generate --blank` for upgrades. See [the migration guide](../../docs/guides/database-migrations.md) for exact commands, data transformations, MySQL recovery, and plugin retention.
 
-Sync plugin-owned project files, apply the committed migration chain, then add the roles declared in `hackkit.config.ts`:
+## Authentication and request scope
 
-```bash
-pnpm --filter web sync
-pnpm --filter web db:migrate
-pnpm --filter web db:seed
-```
+[lib/auth-options.ts](lib/auth-options.ts) supplies secrets, origins, and OAuth providers. Core owns Better Auth construction, native entities, and the pinned community adapter. Better Auth identity and HackKit profile fields share the canonical `core_user` row.
 
-`sync` only updates plugin routes, actions, and `hackkit.lock`. It does not generate database schema or connect to a database.
+[lib/runtime.ts](lib/runtime.ts) initializes shared connections and registers a function that creates request-scoped domain APIs. Next owns cookies, headers, guards, and redirects. Server actions return plain DTOs. Browser code uses `@hackkit/core/client`; it does not import the ORM.
 
-`db:seed` is idempotent: it inserts configured roles that do not already exist and skips existing role IDs. The application runtime never seeds roles during startup or page requests.
+## Production configuration
 
-Use `db:reset` when you want to discard and recreate the configured local file database:
+Set explicit `DATABASE_URL`, `NEXT_PUBLIC_APP_URL`, `BETTER_AUTH_URL`, and `BETTER_AUTH_SECRET` (at least 32 characters). Configure `BETTER_AUTH_TRUSTED_ORIGINS` as a comma-separated list when needed. The app's production checks also require:
 
-```bash
-pnpm --filter web db:reset
-```
+-   `HACKKIT_BLOB_ADAPTER=s3`, bucket, region, access key, and secret key; set `HACKKIT_S3_ENDPOINT` for compatible stores.
+-   `DISCORD_GUILD_ID`, `DISCORD_BOT_API_URL`, `DISCORD_INTERNAL_AUTH_KEY`, and `DISCORD_PARTICIPANT_ROLE_ID` (or role name).
+-   Optional email through `HACKKIT_EMAIL_PROVIDER=resend` plus `RESEND_API_KEY`, or `smtp` plus SMTP settings.
 
-`db:reset` refuses remote URLs, removes the selected local database and its WAL/SHM files, applies committed migrations, and runs `db:seed`.
+See [env.ts](env.ts) for exact variable names. Database storage must persist across application restarts. Apply migrations and seed as explicit release steps. Builds must have valid configuration but do not apply schema changes.
 
-### 5. Start the app
+## Validation
 
-```bash
-pnpm --filter web dev
-```
+Build dependencies before tests. Run `pnpm --filter web test` for committed migrations, auth, and existing-data upgrade/replay checks with SQLite/local libSQL. `pnpm --filter web test:db-workflow` verifies that sync does not connect and reset affects only its selected file. `pnpm --filter web verify` syncs generated files, typechecks, and builds Next.js. After building, `pnpm --filter web test:runtime` starts the production server on loopback port 33017 with an isolated temporary SQLite database, verifies HTTP auth and access control, then stops the server and removes its test data.
 
-Open [http://localhost:3000](http://localhost:3000) and sign up. To bootstrap the first owner for now, edit that user's `roleId` directly in `core_user`:
+`pnpm --filter web test:db-matrix` always runs SQLite and local libSQL. For the complete matrix, supply URLs for **empty, disposable** databases:
 
-```sql
-UPDATE core_user
-SET roleId = 'core.owner'
-WHERE authId = '<better-auth-user-id>';
-```
+-   `HACKKIT_TEST_POSTGRESQL_URL`
+-   `HACKKIT_TEST_MYSQL_URL`
+-   `HACKKIT_TEST_LIBSQL_URL` (a real HTTP/libSQL server)
+-   `HACKKIT_REQUIRE_DATABASE_MATRIX=1` to fail if any URL is missing.
 
-The runtime does not infer ownership from an email address or auth ID.
+The matrix writes test accounts and domain records; it never drops the target database. Use fresh databases for every run. CI requires all five targets, checks schema agreement and existing-data upgrades, runs package tests, typechecks, and builds Next.js. External OAuth, hosted Turso credentials/TLS, and real email/Discord delivery require deployment-specific validation.
 
-### 6. Optional local checks
+## Architecture
 
-Run the full app verification path before handing off a change:
+-   [Next integration guide](../../docs/guides/next-integration.md)
+-   [MikroORM and Core auth decision](../../docs/adr/0013-mikroorm-and-core-auth.md)
+-   [hackkit.config.ts](hackkit.config.ts): plugins, database, auth, settings, and seed roles.
+-   [db/migrations](db/migrations): reviewed app-owned migrations.
 
-```bash
-pnpm --filter web verify
-```
-
-`verify` runs:
-
-```bash
-pnpm sync
-pnpm typecheck
-pnpm build
-```
-
-From the repo root, those map to the filtered `web` scripts. `typecheck` also builds `@hackkit/cli` first because the `hackkit` binary is needed by app scripts.
-
-## Schema and migration workflow
-
-HackKit, Better Auth, and application schemas are separate files under `db/schema`. Regenerate only the owner that changed:
-
-```bash
-pnpm --filter web schema:generate # Core or plugin storage changed
-pnpm --filter web auth:schema     # Better Auth config/plugins changed
-```
-
-Both generated files are committed. After reviewing their diffs, let Drizzle generate and apply the migration:
-
-```bash
-pnpm --filter web db:generate --name=describe-change
-pnpm --filter web db:migrate
-```
-
-Review and commit the generated SQL and metadata. HackKit never generates or applies these migrations. `dev` does not inspect or initialize the database; a missing migration surfaces through the first database operation.
-
-## Build dependency graph
-
-Build every workspace package that web transitively requires before
-building the app:
-
-```bash
-pnpm exec turbo run build --filter=web^...
-pnpm --filter web build
-```
-
-Turbo derives that dependency set from `apps/web/package.json`; add every
-runtime or build-time workspace import there. CI runs the same graph command
-before its production-configured web build.
-
-## Production setup
-
-Production requires remote persistence and explicit auth, storage, and Discord configuration:
-
-```bash
-DATABASE_URL=libsql://...
-TURSO_AUTH_TOKEN=...
-NEXT_PUBLIC_APP_URL=https://your-app.example.com
-BETTER_AUTH_URL=https://your-app.example.com
-BETTER_AUTH_SECRET=at-least-32-characters
-BETTER_AUTH_TRUSTED_ORIGINS=https://your-app.example.com
-HACKKIT_BLOB_ADAPTER=s3
-HACKKIT_S3_BUCKET=...
-HACKKIT_S3_REGION=...
-HACKKIT_S3_ENDPOINT=...
-HACKKIT_S3_ACCESS_KEY_ID=...
-HACKKIT_S3_SECRET_ACCESS_KEY=...
-DISCORD_GUILD_ID=...
-DISCORD_BOT_API_URL=https://your-discord-bot.example.com
-DISCORD_INTERNAL_AUTH_KEY=...
-DISCORD_PARTICIPANT_ROLE_ID=...
-```
-
-Use `DISCORD_PARTICIPANT_ROLE_NAME` instead of `DISCORD_PARTICIPANT_ROLE_ID` only when role IDs are not available. Optional email delivery is configured with `HACKKIT_EMAIL_PROVIDER=resend` plus `RESEND_API_KEY`, or `HACKKIT_EMAIL_PROVIDER=smtp` plus `SMTP_HOST` and SMTP credentials.
-
-Run `pnpm --filter web db:migrate` and `pnpm --filter web db:seed` as release steps before starting the new production version. Do not run migrations or seed roles during the Next.js build or application startup.
-
-## Next integration path
-
-This app follows the single `@hackkit/next` integration path for runtime setup, page guards, Core mutations, and HackKit UI provider actions. See:
-
--   [`packages/next/README.md`](../../packages/next/README.md) — package API and wiring recipe
--   [`docs/guides/next-integration.md`](../../docs/guides/next-integration.md) — full guide and drift checks
-
-## Release checks
-
-Run the same app checks locally before deploying:
-
-```bash
-pnpm --filter web sync
-pnpm --filter web schema:generate
-pnpm --filter web auth:schema
-pnpm --filter web db:generate
-pnpm --filter web db:migrate
-pnpm --filter web db:seed
-pnpm --filter web test
-pnpm --filter web test:db-workflow
-pnpm --filter @hackkit/core test
-pnpm --filter @hackkit/db-drizzle test
-pnpm --filter @hackkit/cli test
-pnpm --filter @hackkit/config test
-pnpm --filter @hackkit/next test
-pnpm --filter @hackkit/plugin-teams test
-pnpm --filter @hackkit/plugin-discord test
-pnpm --filter @hackkit/plugin-notifications-email test
-pnpm --filter web typecheck
-pnpm --filter web build
-```
-
-CI regenerates committed schema, validates and applies the web migration chain, runs a Better Auth flow against the generated auth schema, verifies database-command isolation, applies the committed PostgreSQL adapter migration fixture, and builds the full web dependency graph.
-
-## Server Actions
-
-UI mutations live on the Next runtime (`runtime.mutations` from `createHackKitMutations`). Named server actions and the `hackKitUIActions` provider map ship from `@hackkit/next` — [`app/providers.tsx`](app/providers.tsx) passes `hackKitUIActions` to `HackKitUIProvider`. Plugin actions remain generated in [`app/hackkit-plugin-actions.ts`](app/hackkit-plugin-actions.ts) by `hackkit plugin sync`.
-
-## Configuration
-
--   [`hackkit.config.ts`](hackkit.config.ts) — plugins, User Data options, Event Types, and the explicit database adapter
--   [`lib/runtime.ts`](lib/runtime.ts) — `createHackkitRuntimeFromConfig` composition root; use `getPageGuards()` for layouts
--   [`db/schema`](db/schema) — separately generated HackKit and Better Auth schema files
--   [`db/migrations`](db/migrations) — app-owned Drizzle migrations
+UI mutations and `hackKitUIActions` ship from `@hackkit/next`. Plugin server actions in `app/hackkit-plugin-actions.ts` are generated by `hackkit plugin sync` and share the same request runtime.
diff --git a/apps/web/app/admin/events/[id]/edit/page.tsx b/apps/web/app/admin/events/[id]/edit/page.tsx
index 87eb2b07..92443ebe 100644
--- a/apps/web/app/admin/events/[id]/edit/page.tsx
+++ b/apps/web/app/admin/events/[id]/edit/page.tsx
@@ -17,7 +17,7 @@ export default async function EditEventPage({
 	const hackkit = await getHackkit();
 	const event = await hackkit.events.getEvent({
 		eventId: params.id,
-		actorAuthId: principal.user.authId,
+		actorAuthId: principal.user.id,
 	});
 
 	if (!event) notFound();
@@ -25,7 +25,9 @@ export default async function EditEventPage({
 	return (
 		<main className="min-h-screen px-6 py-10">
 			<div className="mx-auto max-w-3xl space-y-6">
-				<h1 className="text-3xl font-bold tracking-tight">Edit event</h1>
+				<h1 className="text-3xl font-bold tracking-tight">
+					Edit event
+				</h1>
 				<EventAdminForm
 					eventId={event.id}
 					eventTypes={hackkit.events.options}
diff --git a/apps/web/app/admin/events/page.tsx b/apps/web/app/admin/events/page.tsx
index 8ee90d89..d21b075b 100644
--- a/apps/web/app/admin/events/page.tsx
+++ b/apps/web/app/admin/events/page.tsx
@@ -12,7 +12,7 @@ export default async function AdminEventsPage() {
 	);
 	const hackkit = await getHackkit();
 	const events = await hackkit.events.listEvents({
-		actorAuthId: principal.user.authId,
+		actorAuthId: principal.user.id,
 	});
 
 	return (
@@ -20,7 +20,9 @@ export default async function AdminEventsPage() {
 			<div className="mx-auto max-w-5xl space-y-6">
 				<div className="flex flex-wrap items-center justify-between gap-4">
 					<div>
-						<h1 className="text-3xl font-bold tracking-tight">Events</h1>
+						<h1 className="text-3xl font-bold tracking-tight">
+							Events
+						</h1>
 						<p className="text-muted-foreground">
 							Manage the hackathon schedule.
 						</p>
diff --git a/apps/web/app/admin/page.tsx b/apps/web/app/admin/page.tsx
index ce940c4e..c439891b 100644
--- a/apps/web/app/admin/page.tsx
+++ b/apps/web/app/admin/page.tsx
@@ -11,7 +11,9 @@ export default async function AdminOverviewPage() {
 	return (
 		<main className="space-y-6">
 			<div>
-				<h1 className="text-3xl font-bold tracking-tight">Admin Overview</h1>
+				<h1 className="text-3xl font-bold tracking-tight">
+					Admin Overview
+				</h1>
 				<p className="text-muted-foreground">
 					Registration, approval, suspension, and check-in summary.
 				</p>
diff --git a/apps/web/app/admin/roles/page.tsx b/apps/web/app/admin/roles/page.tsx
index 58775578..77ef4780 100644
--- a/apps/web/app/admin/roles/page.tsx
+++ b/apps/web/app/admin/roles/page.tsx
@@ -17,7 +17,10 @@ export default async function AdminRolesPage() {
 					Manage admin roles and permissions.
 				</p>
 			</div>
-			<AdminRolesPanel roles={roles} permissions={Object.values(CorePermission)} />
+			<AdminRolesPanel
+				roles={roles}
+				permissions={Object.values(CorePermission)}
+			/>
 		</main>
 	);
 }
diff --git a/apps/web/app/admin/scanner/[eventId]/page.tsx b/apps/web/app/admin/scanner/[eventId]/page.tsx
index 6ddf73e1..288d61d6 100644
--- a/apps/web/app/admin/scanner/[eventId]/page.tsx
+++ b/apps/web/app/admin/scanner/[eventId]/page.tsx
@@ -18,7 +18,7 @@ export default async function EventScannerPage({
 	const hackkit = await getHackkit();
 	const event = await hackkit.events.getEvent({
 		eventId: params.eventId,
-		actorAuthId: principal.user.authId,
+		actorAuthId: principal.user.id,
 	});
 
 	if (!event) notFound();
@@ -27,7 +27,9 @@ export default async function EventScannerPage({
 		<main className="min-h-screen px-6 py-10">
 			<div className="mx-auto max-w-3xl space-y-6">
 				<div className="flex items-center justify-between gap-4">
-					<h1 className="text-2xl font-bold tracking-tight">Event scanner</h1>
+					<h1 className="text-2xl font-bold tracking-tight">
+						Event scanner
+					</h1>
 					<Link
 						href="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/admin/events"
 						className="text-sm text-primary hover:underline"
diff --git a/apps/web/app/admin/settings/page.tsx b/apps/web/app/admin/settings/page.tsx
index c778876b..5f3d4935 100644
--- a/apps/web/app/admin/settings/page.tsx
+++ b/apps/web/app/admin/settings/page.tsx
@@ -6,9 +6,13 @@ export const dynamic = "force-dynamic";
 
 export default async function AdminSettingsPage() {
 	const guards = await getPageGuards();
-	const principal = await guards.requirePermission(CorePermission.SettingsManage);
+	const principal = await guards.requirePermission(
+		CorePermission.SettingsManage,
+	);
 	const { hackkit } = await getRuntime();
-	const settings = await hackkit.settings.list({ actorAuthId: principal.user.authId });
+	const settings = await hackkit.settings.list({
+		actorAuthId: principal.user.id,
+	});
 
 	return (
 		<main className="mx-auto max-w-4xl space-y-6 px-6 py-10">
diff --git a/apps/web/app/admin/users/[authId]/page.tsx b/apps/web/app/admin/users/[authId]/page.tsx
index 061ac0d1..03d390f9 100644
--- a/apps/web/app/admin/users/[authId]/page.tsx
+++ b/apps/web/app/admin/users/[authId]/page.tsx
@@ -22,9 +22,12 @@ export default async function AdminUserDetailPage({
 	return (
 		<main className="space-y-6">
 			<div>
-				<h1 className="text-3xl font-bold tracking-tight">User Detail</h1>
+				<h1 className="text-3xl font-bold tracking-tight">
+					User Detail
+				</h1>
 				<p className="text-muted-foreground">
-					Account, registration, approval, suspension, and role details.
+					Account, registration, approval, suspension, and role
+					details.
 				</p>
 			</div>
 			<AdminUserDetail record={record} roles={roles} />
diff --git a/apps/web/app/admin/users/page.tsx b/apps/web/app/admin/users/page.tsx
index c7f467ad..da56a879 100644
--- a/apps/web/app/admin/users/page.tsx
+++ b/apps/web/app/admin/users/page.tsx
@@ -13,7 +13,8 @@ export default async function AdminUsersPage() {
 			<div>
 				<h1 className="text-3xl font-bold tracking-tight">Users</h1>
 				<p className="text-muted-foreground">
-					Review registrations, approvals, roles, suspensions, and check-ins.
+					Review registrations, approvals, roles, suspensions, and
+					check-ins.
 				</p>
 			</div>
 			<AdminUsersTable users={users} exportHref="/api/admin/export" />
diff --git a/apps/web/app/api/admin/export/route.ts b/apps/web/app/api/admin/export/route.ts
index 4a20f69f..3ffa24d7 100644
--- a/apps/web/app/api/admin/export/route.ts
+++ b/apps/web/app/api/admin/export/route.ts
@@ -1,3 +1,4 @@
+import { HackKitError } from "@hackkit/core";
 import { NextResponse } from "next/server";
 import { getAuthSession } from "@/lib/auth";
 import { getRuntime } from "@/lib/runtime";
@@ -33,9 +34,17 @@ export async function GET() {
 
 	const runtime = await getRuntime();
 	const actor = await runtime.getCurrentUser();
-	const rows = await runtime.hackkit.admin.exportUsers({
-		actorAuthId: actor.authId,
-	});
+	const rows = await runtime.hackkit.admin
+		.exportUsers({
+			actorAuthId: actor.id,
+		})
+		.catch((error: unknown) => {
+			if (error instanceof HackKitError && error.code === "FORBIDDEN")
+				return null;
+			throw error;
+		});
+	if (!rows)
+		return NextResponse.json({ error: "Forbidden" }, { status: 403 });
 	const csv = toCsv(rows);
 	const timestamp = new Date().toISOString().replaceAll(":", "-");
 
diff --git a/apps/web/app/api/auth/[...all]/route.ts b/apps/web/app/api/auth/[...all]/route.ts
index 5b67b064..ac24ae8c 100644
--- a/apps/web/app/api/auth/[...all]/route.ts
+++ b/apps/web/app/api/auth/[...all]/route.ts
@@ -1,4 +1,9 @@
-import { auth } from "@/lib/auth";
-import { toNextJsHandler } from "better-auth/next-js";
+import { getAuth } from "@/lib/auth";
 
-export const { GET, POST } = toNextJsHandler(auth);
+export async function GET(request: Request) {
+	return (await getAuth()).handler(request);
+}
+
+export async function POST(request: Request) {
+	return (await getAuth()).handler(request);
+}
diff --git a/apps/web/app/api/files/upload/route.ts b/apps/web/app/api/files/upload/route.ts
index 4e6cace2..dfae569f 100644
--- a/apps/web/app/api/files/upload/route.ts
+++ b/apps/web/app/api/files/upload/route.ts
@@ -32,7 +32,7 @@ export async function PUT(request: Request): Promise<NextResponse> {
 	}
 
 	const filePath = await storage.ensureDirectoryForKey(key);
-	const body = Buffer.from(await request.arrayBuffer());
+	const body = new Uint8Array(await request.arrayBuffer());
 	await writeFile(filePath, body);
 
 	return new NextResponse(null, { status: 204 });
diff --git a/apps/web/app/api/files/view/route.ts b/apps/web/app/api/files/view/route.ts
index 1529915c..618a59b4 100644
--- a/apps/web/app/api/files/view/route.ts
+++ b/apps/web/app/api/files/view/route.ts
@@ -20,11 +20,11 @@ async function canViewFile(key: string): Promise<boolean> {
 
 	const runtime = await getRuntime();
 	const currentUser = await runtime.getCurrentUser();
-	const hacker = await runtime.hackkit.hackers.getHacker(currentUser.authId);
+	const hacker = await runtime.hackkit.hackers.getHacker(currentUser.id);
 	if (hacker?.resumeUrl === storedFileReferenceForKey(key)) return true;
 
 	return runtime.hackkit.accessControl.hasPermission(
-		currentUser.authId,
+		currentUser.id,
 		CorePermission.HackersView,
 	);
 }
@@ -56,12 +56,8 @@ export async function GET(request: Request): Promise<NextResponse> {
 		}
 		const body =
 			result.body instanceof Uint8Array
-				? result.body
-				: Buffer.isBuffer(result.body)
-					? result.body
-					: Buffer.from(
-							await new Response(result.body).arrayBuffer(),
-						);
+				? Uint8Array.from(result.body).buffer
+				: await new Response(result.body).arrayBuffer();
 		return new NextResponse(body, {
 			headers: {
 				"Content-Type":
diff --git a/apps/web/app/app-bar.tsx b/apps/web/app/app-bar.tsx
index fd187bf7..55c9035d 100644
--- a/apps/web/app/app-bar.tsx
+++ b/apps/web/app/app-bar.tsx
@@ -3,6 +3,7 @@ import { CorePermission } from "@hackkit/core";
 import { getAuthSession } from "@/lib/auth";
 import { getCurrentUser, getRuntime } from "@/lib/runtime";
 import { publicSiteConfig } from "@/lib/public-site-config";
+import { getEnabledSiteLinks } from "@/lib/plugin-navigation";
 import { ProfileMenu } from "./profile-menu";
 
 async function getIsAdmin(authId: string) {
@@ -16,7 +17,7 @@ async function getIsAdmin(authId: string) {
 export async function AppBar() {
 	const session = await getAuthSession();
 	const currentUser = session ? await getCurrentUser() : null;
-	const isAdmin = currentUser ? await getIsAdmin(currentUser.authId) : false;
+	const isAdmin = currentUser ? await getIsAdmin(currentUser.id) : false;
 
 	return (
 		<header className="sticky top-0 z-40 border-b bg-background/95 backdrop-blur supports-[backdrop-filter]:bg-background/80">
@@ -26,10 +27,10 @@ export async function AppBar() {
 				</Link>
 				{session ? (
 					<nav className="flex flex-wrap items-center justify-end gap-4 text-sm">
-						{[
+						{getEnabledSiteLinks([
 							...publicSiteConfig.nav.public,
 							...publicSiteConfig.nav.participant,
-						].map((item) => (
+						]).map((item) => (
 							<Link
 								key={item.href}
 								href={item.href}
@@ -41,7 +42,10 @@ export async function AppBar() {
 						<ProfileMenu
 							name={session.user.name}
 							email={session.user.email}
-							image={currentUser?.profilePhotoUrl ?? session.user.image}
+							image={
+								currentUser?.profilePhotoUrl ??
+								session.user.image
+							}
 							isAdmin={isAdmin}
 						/>
 					</nav>
@@ -56,7 +60,10 @@ export async function AppBar() {
 								{item.label}
 							</Link>
 						))}
-						<Link href="/sign-in" className="text-muted-foreground hover:text-foreground">
+						<Link
+							href="/sign-in"
+							className="text-muted-foreground hover:text-foreground"
+						>
 							Sign in
 						</Link>
 						<Link
diff --git a/apps/web/app/dashboard/page.tsx b/apps/web/app/dashboard/page.tsx
index 5524dc0b..973ef0d1 100644
--- a/apps/web/app/dashboard/page.tsx
+++ b/apps/web/app/dashboard/page.tsx
@@ -3,6 +3,7 @@ import {
 	ParticipantDashboard,
 } from "@hackkit/ui";
 import { publicSiteConfig } from "@/lib/public-site-config";
+import { getEnabledSiteLinks } from "@/lib/plugin-navigation";
 import { getHackkit } from "@/lib/runtime";
 import {
 	getCompetitorOnboardingState,
@@ -27,9 +28,7 @@ export default async function DashboardPage() {
 		? await hackkit.roles.getRole(currentUser.roleId)
 		: null;
 	const participantName =
-		[currentUser.firstName, currentUser.lastName].filter(Boolean).join(" ") ||
-		currentUser.hackTag ||
-		"participant";
+		currentUser.name || currentUser.hackTag || "participant";
 
 	return (
 		<ParticipantDashboard
@@ -40,9 +39,14 @@ export default async function DashboardPage() {
 			requireApproval={requireApproval}
 			approved={currentUser.isApproved}
 			primaryActions={publicSiteConfig.dashboard.primaryActions}
-			resourceLinks={publicSiteConfig.dashboard.resourceLinks}
+			resourceLinks={getEnabledSiteLinks(
+				publicSiteConfig.dashboard.resourceLinks,
+			)}
 			statusItems={[
-				{ label: "HackTag", value: currentUser.hackTag ?? "Not claimed" },
+				{
+					label: "HackTag",
+					value: currentUser.hackTag ?? "Not claimed",
+				},
 				{
 					label: "Profile",
 					value: userData ? "Complete" : "Needs information",
@@ -56,7 +60,9 @@ export default async function DashboardPage() {
 				nextHref
 					? {
 							nextHref,
-							progress: <CompetitorOnboardingProgress steps={steps} />,
+							progress: (
+								<CompetitorOnboardingProgress steps={steps} />
+							),
 						}
 					: undefined
 			}
diff --git a/apps/web/app/globals.css b/apps/web/app/globals.css
index c9528316..e0ea2ecc 100644
--- a/apps/web/app/globals.css
+++ b/apps/web/app/globals.css
@@ -55,4 +55,4 @@
 	body {
 		@apply bg-background text-foreground;
 	}
-}
\ No newline at end of file
+}
diff --git a/apps/web/app/hackkit-plugin-actions.ts b/apps/web/app/hackkit-plugin-actions.ts
index 2239d3ba..6d8e8808 100644
--- a/apps/web/app/hackkit-plugin-actions.ts
+++ b/apps/web/app/hackkit-plugin-actions.ts
@@ -3,48 +3,72 @@
 // @hackkit-generated — do not edit
 
 import { getRuntime } from "@/lib/runtime";
-import { createTeamsActions } from "@hackkit/plugin-teams";
-import { createDiscordActions } from "@hackkit/plugin-discord";
+import { createTeamsActions } from "@hackkit/plugin-teams/actions";
+import { createDiscordActions } from "@hackkit/plugin-discord/actions";
 
-const teamsActionsPromise = getRuntime().then((runtime) =>
-	createTeamsActions(runtime),
-);
-
-export async function createTeam(...args: Parameters<Awaited<ReturnType<typeof createTeamsActions>>["createTeam"]>) {
-	const actions = await teamsActionsPromise;
+export async function createTeam(
+	...args: Parameters<
+		Awaited<ReturnType<typeof createTeamsActions>>["createTeam"]
+	>
+) {
+	const actions = await createTeamsActions(await getRuntime());
 	return actions.createTeam(...args);
 }
 
-export async function inviteToTeam(...args: Parameters<Awaited<ReturnType<typeof createTeamsActions>>["inviteToTeam"]>) {
-	const actions = await teamsActionsPromise;
+export async function inviteToTeam(
+	...args: Parameters<
+		Awaited<ReturnType<typeof createTeamsActions>>["inviteToTeam"]
+	>
+) {
+	const actions = await createTeamsActions(await getRuntime());
 	return actions.inviteToTeam(...args);
 }
 
-export async function respondToInvite(...args: Parameters<Awaited<ReturnType<typeof createTeamsActions>>["respondToInvite"]>) {
-	const actions = await teamsActionsPromise;
+export async function respondToInvite(
+	...args: Parameters<
+		Awaited<ReturnType<typeof createTeamsActions>>["respondToInvite"]
+	>
+) {
+	const actions = await createTeamsActions(await getRuntime());
 	return actions.respondToInvite(...args);
 }
 
-export async function leaveTeam(...args: Parameters<Awaited<ReturnType<typeof createTeamsActions>>["leaveTeam"]>) {
-	const actions = await teamsActionsPromise;
+export async function leaveTeam(
+	...args: Parameters<
+		Awaited<ReturnType<typeof createTeamsActions>>["leaveTeam"]
+	>
+) {
+	const actions = await createTeamsActions(await getRuntime());
 	return actions.leaveTeam(...args);
 }
 
-export async function removeMember(...args: Parameters<Awaited<ReturnType<typeof createTeamsActions>>["removeMember"]>) {
-	const actions = await teamsActionsPromise;
+export async function removeMember(
+	...args: Parameters<
+		Awaited<ReturnType<typeof createTeamsActions>>["removeMember"]
+	>
+) {
+	const actions = await createTeamsActions(await getRuntime());
 	return actions.removeMember(...args);
 }
 
-const discordActionsPromise = getRuntime().then((runtime) =>
-	createDiscordActions(runtime),
-);
-
-export async function confirmDiscordVerification(...args: Parameters<Awaited<ReturnType<typeof createDiscordActions>>["confirmDiscordVerification"]>) {
-	const actions = await discordActionsPromise;
+export async function confirmDiscordVerification(
+	...args: Parameters<
+		Awaited<
+			ReturnType<typeof createDiscordActions>
+		>["confirmDiscordVerification"]
+	>
+) {
+	const actions = await createDiscordActions(await getRuntime());
 	return actions.confirmDiscordVerification(...args);
 }
 
-export async function syncDiscordMemberRoles(...args: Parameters<Awaited<ReturnType<typeof createDiscordActions>>["syncDiscordMemberRoles"]>) {
-	const actions = await discordActionsPromise;
+export async function syncDiscordMemberRoles(
+	...args: Parameters<
+		Awaited<
+			ReturnType<typeof createDiscordActions>
+		>["syncDiscordMemberRoles"]
+	>
+) {
+	const actions = await createDiscordActions(await getRuntime());
 	return actions.syncDiscordMemberRoles(...args);
 }
diff --git a/apps/web/app/layout.tsx b/apps/web/app/layout.tsx
index 0f35084b..526d48b1 100644
--- a/apps/web/app/layout.tsx
+++ b/apps/web/app/layout.tsx
@@ -1,7 +1,10 @@
 import type * as React from "react";
 import type { Metadata } from "next";
 import { PublicSiteFooter } from "@hackkit/ui";
-import { getPublicThemeStyle, publicSiteConfig } from "@/lib/public-site-config";
+import {
+	getPublicThemeStyle,
+	publicSiteConfig,
+} from "@/lib/public-site-config";
 import "./globals.css";
 import { AppBar } from "./app-bar";
 import { Providers } from "./providers";
diff --git a/apps/web/app/onboarding/hacker/hacker-form-defaults.ts b/apps/web/app/onboarding/hacker/hacker-form-defaults.ts
index 4d98a560..edd46c9e 100644
--- a/apps/web/app/onboarding/hacker/hacker-form-defaults.ts
+++ b/apps/web/app/onboarding/hacker/hacker-form-defaults.ts
@@ -5,14 +5,14 @@ export function toHackerFormDefaults(hacker: Hacker | null) {
 	return {
 		university: hacker.university,
 		major: hacker.major,
-		schoolId: hacker.schoolId,
+		schoolId: hacker.schoolId ?? undefined,
 		levelOfStudy: hacker.levelOfStudy,
 		hackathonsAttended: hacker.hackathonsAttended,
 		softwareExperience: hacker.softwareExperience,
-		heardFrom: hacker.heardFrom,
-		githubUrl: hacker.githubUrl,
-		linkedInUrl: hacker.linkedInUrl,
-		personalWebsiteUrl: hacker.personalWebsiteUrl,
-		resumeUrl: hacker.resumeUrl,
+		heardFrom: hacker.heardFrom ?? undefined,
+		githubUrl: hacker.githubUrl ?? undefined,
+		linkedInUrl: hacker.linkedInUrl ?? undefined,
+		personalWebsiteUrl: hacker.personalWebsiteUrl ?? undefined,
+		resumeUrl: hacker.resumeUrl ?? undefined,
 	};
 }
diff --git a/apps/web/app/onboarding/hacker/hacker-registration-client.tsx b/apps/web/app/onboarding/hacker/hacker-registration-client.tsx
index 7dd2165b..1cb6ab6f 100644
--- a/apps/web/app/onboarding/hacker/hacker-registration-client.tsx
+++ b/apps/web/app/onboarding/hacker/hacker-registration-client.tsx
@@ -32,7 +32,7 @@ export function HackerRegistrationClient({
 		<HackerRegistrationForm
 			currentUser={currentUser}
 			defaultValues={defaultValues}
-			localStorageKey={`web:onboarding:${currentUser.authId}:hacker`}
+			localStorageKey={`web:onboarding:${currentUser.id}:hacker`}
 			successRedirectTo={successRedirectTo}
 			schoolOptions={registrationOptions?.schools}
 			majorOptions={registrationOptions?.majors}
diff --git a/apps/web/app/onboarding/hacker/page.tsx b/apps/web/app/onboarding/hacker/page.tsx
index 410d0c43..c05b5751 100644
--- a/apps/web/app/onboarding/hacker/page.tsx
+++ b/apps/web/app/onboarding/hacker/page.tsx
@@ -16,12 +16,12 @@ export default async function HackerOnboardingPage() {
 	}
 
 	const hackkit = await getHackkit();
-	const userData = await hackkit.userData.getUserData(currentUser.authId);
+	const userData = await hackkit.userData.getUserData(currentUser.id);
 	if (!userData) {
 		redirect("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/onboarding/user-data");
 	}
 
-	const hacker = await hackkit.hackers.getHacker(currentUser.authId);
+	const hacker = await hackkit.hackers.getHacker(currentUser.id);
 	const steps = await getOnboardingSteps("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/onboarding/hacker");
 
 	return (
diff --git a/apps/web/app/onboarding/hacktag/page.tsx b/apps/web/app/onboarding/hacktag/page.tsx
index 5c473129..7c98a15d 100644
--- a/apps/web/app/onboarding/hacktag/page.tsx
+++ b/apps/web/app/onboarding/hacktag/page.tsx
@@ -22,7 +22,7 @@ export default async function HackTagOnboardingPage() {
 						? { hackTag: currentUser.hackTag }
 						: undefined
 				}
-				localStorageKey={`web:onboarding:${currentUser.authId}:hacktag`}
+				localStorageKey={`web:onboarding:${currentUser.id}:hacktag`}
 				successRedirectTo="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/onboarding/user-data"
 			/>
 		</OnboardingShell>
diff --git a/apps/web/app/onboarding/onboarding-shell.tsx b/apps/web/app/onboarding/onboarding-shell.tsx
index ece6c4e4..5196fa8a 100644
--- a/apps/web/app/onboarding/onboarding-shell.tsx
+++ b/apps/web/app/onboarding/onboarding-shell.tsx
@@ -19,8 +19,12 @@ export function OnboardingShell({
 		<main className="min-h-screen bg-muted/30 px-6 py-10">
 			<div className="mx-auto flex max-w-4xl flex-col gap-6">
 				<div className="space-y-2">
-					<p className="text-sm font-medium text-primary">Competitor onboarding</p>
-					<h1 className="text-3xl font-bold tracking-tight">{title}</h1>
+					<p className="text-sm font-medium text-primary">
+						Competitor onboarding
+					</p>
+					<h1 className="text-3xl font-bold tracking-tight">
+						{title}
+					</h1>
 					<p className="text-muted-foreground">{description}</p>
 				</div>
 				<CompetitorOnboardingProgress steps={steps} />
diff --git a/apps/web/app/onboarding/user-data/page.tsx b/apps/web/app/onboarding/user-data/page.tsx
index e9db61dc..394f5136 100644
--- a/apps/web/app/onboarding/user-data/page.tsx
+++ b/apps/web/app/onboarding/user-data/page.tsx
@@ -13,9 +13,7 @@ export default async function UserDataOnboardingPage() {
 	}
 
 	const hackkit = await getHackkit();
-	const existingUserData = await hackkit.userData.getUserData(
-		currentUser.authId,
-	);
+	const existingUserData = await hackkit.userData.getUserData(currentUser.id);
 	const steps = await getOnboardingSteps("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/onboarding/user-data");
 
 	return (
@@ -32,7 +30,7 @@ export default async function UserDataOnboardingPage() {
 						? toUserDataFormDefaultValues(existingUserData)
 						: undefined
 				}
-				localStorageKey={`web:onboarding:${currentUser.authId}:user-data`}
+				localStorageKey={`web:onboarding:${currentUser.id}:user-data`}
 				successRedirectTo="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/onboarding/hacker"
 			/>
 		</OnboardingShell>
diff --git a/apps/web/app/pass/event-pass-shell.tsx b/apps/web/app/pass/event-pass-shell.tsx
index 92222111..64f3d716 100644
--- a/apps/web/app/pass/event-pass-shell.tsx
+++ b/apps/web/app/pass/event-pass-shell.tsx
@@ -5,11 +5,17 @@ import type { User } from "@hackkit/core";
 import { EventPass } from "@hackkit/ui";
 import * as React from "react";
 
-export function EventPassShell({ user, eventPassQrTtlMs }: { user: User; eventPassQrTtlMs: number }) {
+export function EventPassShell({
+	user,
+	eventPassQrTtlMs,
+}: {
+	user: User;
+	eventPassQrTtlMs: number;
+}) {
 	const [issuedAt, setIssuedAt] = React.useState(() => new Date());
 	const qrPayload = React.useMemo(
-		() => createEventPassQrPayload(user.authId, issuedAt),
-		[user.authId, issuedAt],
+		() => createEventPassQrPayload(user.id, issuedAt),
+		[user.id, issuedAt],
 	);
 
 	React.useEffect(() => {
diff --git a/apps/web/app/pass/page.tsx b/apps/web/app/pass/page.tsx
index ab758a2c..6a616afa 100644
--- a/apps/web/app/pass/page.tsx
+++ b/apps/web/app/pass/page.tsx
@@ -7,11 +7,16 @@ export const dynamic = "force-dynamic";
 export default async function PassPage() {
 	const user = await getCurrentUser();
 	const runtime = await getRuntime();
-	const eventPassQrTtlMs = await runtime.getSettingValue(CoreSetting.EventPassQrTtlMs);
+	const eventPassQrTtlMs = await runtime.getSettingValue(
+		CoreSetting.EventPassQrTtlMs,
+	);
 
 	return (
 		<main className="min-h-screen px-6 py-10">
-			<EventPassShell user={user} eventPassQrTtlMs={Number(eventPassQrTtlMs)} />
+			<EventPassShell
+				user={user}
+				eventPassQrTtlMs={Number(eventPassQrTtlMs)}
+			/>
 		</main>
 	);
 }
diff --git a/apps/web/app/profile-menu.tsx b/apps/web/app/profile-menu.tsx
index 31eed3d5..6b0a15a5 100644
--- a/apps/web/app/profile-menu.tsx
+++ b/apps/web/app/profile-menu.tsx
@@ -19,12 +19,13 @@ export function ProfileMenu({
 	const router = useRouter();
 	const [isOpen, setIsOpen] = useState(false);
 	const [isSigningOut, setIsSigningOut] = useState(false);
-	const initials = name
-		.split(/\s+/)
-		.filter(Boolean)
-		.slice(0, 2)
-		.map((part) => part[0]?.toUpperCase())
-		.join("") || "U";
+	const initials =
+		name
+			.split(/\s+/)
+			.filter(Boolean)
+			.slice(0, 2)
+			.map((part) => part[0]?.toUpperCase())
+			.join("") || "U";
 
 	async function signOut() {
 		setIsSigningOut(true);
@@ -44,13 +45,19 @@ export function ProfileMenu({
 			>
 				{image ? (
 					// eslint-disable-next-line @next/next/no-img-element
-					<img src={image} alt="" className="h-8 w-8 rounded-full object-cover" />
+					<img
+						src={image}
+						alt=""
+						className="h-8 w-8 rounded-full object-cover"
+					/>
 				) : (
 					<span className="grid h-8 w-8 place-items-center rounded-full bg-primary text-xs font-semibold text-primary-foreground">
 						{initials}
 					</span>
 				)}
-				<span className="hidden max-w-32 truncate sm:inline">{name}</span>
+				<span className="hidden max-w-32 truncate sm:inline">
+					{name}
+				</span>
 			</button>
 
 			{isOpen ? (
@@ -60,7 +67,9 @@ export function ProfileMenu({
 				>
 					<div className="border-b px-4 py-3">
 						<p className="truncate text-sm font-medium">{name}</p>
-						<p className="truncate text-xs text-muted-foreground">{email}</p>
+						<p className="truncate text-xs text-muted-foreground">
+							{email}
+						</p>
 					</div>
 					<div className="p-1">
 						<Link
diff --git a/apps/web/app/schedule/page.tsx b/apps/web/app/schedule/page.tsx
index 37d4b6ee..7a1304fa 100644
--- a/apps/web/app/schedule/page.tsx
+++ b/apps/web/app/schedule/page.tsx
@@ -11,7 +11,9 @@ export default async function SchedulePage() {
 		<main className="min-h-screen px-6 py-10">
 			<div className="mx-auto max-w-3xl space-y-6">
 				<div>
-					<h1 className="text-3xl font-bold tracking-tight">Schedule</h1>
+					<h1 className="text-3xl font-bold tracking-tight">
+						Schedule
+					</h1>
 					<p className="text-muted-foreground">
 						Public agenda for the hackathon.
 					</p>
diff --git a/apps/web/app/settings/page.tsx b/apps/web/app/settings/page.tsx
index e4cf3853..dd5cccc1 100644
--- a/apps/web/app/settings/page.tsx
+++ b/apps/web/app/settings/page.tsx
@@ -1,11 +1,12 @@
 import Link from "next/link";
-import { getCurrentUser } from "@/lib/runtime";
+import { getCurrentUser, getHackkit } from "@/lib/runtime";
 import { ProfileSettingsClient } from "./profile-settings-client";
 
 export const dynamic = "force-dynamic";
 
 export default async function SettingsPage() {
 	const currentUser = await getCurrentUser();
+	const hackkit = await getHackkit();
 
 	return (
 		<main className="mx-auto max-w-5xl space-y-8 px-6 py-10">
@@ -18,25 +19,27 @@ export default async function SettingsPage() {
 
 			<ProfileSettingsClient currentUser={currentUser} />
 
-			<section className="w-full max-w-3xl rounded-lg border p-6">
-				<h2 className="text-xl font-semibold">Discord</h2>
-				<p className="mt-2 text-sm text-muted-foreground">
-					Link Discord and sync participant, organiser role, and Group roles for
-					the event server.
-				</p>
-				<Link
-					href="/discord"
-					className="mt-4 inline-flex rounded-md bg-secondary px-4 py-2 text-sm font-medium text-secondary-foreground hover:bg-secondary/80"
-				>
-					Manage Discord
-				</Link>
-			</section>
+			{hackkit.isPluginEnabled("discord") ? (
+				<section className="w-full max-w-3xl rounded-lg border p-6">
+					<h2 className="text-xl font-semibold">Discord</h2>
+					<p className="mt-2 text-sm text-muted-foreground">
+						Link Discord and sync participant, organiser role, and
+						Group roles for the event server.
+					</p>
+					<Link
+						href="/discord"
+						className="mt-4 inline-flex rounded-md bg-secondary px-4 py-2 text-sm font-medium text-secondary-foreground hover:bg-secondary/80"
+					>
+						Manage Discord
+					</Link>
+				</section>
+			) : null}
 
 			<section className="w-full max-w-3xl rounded-lg border p-6">
 				<h2 className="text-xl font-semibold">Registration</h2>
 				<p className="mt-2 text-sm text-muted-foreground">
-					You can update your demographic, logistics, school, experience, and
-					resume information after registration.
+					You can update your demographic, logistics, school,
+					experience, and resume information after registration.
 				</p>
 				<Link
 					href="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/settings/registration"
diff --git a/apps/web/app/settings/registration/page.tsx b/apps/web/app/settings/registration/page.tsx
index 59347502..f72c6935 100644
--- a/apps/web/app/settings/registration/page.tsx
+++ b/apps/web/app/settings/registration/page.tsx
@@ -11,8 +11,8 @@ export default async function RegistrationSettingsPage() {
 	const currentUser = await getCurrentUser();
 	const hackkit = await getHackkit();
 	const [userData, hacker] = await Promise.all([
-		hackkit.userData.getUserData(currentUser.authId),
-		hackkit.hackers.getHacker(currentUser.authId),
+		hackkit.userData.getUserData(currentUser.id),
+		hackkit.hackers.getHacker(currentUser.id),
 	]);
 
 	return (
@@ -28,16 +28,18 @@ export default async function RegistrationSettingsPage() {
 					Registration Settings
 				</h1>
 				<p className="text-muted-foreground">
-					Update registration details that organizers use for logistics and
-					participant review.
+					Update registration details that organizers use for
+					logistics and participant review.
 				</p>
 			</div>
 
 			<UserDataForm
 				currentUser={currentUser}
 				userDataOptions={hackkit.userData.options}
-				defaultValues={userData ? toUserDataFormDefaultValues(userData) : undefined}
-				localStorageKey={`web:settings:${currentUser.authId}:user-data`}
+				defaultValues={
+					userData ? toUserDataFormDefaultValues(userData) : undefined
+				}
+				localStorageKey={`web:settings:${currentUser.id}:user-data`}
 				successRedirectTo="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/settings/registration"
 			/>
 
diff --git a/apps/web/app/sign-in/auth-form.tsx b/apps/web/app/sign-in/auth-form.tsx
index 5da608de..aad59d2f 100644
--- a/apps/web/app/sign-in/auth-form.tsx
+++ b/apps/web/app/sign-in/auth-form.tsx
@@ -7,11 +7,7 @@ import { authClient } from "@/lib/auth-client";
 
 type AuthMode = "sign-in" | "sign-up";
 
-export function AuthForm({
-	mode,
-}: {
-	mode: AuthMode;
-}) {
+export function AuthForm({ mode }: { mode: AuthMode }) {
 	const router = useRouter();
 	const [error, setError] = useState<string | null>(null);
 	const [isPending, setIsPending] = useState(false);
@@ -43,7 +39,10 @@ export function AuthForm({
 	}
 
 	return (
-		<form onSubmit={onSubmit} className="space-y-4 rounded-lg border bg-background p-6">
+		<form
+			onSubmit={onSubmit}
+			className="space-y-4 rounded-lg border bg-background p-6"
+		>
 			{isSignUp ? (
 				<label className="block space-y-2">
 					<span className="text-sm font-medium">Name</span>
@@ -82,13 +81,19 @@ export function AuthForm({
 				disabled={isPending}
 				className="w-full rounded-md bg-primary px-4 py-2 font-medium text-primary-foreground disabled:opacity-60"
 			>
-				{isPending ? "Working..." : isSignUp ? "Create account" : "Sign in"}
+				{isPending
+					? "Working..."
+					: isSignUp
+						? "Create account"
+						: "Sign in"}
 			</button>
 			<Link
 				href={isSignUp ? "/sign-in" : "/sign-up"}
 				className="block w-full text-center text-sm text-muted-foreground underline"
 			>
-				{isSignUp ? "Have an account? Sign in" : "Need an account? Sign up"}
+				{isSignUp
+					? "Have an account? Sign in"
+					: "Need an account? Sign up"}
 			</Link>
 		</form>
 	);
diff --git a/apps/web/app/sign-up/page.tsx b/apps/web/app/sign-up/page.tsx
index 318e7bbb..eb5407de 100644
--- a/apps/web/app/sign-up/page.tsx
+++ b/apps/web/app/sign-up/page.tsx
@@ -12,8 +12,12 @@ export default async function SignUpPage() {
 		<main className="min-h-screen bg-muted/30 px-6 py-10">
 			<div className="mx-auto max-w-md space-y-6">
 				<div className="space-y-2 text-center">
-					<p className="text-sm font-medium text-primary">HackKit UI test app</p>
-					<h1 className="text-3xl font-bold tracking-tight">Sign up</h1>
+					<p className="text-sm font-medium text-primary">
+						HackKit UI test app
+					</p>
+					<h1 className="text-3xl font-bold tracking-tight">
+						Sign up
+					</h1>
 					<p className="text-muted-foreground">
 						Create an account, then complete registration.
 					</p>
diff --git a/apps/web/app/user/[tag]/page.tsx b/apps/web/app/user/[tag]/page.tsx
index 4c6e2012..7777572a 100644
--- a/apps/web/app/user/[tag]/page.tsx
+++ b/apps/web/app/user/[tag]/page.tsx
@@ -10,7 +10,9 @@ export default async function PublicUserProfilePage({
 	params: { tag: string };
 }) {
 	const tag = decodeURIComponent(params.tag);
-	const profile = await (await getHackkit()).users.getPublicProfileByHackTag(tag);
+	const profile = await (
+		await getHackkit()
+	).users.getPublicProfileByHackTag(tag);
 	if (!profile) notFound();
 
 	return (
diff --git a/apps/web/better-auth.config.ts b/apps/web/better-auth.config.ts
deleted file mode 100644
index 16c826e9..00000000
--- a/apps/web/better-auth.config.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import { createClient } from "@libsql/client";
-import { betterAuth } from "better-auth";
-import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { drizzle } from "drizzle-orm/libsql";
-
-// Keep database-affecting Better Auth plugins in sync with lib/auth.ts.
-// Runtime-only plugins such as nextCookies do not contribute schema.
-export const auth = betterAuth({
-	baseURL: "http://localhost:3000",
-	database: drizzleAdapter(drizzle(createClient({ url: ":memory:" })), {
-		provider: "sqlite",
-	}),
-});
diff --git a/apps/web/db/__tests__/database-workflow.test.ts b/apps/web/db/__tests__/database-workflow.test.ts
index edfcdc02..3fe8d8f6 100644
--- a/apps/web/db/__tests__/database-workflow.test.ts
+++ b/apps/web/db/__tests__/database-workflow.test.ts
@@ -1,96 +1,69 @@
-import { readFile } from "node:fs/promises";
+import { mkdtemp, rm } from "node:fs/promises";
 import { join } from "node:path";
-import { runDbSeed } from "@hackkit/cli";
-import { CorePermission, createHackkit } from "@hackkit/core";
-import { createDrizzleLibsqlAdapter } from "@hackkit/db-drizzle/libsql";
-import { createClient } from "@libsql/client";
-import { betterAuth } from "better-auth";
-import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { drizzle } from "drizzle-orm/libsql";
-import { migrate } from "drizzle-orm/libsql/migrator";
-import { afterEach, describe, expect, it } from "vitest";
-import { appJob } from "./fixtures/app-schema";
-import { account, session, user, verification } from "../schema/auth";
+import { tmpdir } from "node:os";
+import { runDatabaseCommand } from "../../scripts/database";
+import { initializeHackkit } from "@hackkit/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { expect, it } from "vitest";
+import appConfig from "../../hackkit.config";
 
-const clients: ReturnType<typeof createClient>[] = [];
-
-afterEach(() => {
-	for (const client of clients.splice(0)) client.close();
-});
-
-describe("committed web database workflow", () => {
-	it("runs Better Auth against its generated schema after app migrations", async () => {
-		const client = createClient({ url: ":memory:" });
-		clients.push(client);
-		const db = drizzle(client);
-		await migrate(db, {
-			migrationsFolder: join(process.cwd(), "db/migrations"),
-		});
-		await client.executeMultiple(
-			await readFile(
-				join(process.cwd(), "db/__tests__/fixtures/app-migration.sql"),
-				"utf8",
-			),
-		);
-
-		const database = createDrizzleLibsqlAdapter(db);
-		await runDbSeed({
-			database,
-			seedRoles: [
-				{
-					id: "core.participant",
-					name: "Participant",
-					position: 10,
-					permissions: [],
-				},
-				{
-					id: "core.owner",
-					name: "Owner",
-					position: 0,
-					permissions: [CorePermission.SuperAdmin],
-				},
-			],
-		});
-		const hackkit = createHackkit({ database });
-		await expect(hackkit.roles.listRoles()).resolves.toMatchObject([
-			{ id: "core.owner", name: "Owner" },
-			{ id: "core.participant", name: "Participant" },
-		]);
-
-		await db.insert(appJob).values({ id: "job-1", status: "ready" });
-		await expect(db.select().from(appJob)).resolves.toEqual([
-			{ id: "job-1", status: "ready" },
-		]);
-
-		const auth = betterAuth({
+it("runs Core, plugins, and Better Auth against committed app migrations", async () => {
+	const directory = await mkdtemp(join(tmpdir(), "hackkit-web-db-"));
+	const config = {
+		...appConfig,
+		database: {
+			...appConfig.database,
+			driver: SqliteDriver,
+			dbName: join(directory, "web.db"),
+			clientUrl: undefined,
+			migrations: {
+				path: join(process.cwd(), "db/migrations/sqlite"),
+				snapshotOnMigrate: false,
+			},
+		},
+		auth: {
 			baseURL: "http://localhost:3000",
 			secret: "database-workflow-test-secret-at-least-32-characters",
-			database: drizzleAdapter(db, {
-				provider: "sqlite",
-				schema: { user, session, account, verification },
-				camelCase: true,
-			}),
 			emailAndPassword: { enabled: true },
-			rateLimit: { enabled: false },
-		});
-
-		const signup = await auth.api.signUpEmail({
-			body: {
+		},
+		logger: { disabled: true },
+	};
+	try {
+		await runDatabaseCommand(config, { command: "migrate" });
+		await runDatabaseCommand(config, { command: "seed" });
+		const core = await initializeHackkit(config);
+		try {
+			expect(await core.orm.schema.getUpdateSchemaSQL()).toBe("");
+			const scope = core.createScope();
+			expect(await scope.hackkit.roles.listRoles()).toMatchObject([
+				{ id: "core.owner" },
+				{ id: "core.participant" },
+			]);
+			const signup = await core.auth.api.signUpEmail({
+				body: {
+					name: "Schema Test",
+					email: "schema@example.com",
+					password: "correct-horse-battery-staple",
+				},
+				returnHeaders: true,
+			});
+			const cookie = signup.headers.get("set-cookie");
+			expect(cookie).toContain("better-auth.session_token=");
+			const session = await core.auth.api.getSession({
+				headers: new Headers({ cookie: cookie ?? "" }),
+			});
+			expect(session?.user.email).toBe("schema@example.com");
+			expect(
+				await scope.hackkit.users.getUser(signup.response.user.id),
+			).toMatchObject({
+				id: signup.response.user.id,
 				name: "Schema Test",
 				email: "schema@example.com",
-				password: "correct-horse-battery-staple",
-			},
-			returnHeaders: true,
-		});
-		expect(signup.response.user.email).toBe("schema@example.com");
-
-		const setCookie = signup.headers.get("set-cookie");
-		expect(setCookie).toContain("better-auth.session_token=");
-		const cookie = setCookie?.split(";", 1)[0];
-		const currentSession = await auth.api.getSession({
-			headers: new Headers({ cookie: cookie ?? "" }),
-		});
-
-		expect(currentSession?.user.email).toBe("schema@example.com");
-	});
+			});
+		} finally {
+			await core.orm.close();
+		}
+	} finally {
+		await rm(directory, { recursive: true, force: true });
+	}
 });
diff --git a/apps/web/db/__tests__/dialects.test.ts b/apps/web/db/__tests__/dialects.test.ts
new file mode 100644
index 00000000..1097834f
--- /dev/null
+++ b/apps/web/db/__tests__/dialects.test.ts
@@ -0,0 +1,420 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { LibSqlDriver } from "@mikro-orm/libsql";
+import { MySqlDriver } from "@mikro-orm/mysql";
+import { PostgreSqlDriver } from "@mikro-orm/postgresql";
+import { runDatabaseCommand } from "../../scripts/database";
+import {
+	HackKitUser,
+	AuthSession,
+	AuthAccount,
+	createHackKitAuth,
+	CoreSetting,
+	coreModels,
+	initializeHackkit,
+	type HackKitDatabaseOptions,
+} from "@hackkit/core";
+import { teamsModels } from "@hackkit/plugin-teams";
+import { discordModels } from "@hackkit/plugin-discord";
+import appConfig from "../../hackkit.config";
+import { verifyMigrationUpgrade } from "./migration-workflow";
+import { verifyProfileConcurrency } from "./profile-concurrency";
+
+const externalTargets = [
+	{
+		name: "PostgreSQL",
+		dialect: "postgresql",
+		driver: PostgreSqlDriver,
+		url: process.env.HACKKIT_TEST_POSTGRESQL_URL,
+	},
+	{
+		name: "MySQL",
+		dialect: "mysql",
+		driver: MySqlDriver,
+		url: process.env.HACKKIT_TEST_MYSQL_URL,
+	},
+	{
+		name: "network libSQL",
+		dialect: "sqlite",
+		driver: LibSqlDriver,
+		url: process.env.HACKKIT_TEST_LIBSQL_URL,
+	},
+];
+if (
+	process.env.HACKKIT_REQUIRE_DATABASE_MATRIX === "1" &&
+	externalTargets.some((target) => !target.url)
+) {
+	throw new Error(
+		"The required database matrix needs PostgreSQL, MySQL, and network libSQL test URLs.",
+	);
+}
+
+// These URLs must address empty, disposable test databases. This test never drops a database.
+const targets = [
+	{ name: "SQLite", dialect: "sqlite", driver: SqliteDriver, url: "local" },
+	{
+		name: "local libSQL",
+		dialect: "sqlite",
+		driver: LibSqlDriver,
+		url: "local",
+	},
+	...externalTargets,
+];
+
+for (const target of targets) {
+	describe.skipIf(!target.url)(target.name, () => {
+		it(
+			"applies app migrations and preserves auth, domain types, rollback, and capacity under concurrency",
+			async () => {
+				const directory = await mkdtemp(
+					join(tmpdir(), "hackkit-dialect-"),
+				);
+				const database: HackKitDatabaseOptions = {
+					driver: target.driver,
+					...(target.url === "local"
+						? { dbName: join(directory, "test.db") }
+						: target.driver === LibSqlDriver
+							? { dbName: target.url! }
+							: { clientUrl: target.url! }),
+					migrations: {
+						path: join(
+							process.cwd(),
+							"db/migrations",
+							target.dialect,
+						),
+						snapshotOnMigrate: false,
+						...(target.driver === MySqlDriver
+							? { transactional: false, allOrNothing: false }
+							: {}),
+					},
+				};
+				const config = {
+					...appConfig,
+					database,
+					auth: {
+						baseURL: "http://localhost:3000",
+						secret: "matrix-secret-with-at-least-32-characters",
+						emailAndPassword: { enabled: true },
+						user: { deleteUser: { enabled: true } },
+					},
+					logger: { disabled: true },
+				};
+				try {
+					await runDatabaseCommand(config, { command: "migrate" });
+					await runDatabaseCommand(config, { command: "seed" });
+					const core = await initializeHackkit(config);
+					try {
+						await verifyProfileConcurrency(
+							core,
+							target.driver === PostgreSqlDriver ||
+								target.driver === MySqlDriver,
+						);
+						expect(await core.orm.schema.getUpdateSchemaSQL()).toBe(
+							"",
+						);
+						const cookies = new Map<string, string>();
+						const signup = async (name: string) => {
+							const result = await core.auth.api.signUpEmail({
+								body: {
+									name,
+									...{
+										roleId: "core.owner",
+										isApproved: true,
+									},
+									email: `${name.toLowerCase()}@example.com`,
+									password: "a sufficiently long password",
+								},
+								returnHeaders: true,
+							});
+							const cookie = result.headers.get("set-cookie");
+							const session = await core.auth.api.getSession({
+								headers: new Headers({ cookie: cookie ?? "" }),
+							});
+							expect(session?.user.id).toBe(
+								result.response.user.id,
+							);
+							cookies.set(result.response.user.id, cookie ?? "");
+							expect(
+								await core
+									.createScope()
+									.hackkit.users.getUser(
+										result.response.user.id,
+									),
+							).toMatchObject({
+								name,
+								email: result.response.user.email,
+								roleId: null,
+								isApproved: false,
+								skills: [],
+							});
+							return result.response.user.id;
+						};
+						const rejectingAuth = createHackKitAuth(core.orm, {
+							...config.auth,
+							databaseHooks: {
+								account: {
+									create: {
+										before: async () => {
+											throw new Error(
+												"reject matrix account",
+											);
+										},
+									},
+								},
+							},
+						});
+						await expect(
+							rejectingAuth.api.signUpEmail({
+								body: {
+									name: "Rejected",
+									email: "rejected@example.com",
+									password: "a sufficiently long password",
+								},
+							}),
+						).rejects.toThrow("reject matrix account");
+						expect(
+							await core.createScope().em.count(HackKitUser),
+						).toBe(0);
+						expect(
+							await core.createScope().em.count(AuthAccount),
+						).toBe(0);
+						const ownerId = await signup("Owner");
+						const ownerScope = core.createScope(ownerId);
+						const owner = await ownerScope.em.findOneOrFail(
+							coreModels.user,
+							{ id: ownerId },
+						);
+						owner.roleId = "core.owner";
+						await ownerScope.em.flush();
+						await ownerScope.hackkit.settings.set({
+							actorAuthId: ownerId,
+							key: CoreSetting.MaximumRegistrations,
+							value: 1,
+						});
+						const ids = [];
+						for (const name of ["One", "Two"]) {
+							const authId = await signup(name);
+							ids.push(authId);
+							const scope = core.createScope(authId);
+							await scope.hackkit.users.claimHackTag({
+								authId,
+								hackTag: name.toLowerCase(),
+							});
+							await scope.hackkit.userData.completeUserData({
+								authId,
+								age: 21,
+								gender: "prefer_not_to_answer",
+								race: "prefer_not_to_answer",
+								ethnicity: "prefer_not_to_answer",
+								shirtSize: "m",
+								dietaryRestrictions: ["none"],
+								hasAcceptedMLHCodeOfConduct: true,
+								hasSharedDataWithMLH: true,
+								isEmailable: false,
+							});
+						}
+						const results = await Promise.allSettled(
+							ids.map((authId) =>
+								core
+									.createScope(authId)
+									.hackkit.hackers.registerHacker({
+										userId: authId,
+										university: "UTSA",
+										major: "Computer Science",
+										levelOfStudy: "undergraduate",
+										hackathonsAttended: 0,
+										softwareExperience: "beginner",
+									}),
+							),
+						);
+						expect(
+							results.filter(
+								(result) => result.status === "fulfilled",
+							),
+						).toHaveLength(1);
+						expect(
+							results.find(
+								(result) => result.status === "rejected",
+							),
+						).toMatchObject({
+							reason: { code: "INVALID_OPERATION" },
+						});
+						const hacker = await core
+							.createScope()
+							.em.findOneOrFail(coreModels.hacker, {
+								userId: { $in: ids },
+							});
+						const participant = core.createScope(hacker.userId);
+						const profile = await participant.hackkit.users.getUser(
+							hacker.userId,
+						);
+						expect(profile).toMatchObject({
+							roleId: "core.participant",
+							isApproved: true,
+							checkedInAt: null,
+						});
+						const headers = new Headers({
+							cookie: cookies.get(hacker.userId)!,
+						});
+						await participant.hackkit.users.updateProfile({
+							authId: hacker.userId,
+							name: "Edited Name",
+							profilePhotoUrl: "/api/files/view/photo.png",
+						});
+						expect(
+							(await core.auth.api.getSession({ headers }))?.user,
+						).toMatchObject({
+							name: "Edited Name",
+							image: "/api/files/view/photo.png",
+						});
+						await core.auth.api.updateUser({
+							headers,
+							body: {
+								name: "Auth Edit",
+								image: "https://example.com/photo.png",
+								...{ roleId: "core.owner", isApproved: false },
+							},
+						});
+						expect(
+							await core
+								.createScope()
+								.hackkit.users.getUser(hacker.userId),
+						).toMatchObject({
+							name: "Auth Edit",
+							profilePhotoUrl: "https://example.com/photo.png",
+							roleId: "core.participant",
+							isApproved: true,
+						});
+						expect(profile?.createdAt).toBeInstanceOf(Date);
+						expect(Object.getPrototypeOf(profile)).toBe(
+							Object.prototype,
+						);
+						const data =
+							await participant.hackkit.userData.getUserData(
+								hacker.userId,
+							);
+						expect(data).toMatchObject({
+							dietaryRestrictions: ["none"],
+							isEmailable: false,
+							phoneNumber: null,
+						});
+						await expect(
+							core.createScope().em.transactional(async (em) => {
+								const record = await em.findOneOrFail(
+									coreModels.user,
+									{ id: hacker.userId },
+								);
+								record.bio = "must roll back";
+								await em.flush();
+								throw new Error("abort matrix transaction");
+							}),
+						).rejects.toThrow("abort matrix transaction");
+						expect(
+							(
+								await core
+									.createScope()
+									.hackkit.users.getUser(hacker.userId)
+							)?.bio,
+						).toBeNull();
+						const team =
+							await participant.hackkit.plugins.teams.createTeam({
+								actorAuthId: hacker.userId,
+								name: "Typed team",
+								tag: "typed",
+							});
+						expect(team.members[0]?.user.id).toBe(hacker.userId);
+						expect(Object.getPrototypeOf(team)).toBe(
+							Object.prototype,
+						);
+						await expect(
+							core.createScope().hackkit.users.claimHackTag({
+								authId: ownerId,
+								hackTag: profile!.hackTag!,
+							}),
+						).rejects.toMatchObject({ code: "CONFLICT" });
+						// Every user relation must reference the canonical row and reject orphan IDs.
+						await expect(
+							core.createScope().em.transactional(async (em) => {
+								await em.nativeUpdate(
+									coreModels.userData,
+									{ authId: hacker.userId },
+									{ authId: "missing-user" },
+								);
+							}),
+						).rejects.toThrow();
+						const cleanup = core.createScope().em;
+						cleanup.create(discordModels.member, {
+							authId: hacker.userId,
+							discordUserId: "discord-hacker",
+							guildId: "guild",
+							username: "hacker",
+						});
+						cleanup.create(discordModels.verification, {
+							code: "matrix-code",
+							authId: hacker.userId,
+							discordUserId: "discord-hacker",
+							guildId: "guild",
+							username: "hacker",
+							expiresAt: new Date(Date.now() + 60000),
+						});
+						await cleanup.flush();
+						await cleanup.nativeDelete(HackKitUser, {
+							id: ids.find((id) => id !== hacker.userId)!,
+						});
+						expect(
+							await core
+								.createScope()
+								.em.count(coreModels.userData, {}),
+						).toBe(1);
+						await core.auth.api.deleteUser({
+							headers,
+							body: { password: "a sufficiently long password" },
+						});
+						const deleted = core.createScope().em;
+						expect(
+							await deleted.count(HackKitUser, {
+								id: hacker.userId,
+							}),
+						).toBe(0);
+						expect(
+							await deleted.count(AuthSession, {
+								userId: hacker.userId,
+							}),
+						).toBe(0);
+						expect(
+							await deleted.count(AuthAccount, {
+								userId: hacker.userId,
+							}),
+						).toBe(0);
+						expect(await deleted.count(coreModels.userData)).toBe(
+							0,
+						);
+						expect(await deleted.count(coreModels.hacker)).toBe(0);
+						expect(await deleted.count(teamsModels.team)).toBe(0);
+						expect(await deleted.count(teamsModels.member)).toBe(0);
+						expect(await deleted.count(discordModels.member)).toBe(
+							0,
+						);
+						expect(
+							await deleted.findOneOrFail(
+								discordModels.verification,
+								{ code: "matrix-code" },
+							),
+						).toMatchObject({ authId: null });
+					} finally {
+						await core.orm.close();
+					}
+					await verifyMigrationUpgrade(config, directory);
+				} finally {
+					await rm(directory, { recursive: true, force: true });
+				}
+			},
+			target.driver === LibSqlDriver && target.url !== "local"
+				? 60000
+				: 30000,
+		);
+	});
+}
diff --git a/apps/web/db/__tests__/fixtures/app-migration.sql b/apps/web/db/__tests__/fixtures/app-migration.sql
deleted file mode 100644
index a8c1d436..00000000
--- a/apps/web/db/__tests__/fixtures/app-migration.sql
+++ /dev/null
@@ -1,4 +0,0 @@
-CREATE TABLE `app_test_job` (
-	`id` text PRIMARY KEY NOT NULL,
-	`status` text NOT NULL
-);
diff --git a/apps/web/db/__tests__/fixtures/app-schema.ts b/apps/web/db/__tests__/fixtures/app-schema.ts
deleted file mode 100644
index d4d620aa..00000000
--- a/apps/web/db/__tests__/fixtures/app-schema.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import { sqliteTable, text } from "drizzle-orm/sqlite-core";
-
-export const appJob = sqliteTable("app_test_job", {
-	id: text("id").primaryKey().notNull(),
-	status: text("status").notNull(),
-});
diff --git a/apps/web/db/__tests__/migration-fixture-schema.ts b/apps/web/db/__tests__/migration-fixture-schema.ts
new file mode 100644
index 00000000..168247ae
--- /dev/null
+++ b/apps/web/db/__tests__/migration-fixture-schema.ts
@@ -0,0 +1,63 @@
+import { HackKitUser } from "@hackkit/core";
+import { defineEntity, p } from "@mikro-orm/core";
+
+// A small application upgrade. Historical migrations use frozen SQL, never
+// import these current entities, and run through the actual app script API.
+const noteFields = {
+	id: p.string().primary(),
+	authId: () => p.manyToOne(HackKitUser).mapToPk().deleteRule("cascade"),
+};
+export const LegacyNote = defineEntity({
+	name: "UpgradeNote",
+	tableName: "app_upgrade_note",
+	properties: {
+		id: p.string().primary(),
+		authId: () => p.manyToOne(HackKitUser).mapToPk().deleteRule("cascade"),
+		legacyText: p.string(),
+	},
+});
+export const ExpandedNote = defineEntity({
+	name: "UpgradeNote",
+	tableName: "app_upgrade_note",
+	properties: {
+		...noteFields,
+		legacyText: p.string(),
+		introduction: p.string().nullable(),
+	},
+});
+export const FinalNote = defineEntity({
+	name: "UpgradeNote",
+	tableName: "app_upgrade_note",
+	properties: {
+		id: p.string().primary(),
+		authId: () => p.manyToOne(HackKitUser).mapToPk().deleteRule("cascade"),
+		introduction: p.string(),
+	},
+});
+export const FlaggedNote = defineEntity({
+	name: "UpgradeNote",
+	tableName: "app_upgrade_note",
+	properties: {
+		...noteFields,
+		introduction: p.string(),
+		flag: p.string().nullable(),
+	},
+});
+export const PluginEntry = defineEntity({
+	name: "UpgradePluginEntry",
+	tableName: "upgradeProbe_entry",
+	properties: {
+		id: p.string().primary(),
+		authId: () => p.manyToOne(HackKitUser).mapToPk().deleteRule("cascade"),
+	},
+});
+export const PriorityPluginEntry = defineEntity({
+	name: "UpgradePluginEntry",
+	tableName: "upgradeProbe_entry",
+	properties: { ...noteFields, priority: p.integer().default(0) },
+});
+export const probePlugin = {
+	id: "upgradeProbe",
+	entities: [PluginEntry],
+	setup: () => ({ active: () => true }),
+};
diff --git a/apps/web/db/__tests__/migration-workflow.test.ts b/apps/web/db/__tests__/migration-workflow.test.ts
new file mode 100644
index 00000000..87c6492a
--- /dev/null
+++ b/apps/web/db/__tests__/migration-workflow.test.ts
@@ -0,0 +1,114 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { MikroORM } from "@mikro-orm/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { LibSqlDriver } from "@mikro-orm/libsql";
+import { createOrmOptions } from "@hackkit/core";
+import { expect, it, vi } from "vitest";
+import appConfig from "../../hackkit.config";
+import { runDatabaseCommand } from "../../scripts/database";
+import { verifyMigrationUpgrade } from "./migration-workflow";
+
+for (const driver of [SqliteDriver, LibSqlDriver]) {
+	it(`upgrades existing data, rolls back, retains disabled plugins, and replays fresh with ${driver.name}`, async () => {
+		const directory = await mkdtemp(join(tmpdir(), "hackkit-upgrade-"));
+		try {
+			const config = {
+				...appConfig,
+				logger: { disabled: true },
+				database: {
+					driver,
+					dbName: join(directory, "upgrade.db"),
+					migrations: {
+						path: join(process.cwd(), "db/migrations/sqlite"),
+						snapshotOnMigrate: false,
+					},
+				},
+			};
+			await runDatabaseCommand(config, { command: "migrate" });
+			await runDatabaseCommand(config, { command: "seed" });
+			const upgrade = await verifyMigrationUpgrade(config, directory);
+			const fresh = {
+				...upgrade.config,
+				database: {
+					...upgrade.config.database,
+					dbName: join(directory, "fresh.db"),
+				},
+			};
+			await runDatabaseCommand(fresh, { command: "migrate" });
+			expect(
+				await runDatabaseCommand(fresh, { command: "check" }),
+			).toMatchObject({ ok: true });
+			const orm = await MikroORM.init(createOrmOptions(fresh));
+			try {
+				// A reviewed backfill must also work when historical tables are empty.
+				expect(
+					await orm.em
+						.getConnection()
+						.execute(
+							"select count(*) as count from app_upgrade_note",
+						),
+				).toEqual([{ count: 0 }]);
+			} finally {
+				await orm.close();
+			}
+		} finally {
+			await rm(directory, { recursive: true, force: true });
+		}
+	});
+}
+
+it("limits reset to development SQLite and seeds missing roles without changing existing ones", async () => {
+	const directory = await mkdtemp(join(tmpdir(), "hackkit-reset-"));
+	const config = {
+		...appConfig,
+		database: {
+			driver: SqliteDriver,
+			dbName: join(directory, "reset.db"),
+			migrations: {
+				path: join(process.cwd(), "db/migrations/sqlite"),
+				snapshotOnMigrate: false,
+			},
+		},
+	};
+	try {
+		vi.stubEnv("NODE_ENV", "production");
+		await expect(
+			runDatabaseCommand(config, { command: "reset" }),
+		).rejects.toThrow("development or tests");
+		vi.stubEnv("NODE_ENV", "test");
+		await expect(
+			runDatabaseCommand(
+				{
+					...config,
+					database: {
+						...config.database,
+						driver: LibSqlDriver,
+						dbName: "libsql://example.com",
+					},
+				},
+				{ command: "reset" },
+			),
+		).rejects.toThrow("local SQLite");
+		await runDatabaseCommand(config, { command: "reset" });
+		expect(
+			await runDatabaseCommand(config, { command: "check" }),
+		).toMatchObject({ ok: true });
+		expect(
+			await runDatabaseCommand(config, { command: "seed" }),
+		).toMatchObject({
+			seed: {
+				insertedRoleIds: [],
+				skippedRoleIds: ["core.participant", "core.owner"],
+			},
+		});
+		await runDatabaseCommand(config, { command: "reset" });
+		expect(
+			await runDatabaseCommand(config, { command: "check" }),
+		).toMatchObject({ ok: true });
+	} finally {
+		vi.unstubAllEnvs();
+		await rm(directory, { recursive: true, force: true });
+	}
+});
diff --git a/apps/web/db/__tests__/migration-workflow.ts b/apps/web/db/__tests__/migration-workflow.ts
new file mode 100644
index 00000000..350032f5
--- /dev/null
+++ b/apps/web/db/__tests__/migration-workflow.ts
@@ -0,0 +1,385 @@
+import {
+	access,
+	cp,
+	mkdir,
+	readFile,
+	rm,
+	symlink,
+	writeFile,
+} from "node:fs/promises";
+import { basename, join } from "node:path";
+import type { HackkitConfig } from "@hackkit/config";
+import {
+	createOrmOptions,
+	HackKitUser,
+	initializeHackkit,
+} from "@hackkit/core";
+import { MikroORM } from "@mikro-orm/core";
+import { expect } from "vitest";
+import {
+	runDatabaseCommand,
+	type DatabaseCommand,
+} from "../../scripts/database";
+import {
+	LegacyNote,
+	ExpandedNote,
+	FinalNote,
+	FlaggedNote,
+	PluginEntry,
+	PriorityPluginEntry,
+	probePlugin,
+} from "./migration-fixture-schema";
+import { LibSqlDriver } from "@mikro-orm/libsql";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+
+const runProcess = promisify(execFile);
+
+/** Runs on the caller's disposable database after its committed initial migration. */
+export async function verifyMigrationUpgrade(
+	input: HackkitConfig,
+	directory: string,
+) {
+	// HTTP libSQL's native client can block after repeated ORM destruction in
+	// one process. Exercise real CLI lifetimes: one command per Node process.
+	async function run(config: HackkitConfig, request: DatabaseCommand) {
+		if (
+			config.database.driver !== LibSqlDriver ||
+			!/^(?:https?|libsql):\/\//.test(config.database.dbName ?? "")
+		) {
+			return runDatabaseCommand(config, request);
+		}
+		const exports = { LegacyNote, ExpandedNote, FinalNote, FlaggedNote };
+		const noteName = Object.entries(exports).find(([, entity]) =>
+			config.entities?.includes(entity),
+		)?.[0];
+		if (!noteName)
+			throw new Error("Upgrade fixture requires a known note entity.");
+		const plugin = config.plugins?.find(
+			(item) => item.id === "upgradeProbe",
+		);
+		const priority =
+			plugin?.entities?.includes(PriorityPluginEntry) ?? false;
+		const fileName =
+			request.command === "generate"
+				? config.database.migrations?.fileName?.(
+						"20990101000000",
+						request.name,
+					)
+				: undefined;
+		const configPath = join(directory, "command.config.ts");
+		const schemaPath = join(
+			process.cwd(),
+			"db/__tests__/migration-fixture-schema.ts",
+		);
+		await symlink(
+			join(process.cwd(), "node_modules"),
+			join(directory, "node_modules"),
+			"dir",
+		).catch((error: unknown) => {
+			if (
+				!(
+					error instanceof Error &&
+					"code" in error &&
+					error.code === "EEXIST"
+				)
+			)
+				throw error;
+		});
+		await writeFile(
+			configPath,
+			`
+import appConfig from ${JSON.stringify(join(process.cwd(), "hackkit.config.ts"))};
+import { LibSqlDriver } from '@mikro-orm/libsql';
+import { ${noteName}, probePlugin, PriorityPluginEntry } from ${JSON.stringify(schemaPath)};
+export default {
+ ...appConfig,
+ entities: [${noteName}],
+ plugins: [...appConfig.plugins, ${plugin ? `{ ...probePlugin, enabled: ${plugin.enabled !== false}, entities: [${priority ? "PriorityPluginEntry" : "...probePlugin.entities"}] }` : ""}],
+ database: {
+  driver: LibSqlDriver,
+  dbName: ${JSON.stringify(config.database.dbName)},
+  password: ${JSON.stringify(config.database.password)},
+  migrations: { path: ${JSON.stringify(config.database.migrations?.path)}, snapshot: true, snapshotName: '.snapshot', snapshotOnMigrate: false, silent: true,
+   ${fileName ? `fileName: () => ${JSON.stringify(fileName)},` : ""}
+  },
+ },
+};
+`,
+		);
+		const resultPath = join(directory, "command-result.json");
+		await rm(resultPath, { force: true });
+		const args = [
+			"scripts/db.mjs",
+			request.command,
+			"--config",
+			configPath,
+			"--output",
+			resultPath,
+		];
+		if (request.command === "generate") {
+			if (request.name) args.push("--name", request.name);
+			if (request.blank) args.push("--blank");
+		}
+		if (
+			(request.command === "migrate" || request.command === "rollback") &&
+			request.to
+		)
+			args.push("--to", request.to);
+
+		try {
+			await runProcess(process.execPath, args, {
+				cwd: process.cwd(),
+				timeout: 15000,
+			});
+		} catch (error) {
+			if (
+				request.command !== "check" ||
+				!(
+					error instanceof Error &&
+					"code" in error &&
+					error.code === 1 &&
+					"stdout" in error &&
+					typeof error.stdout === "string"
+				)
+			)
+				throw error;
+		}
+		// Test-only boundary: this file comes from our CLI, separately from native driver diagnostics.
+		return JSON.parse(await readFile(resultPath, "utf8")) as Awaited<
+			ReturnType<typeof runDatabaseCommand>
+		>;
+	}
+	const historyPath = join(directory, "upgrade-history");
+	await cp(input.database.migrations!.path!, historyPath, {
+		recursive: true,
+	});
+	let sequence = 0;
+	const config = {
+		...input,
+		plugins: [...(input.plugins ?? []), probePlugin],
+		entities: [...(input.entities ?? []), LegacyNote],
+		database: {
+			...input.database,
+			migrations: {
+				...input.database.migrations,
+				path: historyPath,
+				snapshot: true,
+				snapshotName: ".snapshot",
+				snapshotOnMigrate: false,
+				fileName: (_timestamp: string, name?: string) =>
+					`Migration209901010000${String(sequence++).padStart(2, "0")}_${name}`,
+			},
+		},
+	};
+	const baseline = await run(config, {
+		command: "generate",
+		name: "application_and_plugin",
+	});
+	expect(baseline.command).toBe("generate");
+	await run(config, { command: "migrate" });
+	const orm = await MikroORM.init(createOrmOptions(config));
+	try {
+		const em = orm.em.fork();
+		em.create(HackKitUser, {
+			id: "upgrade-user",
+			name: "Upgrade User",
+			email: "upgrade-user@example.com",
+		});
+		em.create(LegacyNote, {
+			id: "note",
+			authId: "upgrade-user",
+			legacyText: "Josh’s original data",
+		});
+		em.create(PluginEntry, { id: "plugin-entry", authId: "upgrade-user" });
+		await em.flush();
+	} finally {
+		await orm.close();
+	}
+
+	const expanded = {
+		...config,
+		entities: [...(input.entities ?? []), ExpandedNote],
+	};
+	const expansion = await run(expanded, {
+		command: "generate",
+		name: "expand",
+	});
+	if (expansion.command !== "generate")
+		throw new Error("Expected generation result.");
+	const expandName = basename(expansion.migration.fileName, ".ts");
+	await run(expanded, { command: "migrate", to: expandName });
+
+	const backfill = await run(expanded, {
+		command: "generate",
+		name: "backfill",
+		blank: true,
+	});
+	if (backfill.command !== "generate")
+		throw new Error("Expected generation result.");
+	const backfillName = basename(backfill.migration.fileName, ".ts");
+	await writeFile(
+		join(historyPath, backfill.migration.fileName),
+		`import { Migration } from '@mikro-orm/migrations';
+export class ${backfillName} extends Migration {
+ override name = '${backfillName}';
+ override up(): void { this.addSql('update app_upgrade_note set introduction = legacy_text;'); }
+ // This backfill is lossless while the legacy column still exists.
+ override down(): void { this.addSql('update app_upgrade_note set introduction = null;'); }
+}
+`,
+	);
+	const final = {
+		...config,
+		entities: [...(input.entities ?? []), FinalNote],
+	};
+	const contraction = await run(final, {
+		command: "generate",
+		name: "contract",
+	});
+	if (contraction.command !== "generate")
+		throw new Error("Expected generation result.");
+	expect(contraction.destructiveStatements.length).toBeGreaterThan(0);
+	const before = await run(final, { command: "status" });
+	if (before.command !== "status") throw new Error("Expected status result.");
+	expect(before.pending).toHaveLength(2);
+	await run(expanded, {
+		command: "migrate",
+		to: backfillName,
+	});
+	const staged = await MikroORM.init(createOrmOptions(expanded));
+	try {
+		const row = await staged.em.fork().findOneOrFail(ExpandedNote, "note");
+		expect(row).toMatchObject({
+			legacyText: "Josh’s original data",
+			introduction: "Josh’s original data",
+		});
+	} finally {
+		await staged.close();
+	}
+	await run(final, { command: "migrate" });
+	const checked = await run(final, { command: "check" });
+	expect(checked).toMatchObject({
+		command: "check",
+		ok: true,
+		needsMigration: false,
+		pending: [],
+		schemaSql: "",
+	});
+	expect(await run(final, { command: "migrate" })).toMatchObject({
+		migrations: [],
+	});
+
+	const upgradedPlugin = { ...probePlugin, entities: [PriorityPluginEntry] };
+	const flagged = {
+		...config,
+		plugins: [...(input.plugins ?? []), upgradedPlugin],
+		entities: [...(input.entities ?? []), FlaggedNote],
+	};
+	const ungenerated = await run(flagged, { command: "check" });
+	expect(ungenerated).toMatchObject({
+		command: "check",
+		ok: false,
+		needsMigration: true,
+	});
+	await run(flagged, {
+		command: "generate",
+		name: "reversible_flag",
+	});
+	await run(flagged, { command: "migrate" });
+	const reverted = await run(flagged, { command: "rollback" });
+	if (reverted.command !== "rollback")
+		throw new Error("Expected rollback result.");
+	expect(reverted.migrations).toHaveLength(1);
+	const drift = await run(flagged, { command: "check" });
+	expect(drift).toMatchObject({ ok: false, needsMigration: false });
+	if (drift.command !== "check") throw new Error("Expected check result.");
+	expect(drift.schemaSql).toContain("flag");
+	expect(drift.pending).toHaveLength(1);
+	await run(flagged, { command: "migrate" });
+	expect(await run(flagged, { command: "check" })).toMatchObject({
+		ok: true,
+	});
+
+	const disabled = {
+		...flagged,
+		plugins: [
+			...(input.plugins ?? []),
+			{ ...upgradedPlugin, enabled: false },
+		],
+	};
+	expect(
+		await run(disabled, {
+			command: "generate",
+			name: "disabled",
+		}),
+	).toMatchObject({ migration: { fileName: "", diff: { up: [] } } });
+	const runtime = await initializeHackkit(disabled);
+	try {
+		const scope = runtime.createScope();
+		expect(scope.hackkit.isPluginEnabled("upgradeProbe")).toBe(false);
+		expect(() => scope.hackkit.plugins.upgradeProbe).toThrow("is disabled");
+		expect(
+			await scope.em.findOneOrFail(PriorityPluginEntry, "plugin-entry"),
+		).toMatchObject({ authId: "upgrade-user", priority: 0 });
+		expect(await scope.em.findOneOrFail(FlaggedNote, "note")).toMatchObject(
+			{ authId: "upgrade-user", introduction: "Josh’s original data" },
+		);
+		expect(
+			await scope.em.findOneOrFail(HackKitUser, "upgrade-user"),
+		).toMatchObject({ email: "upgrade-user@example.com" });
+	} finally {
+		await runtime.orm.close();
+	}
+
+	// Simulate an intentional uninstall in a separate proposal directory.
+	const removalPath = join(directory, "removal-proposal");
+	await mkdir(removalPath);
+	await cp(historyPath, removalPath, { recursive: true });
+	const removal = await run(
+		{
+			...flagged,
+			plugins: input.plugins ?? [],
+			database: {
+				...flagged.database,
+				migrations: {
+					...flagged.database.migrations,
+					path: removalPath,
+				},
+			},
+		},
+		{ command: "generate", name: "uninstall" },
+	);
+	if (removal.command !== "generate")
+		throw new Error("Expected generation result.");
+	expect(removal.destructiveStatements.join("\n")).toContain(
+		"upgradeProbe_entry",
+	);
+	// A committed snapshot supports offline generation; it must not create
+	// a second database while proposing an unchanged schema.
+	const offline = {
+		...flagged,
+		database: {
+			...flagged.database,
+			...(flagged.database.clientUrl
+				? {
+						clientUrl: flagged.database.clientUrl.replace(
+							/:\d+\//,
+							":1/",
+						),
+					}
+				: { dbName: join(directory, "offline-must-not-exist.db") }),
+		},
+	};
+	expect(
+		await run(offline, {
+			command: "generate",
+			name: "offline",
+		}),
+	).toMatchObject({ migration: { fileName: "" } });
+	if (!flagged.database.clientUrl)
+		await expect(access(offline.database.dbName!)).rejects.toMatchObject({
+			code: "ENOENT",
+		});
+	return { config: flagged, historyPath };
+}
diff --git a/apps/web/db/__tests__/profile-concurrency.ts b/apps/web/db/__tests__/profile-concurrency.ts
new file mode 100644
index 00000000..bf726ba2
--- /dev/null
+++ b/apps/web/db/__tests__/profile-concurrency.ts
@@ -0,0 +1,165 @@
+import { expect } from "vitest";
+import type { EventSubscriber, InferEntity } from "@mikro-orm/core";
+import { HackKitUser, type HackKitRuntime } from "@hackkit/core";
+
+function signal() {
+	let resolve!: () => void;
+	const promise = new Promise<void>((done) => {
+		resolve = done;
+	});
+	return { promise, resolve };
+}
+
+async function within<T>(operation: Promise<T>, message: string) {
+	let timer!: ReturnType<typeof setTimeout>;
+	const timeout = new Promise<never>((_, reject) => {
+		timer = setTimeout(() => reject(new Error(message)), 3000);
+	});
+	try {
+		return await Promise.race([operation, timeout]);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+
+/** Exercise profile writes through Core while controlling transaction overlap. */
+export async function verifyProfileConcurrency(
+	runtime: HackKitRuntime,
+	rowLocking: boolean,
+) {
+	const ids = [crypto.randomUUID(), crypto.randomUUID()];
+	const seed = runtime.createScope().em;
+	for (const id of ids) {
+		seed.create(HackKitUser, {
+			id,
+			name: "Profile test",
+			email: `${id}@example.com`,
+		});
+	}
+	await seed.flush();
+	let pause: ((id: string) => Promise<void>) | undefined;
+	const subscriber: EventSubscriber<InferEntity<typeof HackKitUser>> = {
+		async beforeUpdate({ entity, meta }) {
+			if (meta.className === HackKitUser.meta.className) {
+				await pause?.(entity.id);
+			}
+		},
+	};
+	runtime.orm.em.getEventManager().registerSubscriber(subscriber);
+	try {
+		if (rowLocking) {
+			const entered = signal();
+			const release = signal();
+			pause = async (id) => {
+				if (id === ids[0]) {
+					entered.resolve();
+					await release.promise;
+				}
+			};
+			const first = runtime.createScope().hackkit.users.claimHackTag({
+				authId: ids[0],
+				hackTag: "independent-profile",
+			});
+			let second: Promise<unknown> | undefined;
+			try {
+				await within(
+					Promise.race([
+						entered.promise,
+						first.then(() => {
+							throw new Error(
+								"The first profile write did not pause.",
+							);
+						}),
+					]),
+					"The first profile write did not start.",
+				);
+				second = runtime.createScope().hackkit.users.updateProfile({
+					authId: ids[1],
+					bio: "Independent update",
+				});
+				await expect(
+					within(second, "An unrelated profile was blocked."),
+				).resolves.toMatchObject({
+					bio: "Independent update",
+				});
+			} finally {
+				pause = undefined;
+				release.resolve();
+				await Promise.allSettled([first, ...(second ? [second] : [])]);
+			}
+			await expect(first).resolves.toMatchObject({
+				hackTag: "independent-profile",
+			});
+		}
+
+		// Both entry points must preserve changes to different fields of one user.
+		await Promise.all([
+			runtime.createScope().hackkit.users.claimHackTag({
+				authId: ids[0],
+				hackTag: "consistent-profile",
+			}),
+			runtime.createScope().hackkit.users.updateProfile({
+				authId: ids[0],
+				bio: "Concurrent profile update",
+			}),
+		]);
+		await expect(
+			runtime.createScope().hackkit.users.getUser(ids[0]),
+		).resolves.toMatchObject({
+			hackTag: "consistent-profile",
+			bio: "Concurrent profile update",
+		});
+
+		const previous = await Promise.all(
+			ids.map((id) => runtime.createScope().hackkit.users.getUser(id)),
+		);
+		if (rowLocking) {
+			// Let both transactions pass the availability check before either writes.
+			const ready = signal();
+			let arrivals = 0;
+			pause = async (id) => {
+				if (!ids.includes(id)) return;
+				if (++arrivals === 2) ready.resolve();
+				await within(
+					ready.promise,
+					"The competing claims did not overlap.",
+				);
+			};
+		}
+		const claims = await Promise.allSettled(
+			ids.map((authId) =>
+				runtime.createScope().hackkit.users.updateProfile({
+					authId,
+					hackTag: "SAME-TAG",
+					bio: "Winning claim",
+				}),
+			),
+		);
+		pause = undefined;
+		expect(
+			claims.filter((claim) => claim.status === "fulfilled"),
+		).toHaveLength(1);
+		expect(
+			claims.find((claim) => claim.status === "rejected"),
+		).toMatchObject({
+			reason: { code: "CONFLICT" },
+		});
+		for (const [index, claim] of claims.entries()) {
+			await expect(
+				runtime.createScope().hackkit.users.getUser(ids[index]),
+			).resolves.toMatchObject(
+				claim.status === "fulfilled"
+					? { hackTag: "same-tag", bio: "Winning claim" }
+					: {
+							hackTag: previous[index]?.hackTag,
+							bio: previous[index]?.bio,
+						},
+			);
+		}
+	} finally {
+		pause = undefined;
+		await runtime
+			.createScope()
+			.em.nativeDelete(HackKitUser, { id: { $in: ids } });
+	}
+}
diff --git a/apps/web/db/migrations/0000_init.sql b/apps/web/db/migrations/0000_init.sql
deleted file mode 100644
index 11cf9fbe..00000000
--- a/apps/web/db/migrations/0000_init.sql
+++ /dev/null
@@ -1,329 +0,0 @@
-CREATE TABLE `account` (
-	`id` text PRIMARY KEY NOT NULL,
-	`account_id` text NOT NULL,
-	`provider_id` text NOT NULL,
-	`user_id` text NOT NULL,
-	`access_token` text,
-	`refresh_token` text,
-	`id_token` text,
-	`access_token_expires_at` integer,
-	`refresh_token_expires_at` integer,
-	`scope` text,
-	`password` text,
-	`created_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL,
-	`updated_at` integer NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE INDEX `account_userId_idx` ON `account` (`user_id`);--> statement-breakpoint
-CREATE TABLE `session` (
-	`id` text PRIMARY KEY NOT NULL,
-	`expires_at` integer NOT NULL,
-	`token` text NOT NULL,
-	`created_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL,
-	`updated_at` integer NOT NULL,
-	`ip_address` text,
-	`user_agent` text,
-	`user_id` text NOT NULL,
-	FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `session_token_unique` ON `session` (`token`);--> statement-breakpoint
-CREATE INDEX `session_userId_idx` ON `session` (`user_id`);--> statement-breakpoint
-CREATE TABLE `user` (
-	`id` text PRIMARY KEY NOT NULL,
-	`name` text NOT NULL,
-	`email` text NOT NULL,
-	`email_verified` integer DEFAULT false NOT NULL,
-	`image` text,
-	`created_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `user_email_unique` ON `user` (`email`);--> statement-breakpoint
-CREATE TABLE `verification` (
-	`id` text PRIMARY KEY NOT NULL,
-	`identifier` text NOT NULL,
-	`value` text NOT NULL,
-	`expires_at` integer NOT NULL,
-	`created_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL,
-	`updated_at` integer DEFAULT (cast(unixepoch('subsecond') * 1000 as integer)) NOT NULL
-);
---> statement-breakpoint
-CREATE INDEX `verification_identifier_idx` ON `verification` (`identifier`);--> statement-breakpoint
-CREATE TABLE `core_event` (
-	`id` text PRIMARY KEY NOT NULL,
-	`title` text NOT NULL,
-	`startTime` integer NOT NULL,
-	`endTime` integer NOT NULL,
-	`location` text DEFAULT 'TBD' NOT NULL,
-	`description` text NOT NULL,
-	`type` text NOT NULL,
-	`host` text,
-	`hidden` integer DEFAULT false NOT NULL,
-	`createdAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL
-);
---> statement-breakpoint
-CREATE INDEX `core_event_startTime_idx` ON `core_event` (`startTime`);--> statement-breakpoint
-CREATE INDEX `core_event_type_idx` ON `core_event` (`type`);--> statement-breakpoint
-CREATE INDEX `core_event_hidden_idx` ON `core_event` (`hidden`);--> statement-breakpoint
-CREATE TABLE `core_eventScan` (
-	`id` text PRIMARY KEY NOT NULL,
-	`eventId` text NOT NULL,
-	`authId` text NOT NULL,
-	`scannedByAuthId` text NOT NULL,
-	`scannedAt` integer NOT NULL,
-	FOREIGN KEY (`eventId`) REFERENCES `core_event`(`id`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`scannedByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE no action
-);
---> statement-breakpoint
-CREATE INDEX `core_eventScan_eventId_idx` ON `core_eventScan` (`eventId`);--> statement-breakpoint
-CREATE INDEX `core_eventScan_authId_idx` ON `core_eventScan` (`authId`);--> statement-breakpoint
-CREATE INDEX `core_eventScan_eventId_authId_idx` ON `core_eventScan` (`eventId`,`authId`);--> statement-breakpoint
-CREATE INDEX `core_eventScan_scannedAt_idx` ON `core_eventScan` (`scannedAt`);--> statement-breakpoint
-CREATE TABLE `core_hacker` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`university` text NOT NULL,
-	`major` text NOT NULL,
-	`schoolId` text,
-	`levelOfStudy` text NOT NULL,
-	`hackathonsAttended` integer NOT NULL,
-	`softwareExperience` text NOT NULL,
-	`heardFrom` text,
-	`githubUrl` text,
-	`linkedInUrl` text,
-	`personalWebsiteUrl` text,
-	`resumeUrl` text,
-	`group` text,
-	`registeredAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE INDEX `core_hacker_registeredAt_idx` ON `core_hacker` (`registeredAt`);--> statement-breakpoint
-CREATE TABLE `core_notificationDeliveryAttempt` (
-	`id` text PRIMARY KEY NOT NULL,
-	`intentId` text NOT NULL,
-	`channel` text NOT NULL,
-	`provider` text,
-	`status` text NOT NULL,
-	`recipient` text,
-	`externalId` text,
-	`error` text,
-	`metadata` text DEFAULT '{}' NOT NULL,
-	`attemptedAt` integer NOT NULL,
-	FOREIGN KEY (`intentId`) REFERENCES `core_notificationIntent`(`id`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE INDEX `core_notificationDeliveryAttempt_intentId_idx` ON `core_notificationDeliveryAttempt` (`intentId`);--> statement-breakpoint
-CREATE INDEX `core_notificationDeliveryAttempt_channel_idx` ON `core_notificationDeliveryAttempt` (`channel`);--> statement-breakpoint
-CREATE INDEX `core_notificationDeliveryAttempt_status_idx` ON `core_notificationDeliveryAttempt` (`status`);--> statement-breakpoint
-CREATE INDEX `core_notificationDeliveryAttempt_attemptedAt_idx` ON `core_notificationDeliveryAttempt` (`attemptedAt`);--> statement-breakpoint
-CREATE TABLE `core_notificationIntent` (
-	`id` text PRIMARY KEY NOT NULL,
-	`kind` text NOT NULL,
-	`recipientAuthId` text,
-	`payload` text DEFAULT '{}' NOT NULL,
-	`status` text DEFAULT 'pending' NOT NULL,
-	`idempotencyKey` text,
-	`createdAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	FOREIGN KEY (`recipientAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `core_notificationIntent_idempotencyKey_unique` ON `core_notificationIntent` (`idempotencyKey`);--> statement-breakpoint
-CREATE INDEX `core_notificationIntent_kind_idx` ON `core_notificationIntent` (`kind`);--> statement-breakpoint
-CREATE INDEX `core_notificationIntent_recipientAuthId_idx` ON `core_notificationIntent` (`recipientAuthId`);--> statement-breakpoint
-CREATE INDEX `core_notificationIntent_status_idx` ON `core_notificationIntent` (`status`);--> statement-breakpoint
-CREATE INDEX `core_notificationIntent_createdAt_idx` ON `core_notificationIntent` (`createdAt`);--> statement-breakpoint
-CREATE TABLE `core_role` (
-	`id` text PRIMARY KEY NOT NULL,
-	`name` text NOT NULL,
-	`position` integer NOT NULL,
-	`permissions` text DEFAULT '[]' NOT NULL,
-	`color` text,
-	`createdAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `core_role_name_unique` ON `core_role` (`name`);--> statement-breakpoint
-CREATE INDEX `core_role_position_idx` ON `core_role` (`position`);--> statement-breakpoint
-CREATE TABLE `core_rsvp` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`status` text NOT NULL,
-	`waitlistPosition` integer,
-	`createdAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	`confirmedAt` integer,
-	`waitlistedAt` integer,
-	`cancelledAt` integer,
-	`cancelledByAuthId` text,
-	`promotedAt` integer,
-	`promotedByAuthId` text,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`cancelledByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null,
-	FOREIGN KEY (`promotedByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null
-);
---> statement-breakpoint
-CREATE INDEX `core_rsvp_status_idx` ON `core_rsvp` (`status`);--> statement-breakpoint
-CREATE INDEX `core_rsvp_waitlistPosition_idx` ON `core_rsvp` (`waitlistPosition`);--> statement-breakpoint
-CREATE INDEX `core_rsvp_createdAt_idx` ON `core_rsvp` (`createdAt`);--> statement-breakpoint
-CREATE INDEX `core_rsvp_updatedAt_idx` ON `core_rsvp` (`updatedAt`);--> statement-breakpoint
-CREATE TABLE `core_setting` (
-	`key` text PRIMARY KEY NOT NULL,
-	`value` text NOT NULL,
-	`createdAt` integer NOT NULL,
-	`createdByAuthId` text,
-	`updatedAt` integer NOT NULL,
-	`updatedByAuthId` text,
-	FOREIGN KEY (`createdByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null,
-	FOREIGN KEY (`updatedByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null
-);
---> statement-breakpoint
-CREATE INDEX `core_setting_updatedAt_idx` ON `core_setting` (`updatedAt`);--> statement-breakpoint
-CREATE INDEX `core_setting_updatedByAuthId_idx` ON `core_setting` (`updatedByAuthId`);--> statement-breakpoint
-CREATE TABLE `core_user` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`email` text NOT NULL,
-	`firstName` text NOT NULL,
-	`lastName` text NOT NULL,
-	`profilePhotoUrl` text,
-	`hackTag` text,
-	`bio` text,
-	`pronouns` text,
-	`skills` text DEFAULT '[]' NOT NULL,
-	`isProfileSearchable` integer DEFAULT true NOT NULL,
-	`discordDisplayHandle` text,
-	`roleId` text,
-	`isApproved` integer DEFAULT false NOT NULL,
-	`checkedInAt` integer,
-	`createdAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	FOREIGN KEY (`roleId`) REFERENCES `core_role`(`id`) ON UPDATE no action ON DELETE set null
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `core_user_email_unique` ON `core_user` (`email`);--> statement-breakpoint
-CREATE UNIQUE INDEX `core_user_hackTag_unique` ON `core_user` (`hackTag`);--> statement-breakpoint
-CREATE INDEX `core_user_email_idx` ON `core_user` (`email`);--> statement-breakpoint
-CREATE INDEX `core_user_hackTag_idx` ON `core_user` (`hackTag`);--> statement-breakpoint
-CREATE INDEX `core_user_roleId_idx` ON `core_user` (`roleId`);--> statement-breakpoint
-CREATE INDEX `core_user_createdAt_idx` ON `core_user` (`createdAt`);--> statement-breakpoint
-CREATE TABLE `core_userBan` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`reason` text,
-	`bannedByAuthId` text NOT NULL,
-	`createdAt` integer NOT NULL,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`bannedByAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE no action
-);
---> statement-breakpoint
-CREATE TABLE `core_userData` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`age` integer NOT NULL,
-	`gender` text NOT NULL,
-	`race` text NOT NULL,
-	`ethnicity` text NOT NULL,
-	`shirtSize` text NOT NULL,
-	`dietaryRestrictions` text DEFAULT '[]' NOT NULL,
-	`accommodationNote` text,
-	`phoneNumber` text,
-	`countryOfResidence` text,
-	`hasAcceptedMLHCodeOfConduct` integer NOT NULL,
-	`hasSharedDataWithMLH` integer NOT NULL,
-	`isEmailable` integer NOT NULL,
-	`completedAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE TABLE `discord_member` (
-	`authId` text PRIMARY KEY NOT NULL,
-	`discordUserId` text NOT NULL,
-	`guildId` text NOT NULL,
-	`username` text NOT NULL,
-	`avatarHash` text,
-	`verifiedAt` integer NOT NULL,
-	`updatedAt` integer NOT NULL,
-	`lastRoleSyncAt` integer,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `discord_member_discordUserId_unique` ON `discord_member` (`discordUserId`);--> statement-breakpoint
-CREATE INDEX `discord_member_discordUserId_idx` ON `discord_member` (`discordUserId`);--> statement-breakpoint
-CREATE INDEX `discord_member_guildId_idx` ON `discord_member` (`guildId`);--> statement-breakpoint
-CREATE INDEX `discord_member_updatedAt_idx` ON `discord_member` (`updatedAt`);--> statement-breakpoint
-CREATE TABLE `discord_roleSyncAttempt` (
-	`id` text PRIMARY KEY NOT NULL,
-	`authId` text NOT NULL,
-	`discordUserId` text NOT NULL,
-	`guildId` text NOT NULL,
-	`status` text NOT NULL,
-	`roleIds` text DEFAULT '[]' NOT NULL,
-	`roleNames` text DEFAULT '[]' NOT NULL,
-	`error` text,
-	`createdAt` integer NOT NULL,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE INDEX `discord_roleSyncAttempt_authId_idx` ON `discord_roleSyncAttempt` (`authId`);--> statement-breakpoint
-CREATE INDEX `discord_roleSyncAttempt_discordUserId_idx` ON `discord_roleSyncAttempt` (`discordUserId`);--> statement-breakpoint
-CREATE INDEX `discord_roleSyncAttempt_status_idx` ON `discord_roleSyncAttempt` (`status`);--> statement-breakpoint
-CREATE INDEX `discord_roleSyncAttempt_createdAt_idx` ON `discord_roleSyncAttempt` (`createdAt`);--> statement-breakpoint
-CREATE TABLE `discord_verification` (
-	`code` text PRIMARY KEY NOT NULL,
-	`discordUserId` text NOT NULL,
-	`guildId` text NOT NULL,
-	`username` text NOT NULL,
-	`avatarHash` text,
-	`authId` text,
-	`status` text DEFAULT 'pending' NOT NULL,
-	`expiresAt` integer NOT NULL,
-	`createdAt` integer NOT NULL,
-	`acceptedAt` integer,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE set null
-);
---> statement-breakpoint
-CREATE INDEX `discord_verification_discordUserId_idx` ON `discord_verification` (`discordUserId`);--> statement-breakpoint
-CREATE INDEX `discord_verification_guildId_idx` ON `discord_verification` (`guildId`);--> statement-breakpoint
-CREATE INDEX `discord_verification_authId_idx` ON `discord_verification` (`authId`);--> statement-breakpoint
-CREATE INDEX `discord_verification_status_idx` ON `discord_verification` (`status`);--> statement-breakpoint
-CREATE INDEX `discord_verification_createdAt_idx` ON `discord_verification` (`createdAt`);--> statement-breakpoint
-CREATE TABLE `teams_invite` (
-	`id` text PRIMARY KEY NOT NULL,
-	`teamId` text NOT NULL,
-	`inviteeAuthId` text NOT NULL,
-	`status` text DEFAULT 'pending' NOT NULL,
-	`createdAt` integer NOT NULL,
-	FOREIGN KEY (`teamId`) REFERENCES `teams_team`(`id`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`inviteeAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE INDEX `teams_invite_teamId_idx` ON `teams_invite` (`teamId`);--> statement-breakpoint
-CREATE INDEX `teams_invite_inviteeAuthId_idx` ON `teams_invite` (`inviteeAuthId`);--> statement-breakpoint
-CREATE INDEX `teams_invite_teamId_inviteeAuthId_idx` ON `teams_invite` (`teamId`,`inviteeAuthId`);--> statement-breakpoint
-CREATE TABLE `teams_member` (
-	`id` text PRIMARY KEY NOT NULL,
-	`teamId` text NOT NULL,
-	`authId` text NOT NULL,
-	`joinedAt` integer NOT NULL,
-	FOREIGN KEY (`teamId`) REFERENCES `teams_team`(`id`) ON UPDATE no action ON DELETE cascade,
-	FOREIGN KEY (`authId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `teams_member_authId_unique` ON `teams_member` (`authId`);--> statement-breakpoint
-CREATE INDEX `teams_member_teamId_idx` ON `teams_member` (`teamId`);--> statement-breakpoint
-CREATE INDEX `teams_member_authId_idx` ON `teams_member` (`authId`);--> statement-breakpoint
-CREATE TABLE `teams_team` (
-	`id` text PRIMARY KEY NOT NULL,
-	`name` text NOT NULL,
-	`tag` text NOT NULL,
-	`ownerAuthId` text NOT NULL,
-	`createdAt` integer NOT NULL,
-	FOREIGN KEY (`ownerAuthId`) REFERENCES `core_user`(`authId`) ON UPDATE no action ON DELETE cascade
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX `teams_team_tag_unique` ON `teams_team` (`tag`);--> statement-breakpoint
-CREATE INDEX `teams_team_tag_idx` ON `teams_team` (`tag`);--> statement-breakpoint
-CREATE INDEX `teams_team_ownerAuthId_idx` ON `teams_team` (`ownerAuthId`);
\ No newline at end of file
diff --git a/apps/web/db/migrations/meta/0000_snapshot.json b/apps/web/db/migrations/meta/0000_snapshot.json
deleted file mode 100644
index 911afa26..00000000
--- a/apps/web/db/migrations/meta/0000_snapshot.json
+++ /dev/null
@@ -1,2299 +0,0 @@
-{
-  "version": "6",
-  "dialect": "sqlite",
-  "id": "ef7b72a8-e504-4a70-9e7d-6b669636f757",
-  "prevId": "00000000-0000-0000-0000-000000000000",
-  "tables": {
-    "account": {
-      "name": "account",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "account_id": {
-          "name": "account_id",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "provider_id": {
-          "name": "provider_id",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "user_id": {
-          "name": "user_id",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "access_token": {
-          "name": "access_token",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "refresh_token": {
-          "name": "refresh_token",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "id_token": {
-          "name": "id_token",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "access_token_expires_at": {
-          "name": "access_token_expires_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "refresh_token_expires_at": {
-          "name": "refresh_token_expires_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "scope": {
-          "name": "scope",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "password": {
-          "name": "password",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "created_at": {
-          "name": "created_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        },
-        "updated_at": {
-          "name": "updated_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "account_userId_idx": {
-          "name": "account_userId_idx",
-          "columns": [
-            "user_id"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "account_user_id_user_id_fk": {
-          "name": "account_user_id_user_id_fk",
-          "tableFrom": "account",
-          "tableTo": "user",
-          "columnsFrom": [
-            "user_id"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "session": {
-      "name": "session",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "expires_at": {
-          "name": "expires_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "token": {
-          "name": "token",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "created_at": {
-          "name": "created_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        },
-        "updated_at": {
-          "name": "updated_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "ip_address": {
-          "name": "ip_address",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "user_agent": {
-          "name": "user_agent",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "user_id": {
-          "name": "user_id",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "session_token_unique": {
-          "name": "session_token_unique",
-          "columns": [
-            "token"
-          ],
-          "isUnique": true
-        },
-        "session_userId_idx": {
-          "name": "session_userId_idx",
-          "columns": [
-            "user_id"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "session_user_id_user_id_fk": {
-          "name": "session_user_id_user_id_fk",
-          "tableFrom": "session",
-          "tableTo": "user",
-          "columnsFrom": [
-            "user_id"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "user": {
-      "name": "user",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "name": {
-          "name": "name",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "email": {
-          "name": "email",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "email_verified": {
-          "name": "email_verified",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": false
-        },
-        "image": {
-          "name": "image",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "created_at": {
-          "name": "created_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        },
-        "updated_at": {
-          "name": "updated_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        }
-      },
-      "indexes": {
-        "user_email_unique": {
-          "name": "user_email_unique",
-          "columns": [
-            "email"
-          ],
-          "isUnique": true
-        }
-      },
-      "foreignKeys": {},
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "verification": {
-      "name": "verification",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "identifier": {
-          "name": "identifier",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "value": {
-          "name": "value",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "expires_at": {
-          "name": "expires_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "created_at": {
-          "name": "created_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        },
-        "updated_at": {
-          "name": "updated_at",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "(cast(unixepoch('subsecond') * 1000 as integer))"
-        }
-      },
-      "indexes": {
-        "verification_identifier_idx": {
-          "name": "verification_identifier_idx",
-          "columns": [
-            "identifier"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {},
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_event": {
-      "name": "core_event",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "title": {
-          "name": "title",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "startTime": {
-          "name": "startTime",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "endTime": {
-          "name": "endTime",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "location": {
-          "name": "location",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'TBD'"
-        },
-        "description": {
-          "name": "description",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "type": {
-          "name": "type",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "host": {
-          "name": "host",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "hidden": {
-          "name": "hidden",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_event_startTime_idx": {
-          "name": "core_event_startTime_idx",
-          "columns": [
-            "startTime"
-          ],
-          "isUnique": false
-        },
-        "core_event_type_idx": {
-          "name": "core_event_type_idx",
-          "columns": [
-            "type"
-          ],
-          "isUnique": false
-        },
-        "core_event_hidden_idx": {
-          "name": "core_event_hidden_idx",
-          "columns": [
-            "hidden"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {},
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_eventScan": {
-      "name": "core_eventScan",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "eventId": {
-          "name": "eventId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "scannedByAuthId": {
-          "name": "scannedByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "scannedAt": {
-          "name": "scannedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_eventScan_eventId_idx": {
-          "name": "core_eventScan_eventId_idx",
-          "columns": [
-            "eventId"
-          ],
-          "isUnique": false
-        },
-        "core_eventScan_authId_idx": {
-          "name": "core_eventScan_authId_idx",
-          "columns": [
-            "authId"
-          ],
-          "isUnique": false
-        },
-        "core_eventScan_eventId_authId_idx": {
-          "name": "core_eventScan_eventId_authId_idx",
-          "columns": [
-            "eventId",
-            "authId"
-          ],
-          "isUnique": false
-        },
-        "core_eventScan_scannedAt_idx": {
-          "name": "core_eventScan_scannedAt_idx",
-          "columns": [
-            "scannedAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_eventScan_eventId_core_event_id_fk": {
-          "name": "core_eventScan_eventId_core_event_id_fk",
-          "tableFrom": "core_eventScan",
-          "tableTo": "core_event",
-          "columnsFrom": [
-            "eventId"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "core_eventScan_authId_core_user_authId_fk": {
-          "name": "core_eventScan_authId_core_user_authId_fk",
-          "tableFrom": "core_eventScan",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "core_eventScan_scannedByAuthId_core_user_authId_fk": {
-          "name": "core_eventScan_scannedByAuthId_core_user_authId_fk",
-          "tableFrom": "core_eventScan",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "scannedByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "no action",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_hacker": {
-      "name": "core_hacker",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "university": {
-          "name": "university",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "major": {
-          "name": "major",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "schoolId": {
-          "name": "schoolId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "levelOfStudy": {
-          "name": "levelOfStudy",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "hackathonsAttended": {
-          "name": "hackathonsAttended",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "softwareExperience": {
-          "name": "softwareExperience",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "heardFrom": {
-          "name": "heardFrom",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "githubUrl": {
-          "name": "githubUrl",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "linkedInUrl": {
-          "name": "linkedInUrl",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "personalWebsiteUrl": {
-          "name": "personalWebsiteUrl",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "resumeUrl": {
-          "name": "resumeUrl",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "group": {
-          "name": "group",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "registeredAt": {
-          "name": "registeredAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_hacker_registeredAt_idx": {
-          "name": "core_hacker_registeredAt_idx",
-          "columns": [
-            "registeredAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_hacker_authId_core_user_authId_fk": {
-          "name": "core_hacker_authId_core_user_authId_fk",
-          "tableFrom": "core_hacker",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_notificationDeliveryAttempt": {
-      "name": "core_notificationDeliveryAttempt",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "intentId": {
-          "name": "intentId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "channel": {
-          "name": "channel",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "provider": {
-          "name": "provider",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "recipient": {
-          "name": "recipient",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "externalId": {
-          "name": "externalId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "error": {
-          "name": "error",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "metadata": {
-          "name": "metadata",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'{}'"
-        },
-        "attemptedAt": {
-          "name": "attemptedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_notificationDeliveryAttempt_intentId_idx": {
-          "name": "core_notificationDeliveryAttempt_intentId_idx",
-          "columns": [
-            "intentId"
-          ],
-          "isUnique": false
-        },
-        "core_notificationDeliveryAttempt_channel_idx": {
-          "name": "core_notificationDeliveryAttempt_channel_idx",
-          "columns": [
-            "channel"
-          ],
-          "isUnique": false
-        },
-        "core_notificationDeliveryAttempt_status_idx": {
-          "name": "core_notificationDeliveryAttempt_status_idx",
-          "columns": [
-            "status"
-          ],
-          "isUnique": false
-        },
-        "core_notificationDeliveryAttempt_attemptedAt_idx": {
-          "name": "core_notificationDeliveryAttempt_attemptedAt_idx",
-          "columns": [
-            "attemptedAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_notificationDeliveryAttempt_intentId_core_notificationIntent_id_fk": {
-          "name": "core_notificationDeliveryAttempt_intentId_core_notificationIntent_id_fk",
-          "tableFrom": "core_notificationDeliveryAttempt",
-          "tableTo": "core_notificationIntent",
-          "columnsFrom": [
-            "intentId"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_notificationIntent": {
-      "name": "core_notificationIntent",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "kind": {
-          "name": "kind",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "recipientAuthId": {
-          "name": "recipientAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "payload": {
-          "name": "payload",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'{}'"
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'pending'"
-        },
-        "idempotencyKey": {
-          "name": "idempotencyKey",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_notificationIntent_idempotencyKey_unique": {
-          "name": "core_notificationIntent_idempotencyKey_unique",
-          "columns": [
-            "idempotencyKey"
-          ],
-          "isUnique": true
-        },
-        "core_notificationIntent_kind_idx": {
-          "name": "core_notificationIntent_kind_idx",
-          "columns": [
-            "kind"
-          ],
-          "isUnique": false
-        },
-        "core_notificationIntent_recipientAuthId_idx": {
-          "name": "core_notificationIntent_recipientAuthId_idx",
-          "columns": [
-            "recipientAuthId"
-          ],
-          "isUnique": false
-        },
-        "core_notificationIntent_status_idx": {
-          "name": "core_notificationIntent_status_idx",
-          "columns": [
-            "status"
-          ],
-          "isUnique": false
-        },
-        "core_notificationIntent_createdAt_idx": {
-          "name": "core_notificationIntent_createdAt_idx",
-          "columns": [
-            "createdAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_notificationIntent_recipientAuthId_core_user_authId_fk": {
-          "name": "core_notificationIntent_recipientAuthId_core_user_authId_fk",
-          "tableFrom": "core_notificationIntent",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "recipientAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_role": {
-      "name": "core_role",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "name": {
-          "name": "name",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "position": {
-          "name": "position",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "permissions": {
-          "name": "permissions",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'[]'"
-        },
-        "color": {
-          "name": "color",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_role_name_unique": {
-          "name": "core_role_name_unique",
-          "columns": [
-            "name"
-          ],
-          "isUnique": true
-        },
-        "core_role_position_idx": {
-          "name": "core_role_position_idx",
-          "columns": [
-            "position"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {},
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_rsvp": {
-      "name": "core_rsvp",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "waitlistPosition": {
-          "name": "waitlistPosition",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "confirmedAt": {
-          "name": "confirmedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "waitlistedAt": {
-          "name": "waitlistedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "cancelledAt": {
-          "name": "cancelledAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "cancelledByAuthId": {
-          "name": "cancelledByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "promotedAt": {
-          "name": "promotedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "promotedByAuthId": {
-          "name": "promotedByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_rsvp_status_idx": {
-          "name": "core_rsvp_status_idx",
-          "columns": [
-            "status"
-          ],
-          "isUnique": false
-        },
-        "core_rsvp_waitlistPosition_idx": {
-          "name": "core_rsvp_waitlistPosition_idx",
-          "columns": [
-            "waitlistPosition"
-          ],
-          "isUnique": false
-        },
-        "core_rsvp_createdAt_idx": {
-          "name": "core_rsvp_createdAt_idx",
-          "columns": [
-            "createdAt"
-          ],
-          "isUnique": false
-        },
-        "core_rsvp_updatedAt_idx": {
-          "name": "core_rsvp_updatedAt_idx",
-          "columns": [
-            "updatedAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_rsvp_authId_core_user_authId_fk": {
-          "name": "core_rsvp_authId_core_user_authId_fk",
-          "tableFrom": "core_rsvp",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "core_rsvp_cancelledByAuthId_core_user_authId_fk": {
-          "name": "core_rsvp_cancelledByAuthId_core_user_authId_fk",
-          "tableFrom": "core_rsvp",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "cancelledByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        },
-        "core_rsvp_promotedByAuthId_core_user_authId_fk": {
-          "name": "core_rsvp_promotedByAuthId_core_user_authId_fk",
-          "tableFrom": "core_rsvp",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "promotedByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_setting": {
-      "name": "core_setting",
-      "columns": {
-        "key": {
-          "name": "key",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "value": {
-          "name": "value",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "createdByAuthId": {
-          "name": "createdByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedByAuthId": {
-          "name": "updatedByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_setting_updatedAt_idx": {
-          "name": "core_setting_updatedAt_idx",
-          "columns": [
-            "updatedAt"
-          ],
-          "isUnique": false
-        },
-        "core_setting_updatedByAuthId_idx": {
-          "name": "core_setting_updatedByAuthId_idx",
-          "columns": [
-            "updatedByAuthId"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_setting_createdByAuthId_core_user_authId_fk": {
-          "name": "core_setting_createdByAuthId_core_user_authId_fk",
-          "tableFrom": "core_setting",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "createdByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        },
-        "core_setting_updatedByAuthId_core_user_authId_fk": {
-          "name": "core_setting_updatedByAuthId_core_user_authId_fk",
-          "tableFrom": "core_setting",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "updatedByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_user": {
-      "name": "core_user",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "email": {
-          "name": "email",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "firstName": {
-          "name": "firstName",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "lastName": {
-          "name": "lastName",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "profilePhotoUrl": {
-          "name": "profilePhotoUrl",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "hackTag": {
-          "name": "hackTag",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "bio": {
-          "name": "bio",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "pronouns": {
-          "name": "pronouns",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "skills": {
-          "name": "skills",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'[]'"
-        },
-        "isProfileSearchable": {
-          "name": "isProfileSearchable",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": true
-        },
-        "discordDisplayHandle": {
-          "name": "discordDisplayHandle",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "roleId": {
-          "name": "roleId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "isApproved": {
-          "name": "isApproved",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": false
-        },
-        "checkedInAt": {
-          "name": "checkedInAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "core_user_email_unique": {
-          "name": "core_user_email_unique",
-          "columns": [
-            "email"
-          ],
-          "isUnique": true
-        },
-        "core_user_hackTag_unique": {
-          "name": "core_user_hackTag_unique",
-          "columns": [
-            "hackTag"
-          ],
-          "isUnique": true
-        },
-        "core_user_email_idx": {
-          "name": "core_user_email_idx",
-          "columns": [
-            "email"
-          ],
-          "isUnique": false
-        },
-        "core_user_hackTag_idx": {
-          "name": "core_user_hackTag_idx",
-          "columns": [
-            "hackTag"
-          ],
-          "isUnique": false
-        },
-        "core_user_roleId_idx": {
-          "name": "core_user_roleId_idx",
-          "columns": [
-            "roleId"
-          ],
-          "isUnique": false
-        },
-        "core_user_createdAt_idx": {
-          "name": "core_user_createdAt_idx",
-          "columns": [
-            "createdAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "core_user_roleId_core_role_id_fk": {
-          "name": "core_user_roleId_core_role_id_fk",
-          "tableFrom": "core_user",
-          "tableTo": "core_role",
-          "columnsFrom": [
-            "roleId"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_userBan": {
-      "name": "core_userBan",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "reason": {
-          "name": "reason",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "bannedByAuthId": {
-          "name": "bannedByAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {},
-      "foreignKeys": {
-        "core_userBan_authId_core_user_authId_fk": {
-          "name": "core_userBan_authId_core_user_authId_fk",
-          "tableFrom": "core_userBan",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "core_userBan_bannedByAuthId_core_user_authId_fk": {
-          "name": "core_userBan_bannedByAuthId_core_user_authId_fk",
-          "tableFrom": "core_userBan",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "bannedByAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "no action",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "core_userData": {
-      "name": "core_userData",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "age": {
-          "name": "age",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "gender": {
-          "name": "gender",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "race": {
-          "name": "race",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "ethnicity": {
-          "name": "ethnicity",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "shirtSize": {
-          "name": "shirtSize",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "dietaryRestrictions": {
-          "name": "dietaryRestrictions",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'[]'"
-        },
-        "accommodationNote": {
-          "name": "accommodationNote",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "phoneNumber": {
-          "name": "phoneNumber",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "countryOfResidence": {
-          "name": "countryOfResidence",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "hasAcceptedMLHCodeOfConduct": {
-          "name": "hasAcceptedMLHCodeOfConduct",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "hasSharedDataWithMLH": {
-          "name": "hasSharedDataWithMLH",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "isEmailable": {
-          "name": "isEmailable",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "completedAt": {
-          "name": "completedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {},
-      "foreignKeys": {
-        "core_userData_authId_core_user_authId_fk": {
-          "name": "core_userData_authId_core_user_authId_fk",
-          "tableFrom": "core_userData",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "discord_member": {
-      "name": "discord_member",
-      "columns": {
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "discordUserId": {
-          "name": "discordUserId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "guildId": {
-          "name": "guildId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "username": {
-          "name": "username",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "avatarHash": {
-          "name": "avatarHash",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "verifiedAt": {
-          "name": "verifiedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "updatedAt": {
-          "name": "updatedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "lastRoleSyncAt": {
-          "name": "lastRoleSyncAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "discord_member_discordUserId_unique": {
-          "name": "discord_member_discordUserId_unique",
-          "columns": [
-            "discordUserId"
-          ],
-          "isUnique": true
-        },
-        "discord_member_discordUserId_idx": {
-          "name": "discord_member_discordUserId_idx",
-          "columns": [
-            "discordUserId"
-          ],
-          "isUnique": false
-        },
-        "discord_member_guildId_idx": {
-          "name": "discord_member_guildId_idx",
-          "columns": [
-            "guildId"
-          ],
-          "isUnique": false
-        },
-        "discord_member_updatedAt_idx": {
-          "name": "discord_member_updatedAt_idx",
-          "columns": [
-            "updatedAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "discord_member_authId_core_user_authId_fk": {
-          "name": "discord_member_authId_core_user_authId_fk",
-          "tableFrom": "discord_member",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "discord_roleSyncAttempt": {
-      "name": "discord_roleSyncAttempt",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "discordUserId": {
-          "name": "discordUserId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "guildId": {
-          "name": "guildId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "roleIds": {
-          "name": "roleIds",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'[]'"
-        },
-        "roleNames": {
-          "name": "roleNames",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'[]'"
-        },
-        "error": {
-          "name": "error",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "discord_roleSyncAttempt_authId_idx": {
-          "name": "discord_roleSyncAttempt_authId_idx",
-          "columns": [
-            "authId"
-          ],
-          "isUnique": false
-        },
-        "discord_roleSyncAttempt_discordUserId_idx": {
-          "name": "discord_roleSyncAttempt_discordUserId_idx",
-          "columns": [
-            "discordUserId"
-          ],
-          "isUnique": false
-        },
-        "discord_roleSyncAttempt_status_idx": {
-          "name": "discord_roleSyncAttempt_status_idx",
-          "columns": [
-            "status"
-          ],
-          "isUnique": false
-        },
-        "discord_roleSyncAttempt_createdAt_idx": {
-          "name": "discord_roleSyncAttempt_createdAt_idx",
-          "columns": [
-            "createdAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "discord_roleSyncAttempt_authId_core_user_authId_fk": {
-          "name": "discord_roleSyncAttempt_authId_core_user_authId_fk",
-          "tableFrom": "discord_roleSyncAttempt",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "discord_verification": {
-      "name": "discord_verification",
-      "columns": {
-        "code": {
-          "name": "code",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "discordUserId": {
-          "name": "discordUserId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "guildId": {
-          "name": "guildId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "username": {
-          "name": "username",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "avatarHash": {
-          "name": "avatarHash",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'pending'"
-        },
-        "expiresAt": {
-          "name": "expiresAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "acceptedAt": {
-          "name": "acceptedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": false,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "discord_verification_discordUserId_idx": {
-          "name": "discord_verification_discordUserId_idx",
-          "columns": [
-            "discordUserId"
-          ],
-          "isUnique": false
-        },
-        "discord_verification_guildId_idx": {
-          "name": "discord_verification_guildId_idx",
-          "columns": [
-            "guildId"
-          ],
-          "isUnique": false
-        },
-        "discord_verification_authId_idx": {
-          "name": "discord_verification_authId_idx",
-          "columns": [
-            "authId"
-          ],
-          "isUnique": false
-        },
-        "discord_verification_status_idx": {
-          "name": "discord_verification_status_idx",
-          "columns": [
-            "status"
-          ],
-          "isUnique": false
-        },
-        "discord_verification_createdAt_idx": {
-          "name": "discord_verification_createdAt_idx",
-          "columns": [
-            "createdAt"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "discord_verification_authId_core_user_authId_fk": {
-          "name": "discord_verification_authId_core_user_authId_fk",
-          "tableFrom": "discord_verification",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "set null",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "teams_invite": {
-      "name": "teams_invite",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "teamId": {
-          "name": "teamId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "inviteeAuthId": {
-          "name": "inviteeAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "status": {
-          "name": "status",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false,
-          "default": "'pending'"
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "teams_invite_teamId_idx": {
-          "name": "teams_invite_teamId_idx",
-          "columns": [
-            "teamId"
-          ],
-          "isUnique": false
-        },
-        "teams_invite_inviteeAuthId_idx": {
-          "name": "teams_invite_inviteeAuthId_idx",
-          "columns": [
-            "inviteeAuthId"
-          ],
-          "isUnique": false
-        },
-        "teams_invite_teamId_inviteeAuthId_idx": {
-          "name": "teams_invite_teamId_inviteeAuthId_idx",
-          "columns": [
-            "teamId",
-            "inviteeAuthId"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "teams_invite_teamId_teams_team_id_fk": {
-          "name": "teams_invite_teamId_teams_team_id_fk",
-          "tableFrom": "teams_invite",
-          "tableTo": "teams_team",
-          "columnsFrom": [
-            "teamId"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "teams_invite_inviteeAuthId_core_user_authId_fk": {
-          "name": "teams_invite_inviteeAuthId_core_user_authId_fk",
-          "tableFrom": "teams_invite",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "inviteeAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "teams_member": {
-      "name": "teams_member",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "teamId": {
-          "name": "teamId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "authId": {
-          "name": "authId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "joinedAt": {
-          "name": "joinedAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "teams_member_authId_unique": {
-          "name": "teams_member_authId_unique",
-          "columns": [
-            "authId"
-          ],
-          "isUnique": true
-        },
-        "teams_member_teamId_idx": {
-          "name": "teams_member_teamId_idx",
-          "columns": [
-            "teamId"
-          ],
-          "isUnique": false
-        },
-        "teams_member_authId_idx": {
-          "name": "teams_member_authId_idx",
-          "columns": [
-            "authId"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "teams_member_teamId_teams_team_id_fk": {
-          "name": "teams_member_teamId_teams_team_id_fk",
-          "tableFrom": "teams_member",
-          "tableTo": "teams_team",
-          "columnsFrom": [
-            "teamId"
-          ],
-          "columnsTo": [
-            "id"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        },
-        "teams_member_authId_core_user_authId_fk": {
-          "name": "teams_member_authId_core_user_authId_fk",
-          "tableFrom": "teams_member",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "authId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    },
-    "teams_team": {
-      "name": "teams_team",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "name": {
-          "name": "name",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "tag": {
-          "name": "tag",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "ownerAuthId": {
-          "name": "ownerAuthId",
-          "type": "text",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true,
-          "autoincrement": false
-        }
-      },
-      "indexes": {
-        "teams_team_tag_unique": {
-          "name": "teams_team_tag_unique",
-          "columns": [
-            "tag"
-          ],
-          "isUnique": true
-        },
-        "teams_team_tag_idx": {
-          "name": "teams_team_tag_idx",
-          "columns": [
-            "tag"
-          ],
-          "isUnique": false
-        },
-        "teams_team_ownerAuthId_idx": {
-          "name": "teams_team_ownerAuthId_idx",
-          "columns": [
-            "ownerAuthId"
-          ],
-          "isUnique": false
-        }
-      },
-      "foreignKeys": {
-        "teams_team_ownerAuthId_core_user_authId_fk": {
-          "name": "teams_team_ownerAuthId_core_user_authId_fk",
-          "tableFrom": "teams_team",
-          "tableTo": "core_user",
-          "columnsFrom": [
-            "ownerAuthId"
-          ],
-          "columnsTo": [
-            "authId"
-          ],
-          "onDelete": "cascade",
-          "onUpdate": "no action"
-        }
-      },
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "checkConstraints": {}
-    }
-  },
-  "views": {},
-  "enums": {},
-  "_meta": {
-    "schemas": {},
-    "tables": {},
-    "columns": {}
-  },
-  "internal": {
-    "indexes": {}
-  }
-}
\ No newline at end of file
diff --git a/apps/web/db/migrations/meta/_journal.json b/apps/web/db/migrations/meta/_journal.json
deleted file mode 100644
index 557ba34f..00000000
--- a/apps/web/db/migrations/meta/_journal.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "version": "7",
-  "dialect": "sqlite",
-  "entries": [
-    {
-      "idx": 0,
-      "version": "6",
-      "when": 1784083199149,
-      "tag": "0000_init",
-      "breakpoints": true
-    }
-  ]
-}
diff --git a/apps/web/db/migrations/mysql/.snapshot.json b/apps/web/db/migrations/mysql/.snapshot.json
new file mode 100644
index 00000000..55491d32
--- /dev/null
+++ b/apps/web/db/migrations/mysql/.snapshot.json
@@ -0,0 +1,4483 @@
+{
+  "namespaces": [],
+  "tables": [
+    {
+      "name": "account",
+      "columns": {
+        "access_token": {
+          "name": "access_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "account_id": {
+          "name": "account_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id_token": {
+          "name": "id_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "password": {
+          "name": "password",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "refresh_token": {
+          "name": "refresh_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "refresh_token_expires_at": {
+          "name": "refresh_token_expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "account_user_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "account_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "account_user_id_foreign",
+          "localTableName": "account",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_event",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "end_time": {
+          "name": "end_time",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "hidden": {
+          "name": "hidden",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "host": {
+          "name": "host",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "location": {
+          "name": "location",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": "'TBD'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "start_time": {
+          "name": "start_time",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "title": {
+          "name": "title",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "type": {
+          "name": "type",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "hidden"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_hidden_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "start_time"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_start_time_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "type"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_type_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_event_scan",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "scanned_at": {
+          "name": "scanned_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scanned_by_auth_id": {
+          "name": "scanned_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id",
+            "auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "scanned_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_scanned_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "scanned_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_scanned_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_event_scan_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_event_scan_auth_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_event_id_foreign": {
+          "columnNames": [
+            "event_id"
+          ],
+          "constraintName": "core_event_scan_event_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_event",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_scanned_by_auth_id_foreign": {
+          "columnNames": [
+            "scanned_by_auth_id"
+          ],
+          "constraintName": "core_event_scan_scanned_by_auth_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_hacker",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "github_url": {
+          "name": "github_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "group": {
+          "name": "group",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "hackathons_attended": {
+          "name": "hackathons_attended",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "heard_from": {
+          "name": "heard_from",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "level_of_study": {
+          "name": "level_of_study",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "linked_in_url": {
+          "name": "linked_in_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "major": {
+          "name": "major",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "personal_website_url": {
+          "name": "personal_website_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "resume_url": {
+          "name": "resume_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "school_id": {
+          "name": "school_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "software_experience": {
+          "name": "software_experience",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "university": {
+          "name": "university",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_hacker_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "registered_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_hacker_registered_at_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_hacker_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_hacker_auth_id_foreign",
+          "localTableName": "core_hacker",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_delivery_attempt",
+      "columns": {
+        "attempted_at": {
+          "name": "attempted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "channel": {
+          "name": "channel",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "external_id": {
+          "name": "external_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "intent_id": {
+          "name": "intent_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "provider": {
+          "name": "provider",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "recipient": {
+          "name": "recipient",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('delivered','failed','skipped')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "attempted_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_attempted_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "channel"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_channel_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "intent_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_intent_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_delivery_attempt_intent_id_foreign": {
+          "columnNames": [
+            "intent_id"
+          ],
+          "constraintName": "core_notification_delivery_attempt_intent_id_foreign",
+          "localTableName": "core_notification_delivery_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_notification_intent",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_intent",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "payload": {
+          "name": "payload",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "recipient_auth_id": {
+          "name": "recipient_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('pending','processing','delivered','failed','skipped')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "processing",
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "idempotency_key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_notification_intent_idempotency_key_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "kind"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_kind_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_recipient_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_intent_recipient_auth_id_foreign": {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "constraintName": "core_notification_intent_recipient_auth_id_foreign",
+          "localTableName": "core_notification_intent",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_operation_lock",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "token": {
+          "name": "token",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_role",
+      "columns": {
+        "color": {
+          "name": "color",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "position": {
+          "name": "position",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "name"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_role_name_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_role_position_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_rsvp",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "cancelled_at": {
+          "name": "cancelled_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "cancelled_by_auth_id": {
+          "name": "cancelled_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "confirmed_at": {
+          "name": "confirmed_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_at": {
+          "name": "promoted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_by_auth_id": {
+          "name": "promoted_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('confirmed','waitlisted','cancelled')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "confirmed",
+            "waitlisted",
+            "cancelled"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "waitlist_position": {
+          "name": "waitlist_position",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "waitlisted_at": {
+          "name": "waitlisted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "cancelled_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_cancelled_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "promoted_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_promoted_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "waitlist_position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_waitlist_position_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_rsvp_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_rsvp_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_rsvp_cancelled_by_auth_id_foreign": {
+          "columnNames": [
+            "cancelled_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_cancelled_by_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        },
+        "core_rsvp_promoted_by_auth_id_foreign": {
+          "columnNames": [
+            "promoted_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_promoted_by_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_setting",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_by_auth_id": {
+          "name": "created_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_by_auth_id": {
+          "name": "updated_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "value": {
+          "name": "value",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "created_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_created_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_setting_created_by_auth_id_foreign": {
+          "columnNames": [
+            "created_by_auth_id"
+          ],
+          "constraintName": "core_setting_created_by_auth_id_foreign",
+          "localTableName": "core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        },
+        "core_setting_updated_by_auth_id_foreign": {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "constraintName": "core_setting_updated_by_auth_id_foreign",
+          "localTableName": "core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user",
+      "columns": {
+        "bio": {
+          "name": "bio",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "checked_in_at": {
+          "name": "checked_in_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_display_handle": {
+          "name": "discord_display_handle",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "email": {
+          "name": "email",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "email_verified": {
+          "name": "email_verified",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "hack_tag": {
+          "name": "hack_tag",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "is_approved": {
+          "name": "is_approved",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "is_profile_searchable": {
+          "name": "is_profile_searchable",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "true",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "profile_photo_url": {
+          "name": "profile_photo_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "pronouns": {
+          "name": "pronouns",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "skills": {
+          "name": "skills",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "email"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_email_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_hack_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_hack_tag_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "role_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_role_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_role_id_foreign": {
+          "columnNames": [
+            "role_id"
+          ],
+          "constraintName": "core_user_role_id_foreign",
+          "localTableName": "core_user",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_role",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_ban",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "banned_by_auth_id": {
+          "name": "banned_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "reason": {
+          "name": "reason",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_ban_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "banned_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_ban_banned_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_ban_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_ban_auth_id_foreign",
+          "localTableName": "core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_user_ban_banned_by_auth_id_foreign": {
+          "columnNames": [
+            "banned_by_auth_id"
+          ],
+          "constraintName": "core_user_ban_banned_by_auth_id_foreign",
+          "localTableName": "core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_data",
+      "columns": {
+        "accommodation_note": {
+          "name": "accommodation_note",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "age": {
+          "name": "age",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "country_of_residence": {
+          "name": "country_of_residence",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "dietary_restrictions": {
+          "name": "dietary_restrictions",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "ethnicity": {
+          "name": "ethnicity",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "gender": {
+          "name": "gender",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "has_accepted_mlhcode_of_conduct": {
+          "name": "has_accepted_mlhcode_of_conduct",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "has_shared_data_with_mlh": {
+          "name": "has_shared_data_with_mlh",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "is_emailable": {
+          "name": "is_emailable",
+          "type": "tinyint(1)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "phone_number": {
+          "name": "phone_number",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "race": {
+          "name": "race",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "shirt_size": {
+          "name": "shirt_size",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_data_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_data_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_data_auth_id_foreign",
+          "localTableName": "core_user_data",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_member",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "last_role_sync_at": {
+          "name": "last_role_sync_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "username": {
+          "name": "username",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "verified_at": {
+          "name": "verified_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_member_discord_user_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_updated_at_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_member_auth_id_foreign",
+          "localTableName": "discord_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_role_sync_attempt",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "role_ids": {
+          "name": "role_ids",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "role_names": {
+          "name": "role_names",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('synced','failed','skipped')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "synced",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_role_sync_attempt_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_role_sync_attempt_auth_id_foreign",
+          "localTableName": "discord_role_sync_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_verification",
+      "columns": {
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "code": {
+          "name": "code",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('pending','accepted','rejected','expired')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "rejected",
+            "expired"
+          ],
+          "mappedType": "enum"
+        },
+        "username": {
+          "name": "username",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "code"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_verification_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_verification_auth_id_foreign",
+          "localTableName": "discord_verification",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "session",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "token": {
+          "name": "token",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "token"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "session_token_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "session_user_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "session_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "session_user_id_foreign",
+          "localTableName": "session",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_invite",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "invitee_auth_id": {
+          "name": "invitee_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "enum('pending','accepted','declined')",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "declined"
+          ],
+          "mappedType": "enum"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "team_id",
+            "invitee_auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_invite_invitee_auth_id_foreign": {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "constraintName": "teams_invite_invitee_auth_id_foreign",
+          "localTableName": "teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_invite_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_invite_team_id_foreign",
+          "localTableName": "teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_member",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "joined_at": {
+          "name": "joined_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_member_auth_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_team_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "teams_member_auth_id_foreign",
+          "localTableName": "teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_member_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_member_team_id_foreign",
+          "localTableName": "teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_team",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "owner_auth_id": {
+          "name": "owner_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "tag": {
+          "name": "tag",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_owner_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_team_tag_unique",
+          "primary": false,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_team_owner_auth_id_foreign": {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "constraintName": "teams_team_owner_auth_id_foreign",
+          "localTableName": "teams_team",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "verification",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "identifier": {
+          "name": "identifier",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "PRIMARY",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "identifier"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "verification_identifier_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    }
+  ],
+  "views": [],
+  "nativeEnums": {}
+}
\ No newline at end of file
diff --git a/apps/web/db/migrations/mysql/Migration20260927180400_initial.ts b/apps/web/db/migrations/mysql/Migration20260927180400_initial.ts
new file mode 100644
index 00000000..9160bcbf
--- /dev/null
+++ b/apps/web/db/migrations/mysql/Migration20260927180400_initial.ts
@@ -0,0 +1,171 @@
+import { Migration } from "@mikro-orm/migrations";
+
+export class Migration20260927180400_initial extends Migration {
+  override name = "Migration20260927180400_initial";
+
+  override up(): void {
+    this.addSql("create table `verification` (`id` varchar(255) not null, `identifier` varchar(255) not null, `value` text not null, `expires_at` datetime not null, `created_at` datetime null, `updated_at` datetime null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `verification` add index `verification_identifier_index` (`identifier`);");
+    this.addSql("create table `core_event` (`id` varchar(255) not null, `title` varchar(255) not null, `start_time` datetime not null, `end_time` datetime not null, `location` varchar(255) not null default 'TBD', `description` text not null, `type` varchar(255) not null, `host` varchar(255) null, `hidden` tinyint(1) not null default false, `created_at` datetime not null, `updated_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_event` add index `core_event_start_time_index` (`start_time`);");
+    this.addSql("alter table `core_event` add index `core_event_type_index` (`type`);");
+    this.addSql("alter table `core_event` add index `core_event_hidden_index` (`hidden`);");
+    this.addSql("create table `core_operation_lock` (`key` varchar(255) not null, `token` varchar(255) not null, primary key (`key`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("create table `core_role` (`id` varchar(255) not null, `name` varchar(255) not null, `position` int not null, `permissions` json not null default ('[]'), `color` varchar(255) null, `created_at` datetime not null, `updated_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_role` add unique `core_role_name_unique` (`name`);");
+    this.addSql("alter table `core_role` add index `core_role_position_index` (`position`);");
+    this.addSql("create table `core_user` (`id` varchar(255) not null, `name` varchar(255) not null, `email` varchar(255) not null, `email_verified` tinyint(1) not null default false, `profile_photo_url` text null, `hack_tag` varchar(255) null, `bio` text null, `pronouns` varchar(255) null, `skills` json not null default ('[]'), `is_profile_searchable` tinyint(1) not null default true, `discord_display_handle` varchar(255) null, `role_id` varchar(255) null, `is_approved` tinyint(1) not null default false, `checked_in_at` datetime null, `created_at` datetime not null, `updated_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_user` add unique `core_user_email_unique` (`email`);");
+    this.addSql("alter table `core_user` add unique `core_user_hack_tag_unique` (`hack_tag`);");
+    this.addSql("alter table `core_user` add index `core_user_hack_tag_index` (`hack_tag`);");
+    this.addSql("alter table `core_user` add index `core_user_role_id_index` (`role_id`);");
+    this.addSql("alter table `core_user` add index `core_user_created_at_index` (`created_at`);");
+    this.addSql("create table `discord_verification` (`code` varchar(255) not null, `discord_user_id` varchar(255) not null, `guild_id` varchar(255) not null, `username` varchar(255) not null, `avatar_hash` varchar(255) null, `auth_id` varchar(255) null, `status` enum('pending','accepted','rejected','expired') not null default 'pending', `expires_at` datetime not null, `created_at` datetime not null, `accepted_at` datetime null, primary key (`code`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `discord_verification` add index `discord_verification_discord_user_id_index` (`discord_user_id`);");
+    this.addSql("alter table `discord_verification` add index `discord_verification_guild_id_index` (`guild_id`);");
+    this.addSql("alter table `discord_verification` add index `discord_verification_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `discord_verification` add index `discord_verification_status_index` (`status`);");
+    this.addSql("alter table `discord_verification` add index `discord_verification_created_at_index` (`created_at`);");
+    this.addSql("create table `discord_role_sync_attempt` (`id` varchar(255) not null, `auth_id` varchar(255) not null, `discord_user_id` varchar(255) not null, `guild_id` varchar(255) not null, `status` enum('synced','failed','skipped') not null, `role_ids` json not null default ('[]'), `role_names` json not null default ('[]'), `error` text null, `created_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `discord_role_sync_attempt` add index `discord_role_sync_attempt_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `discord_role_sync_attempt` add index `discord_role_sync_attempt_discord_user_id_index` (`discord_user_id`);");
+    this.addSql("alter table `discord_role_sync_attempt` add index `discord_role_sync_attempt_status_index` (`status`);");
+    this.addSql("alter table `discord_role_sync_attempt` add index `discord_role_sync_attempt_created_at_index` (`created_at`);");
+    this.addSql("create table `discord_member` (`auth_id` varchar(255) not null, `discord_user_id` varchar(255) not null, `guild_id` varchar(255) not null, `username` varchar(255) not null, `avatar_hash` varchar(255) null, `verified_at` datetime not null, `updated_at` datetime not null, `last_role_sync_at` datetime null, primary key (`auth_id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `discord_member` add index `discord_member_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `discord_member` add unique `discord_member_discord_user_id_unique` (`discord_user_id`);");
+    this.addSql("alter table `discord_member` add index `discord_member_discord_user_id_index` (`discord_user_id`);");
+    this.addSql("alter table `discord_member` add index `discord_member_guild_id_index` (`guild_id`);");
+    this.addSql("alter table `discord_member` add index `discord_member_updated_at_index` (`updated_at`);");
+    this.addSql("create table `core_user_data` (`auth_id` varchar(255) not null, `age` int not null, `gender` varchar(255) not null, `race` varchar(255) not null, `ethnicity` varchar(255) not null, `shirt_size` varchar(255) not null, `dietary_restrictions` json not null default ('[]'), `accommodation_note` text null, `phone_number` varchar(255) null, `country_of_residence` varchar(255) null, `has_accepted_mlhcode_of_conduct` tinyint(1) not null, `has_shared_data_with_mlh` tinyint(1) not null, `is_emailable` tinyint(1) not null, `completed_at` datetime not null, `updated_at` datetime not null, primary key (`auth_id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_user_data` add index `core_user_data_auth_id_index` (`auth_id`);");
+    this.addSql("create table `core_user_ban` (`auth_id` varchar(255) not null, `reason` varchar(255) null, `banned_by_auth_id` varchar(255) not null, `created_at` datetime not null, primary key (`auth_id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_user_ban` add index `core_user_ban_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `core_user_ban` add index `core_user_ban_banned_by_auth_id_index` (`banned_by_auth_id`);");
+    this.addSql("create table `core_setting` (`key` varchar(255) not null, `value` json not null, `created_at` datetime not null, `created_by_auth_id` varchar(255) null, `updated_at` datetime not null, `updated_by_auth_id` varchar(255) null, primary key (`key`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_setting` add index `core_setting_created_by_auth_id_index` (`created_by_auth_id`);");
+    this.addSql("alter table `core_setting` add index `core_setting_updated_at_index` (`updated_at`);");
+    this.addSql("alter table `core_setting` add index `core_setting_updated_by_auth_id_index` (`updated_by_auth_id`);");
+    this.addSql("create table `core_rsvp` (`auth_id` varchar(255) not null, `status` enum('confirmed','waitlisted','cancelled') not null, `waitlist_position` int null, `created_at` datetime not null, `updated_at` datetime not null, `confirmed_at` datetime null, `waitlisted_at` datetime null, `cancelled_at` datetime null, `cancelled_by_auth_id` varchar(255) null, `promoted_at` datetime null, `promoted_by_auth_id` varchar(255) null, primary key (`auth_id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_cancelled_by_auth_id_index` (`cancelled_by_auth_id`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_promoted_by_auth_id_index` (`promoted_by_auth_id`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_status_index` (`status`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_waitlist_position_index` (`waitlist_position`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_created_at_index` (`created_at`);");
+    this.addSql("alter table `core_rsvp` add index `core_rsvp_updated_at_index` (`updated_at`);");
+    this.addSql("create table `core_notification_intent` (`id` varchar(255) not null, `kind` varchar(255) not null, `recipient_auth_id` varchar(255) null, `payload` json not null, `status` enum('pending','processing','delivered','failed','skipped') not null default 'pending', `idempotency_key` varchar(255) null, `created_at` datetime not null, `updated_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_notification_intent` add unique `core_notification_intent_idempotency_key_unique` (`idempotency_key`);");
+    this.addSql("alter table `core_notification_intent` add index `core_notification_intent_kind_index` (`kind`);");
+    this.addSql("alter table `core_notification_intent` add index `core_notification_intent_recipient_auth_id_index` (`recipient_auth_id`);");
+    this.addSql("alter table `core_notification_intent` add index `core_notification_intent_status_index` (`status`);");
+    this.addSql("alter table `core_notification_intent` add index `core_notification_intent_created_at_index` (`created_at`);");
+    this.addSql("create table `core_notification_delivery_attempt` (`id` varchar(255) not null, `intent_id` varchar(255) not null, `channel` varchar(255) not null, `provider` varchar(255) null, `status` enum('delivered','failed','skipped') not null, `recipient` varchar(255) null, `external_id` varchar(255) null, `error` text null, `metadata` json not null, `attempted_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_notification_delivery_attempt` add index `core_notification_delivery_attempt_intent_id_index` (`intent_id`);");
+    this.addSql("alter table `core_notification_delivery_attempt` add index `core_notification_delivery_attempt_channel_index` (`channel`);");
+    this.addSql("alter table `core_notification_delivery_attempt` add index `core_notification_delivery_attempt_status_index` (`status`);");
+    this.addSql("alter table `core_notification_delivery_attempt` add index `core_notification_delivery_attempt_attempted_at_index` (`attempted_at`);");
+    this.addSql("create table `core_hacker` (`auth_id` varchar(255) not null, `university` varchar(255) not null, `major` varchar(255) not null, `school_id` varchar(255) null, `level_of_study` varchar(255) not null, `hackathons_attended` int not null, `software_experience` varchar(255) not null, `heard_from` varchar(255) null, `github_url` text null, `linked_in_url` text null, `personal_website_url` text null, `resume_url` text null, `group` varchar(255) null, `registered_at` datetime not null, `updated_at` datetime not null, primary key (`auth_id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_hacker` add index `core_hacker_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `core_hacker` add index `core_hacker_registered_at_index` (`registered_at`);");
+    this.addSql("create table `core_event_scan` (`id` varchar(255) not null, `event_id` varchar(255) not null, `auth_id` varchar(255) not null, `scanned_by_auth_id` varchar(255) not null, `scanned_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `core_event_scan` add index `core_event_scan_scanned_by_auth_id_index` (`scanned_by_auth_id`);");
+    this.addSql("alter table `core_event_scan` add index `core_event_scan_event_id_index` (`event_id`);");
+    this.addSql("alter table `core_event_scan` add index `core_event_scan_auth_id_index` (`auth_id`);");
+    this.addSql("alter table `core_event_scan` add index `core_event_scan_event_id_auth_id_index` (`event_id`, `auth_id`);");
+    this.addSql("alter table `core_event_scan` add index `core_event_scan_scanned_at_index` (`scanned_at`);");
+    this.addSql("create table `session` (`id` varchar(255) not null, `expires_at` datetime not null, `token` varchar(255) not null, `created_at` datetime not null, `updated_at` datetime not null, `ip_address` varchar(255) null, `user_agent` text null, `user_id` varchar(255) not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `session` add unique `session_token_unique` (`token`);");
+    this.addSql("alter table `session` add index `session_user_id_index` (`user_id`);");
+    this.addSql("create table `account` (`id` varchar(255) not null, `account_id` varchar(255) not null, `provider_id` varchar(255) not null, `user_id` varchar(255) not null, `access_token` text null, `refresh_token` text null, `id_token` text null, `access_token_expires_at` datetime null, `refresh_token_expires_at` datetime null, `scope` text null, `password` varchar(255) null, `created_at` datetime not null, `updated_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `account` add index `account_user_id_index` (`user_id`);");
+    this.addSql("create table `teams_team` (`id` varchar(255) not null, `name` varchar(255) not null, `tag` varchar(255) not null, `owner_auth_id` varchar(255) not null, `created_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `teams_team` add unique `teams_team_tag_unique` (`tag`);");
+    this.addSql("alter table `teams_team` add index `teams_team_tag_index` (`tag`);");
+    this.addSql("alter table `teams_team` add index `teams_team_owner_auth_id_index` (`owner_auth_id`);");
+    this.addSql("create table `teams_member` (`id` varchar(255) not null, `team_id` varchar(255) not null, `auth_id` varchar(255) not null, `joined_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `teams_member` add unique `teams_member_auth_id_unique` (`auth_id`);");
+    this.addSql("alter table `teams_member` add index `teams_member_team_id_index` (`team_id`);");
+    this.addSql("alter table `teams_member` add index `teams_member_auth_id_index` (`auth_id`);");
+    this.addSql("create table `teams_invite` (`id` varchar(255) not null, `team_id` varchar(255) not null, `invitee_auth_id` varchar(255) not null, `status` enum('pending','accepted','declined') not null default 'pending', `created_at` datetime not null, primary key (`id`)) default character set utf8mb4 engine = InnoDB;");
+    this.addSql("alter table `teams_invite` add index `teams_invite_team_id_index` (`team_id`);");
+    this.addSql("alter table `teams_invite` add index `teams_invite_invitee_auth_id_index` (`invitee_auth_id`);");
+    this.addSql("alter table `teams_invite` add index `teams_invite_team_id_invitee_auth_id_index` (`team_id`, `invitee_auth_id`);");
+    this.addSql("alter table `core_user` add constraint `core_user_role_id_foreign` foreign key (`role_id`) references `core_role` (`id`) on delete set null;");
+    this.addSql("alter table `discord_verification` add constraint `discord_verification_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `discord_role_sync_attempt` add constraint `discord_role_sync_attempt_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `discord_member` add constraint `discord_member_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade;");
+    this.addSql("alter table `core_user_data` add constraint `core_user_data_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade;");
+    this.addSql("alter table `core_user_ban` add constraint `core_user_ban_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade;");
+    this.addSql("alter table `core_user_ban` add constraint `core_user_ban_banned_by_auth_id_foreign` foreign key (`banned_by_auth_id`) references `core_user` (`id`);");
+    this.addSql("alter table `core_setting` add constraint `core_setting_created_by_auth_id_foreign` foreign key (`created_by_auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `core_setting` add constraint `core_setting_updated_by_auth_id_foreign` foreign key (`updated_by_auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `core_rsvp` add constraint `core_rsvp_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade;");
+    this.addSql("alter table `core_rsvp` add constraint `core_rsvp_cancelled_by_auth_id_foreign` foreign key (`cancelled_by_auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `core_rsvp` add constraint `core_rsvp_promoted_by_auth_id_foreign` foreign key (`promoted_by_auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `core_notification_intent` add constraint `core_notification_intent_recipient_auth_id_foreign` foreign key (`recipient_auth_id`) references `core_user` (`id`) on delete set null;");
+    this.addSql("alter table `core_notification_delivery_attempt` add constraint `core_notification_delivery_attempt_intent_id_foreign` foreign key (`intent_id`) references `core_notification_intent` (`id`) on delete cascade;");
+    this.addSql("alter table `core_hacker` add constraint `core_hacker_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade;");
+    this.addSql("alter table `core_event_scan` add constraint `core_event_scan_event_id_foreign` foreign key (`event_id`) references `core_event` (`id`) on delete cascade;");
+    this.addSql("alter table `core_event_scan` add constraint `core_event_scan_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `core_event_scan` add constraint `core_event_scan_scanned_by_auth_id_foreign` foreign key (`scanned_by_auth_id`) references `core_user` (`id`);");
+    this.addSql("alter table `session` add constraint `session_user_id_foreign` foreign key (`user_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `account` add constraint `account_user_id_foreign` foreign key (`user_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `teams_team` add constraint `teams_team_owner_auth_id_foreign` foreign key (`owner_auth_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `teams_member` add constraint `teams_member_team_id_foreign` foreign key (`team_id`) references `teams_team` (`id`) on delete cascade;");
+    this.addSql("alter table `teams_member` add constraint `teams_member_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade;");
+    this.addSql("alter table `teams_invite` add constraint `teams_invite_team_id_foreign` foreign key (`team_id`) references `teams_team` (`id`) on delete cascade;");
+    this.addSql("alter table `teams_invite` add constraint `teams_invite_invitee_auth_id_foreign` foreign key (`invitee_auth_id`) references `core_user` (`id`) on delete cascade;");
+  }
+
+  override down(): void | Promise<void> {
+    this.addSql(`alter table \`session\` drop foreign key \`session_user_id_foreign\`;`);
+    this.addSql(`alter table \`account\` drop foreign key \`account_user_id_foreign\`;`);
+    this.addSql(`alter table \`core_event_scan\` drop foreign key \`core_event_scan_event_id_foreign\`;`);
+    this.addSql(`alter table \`core_user\` drop foreign key \`core_user_role_id_foreign\`;`);
+    this.addSql(`alter table \`discord_verification\` drop foreign key \`discord_verification_auth_id_foreign\`;`);
+    this.addSql(`alter table \`discord_role_sync_attempt\` drop foreign key \`discord_role_sync_attempt_auth_id_foreign\`;`);
+    this.addSql(`alter table \`discord_member\` drop foreign key \`discord_member_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_user_data\` drop foreign key \`core_user_data_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_user_ban\` drop foreign key \`core_user_ban_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_user_ban\` drop foreign key \`core_user_ban_banned_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_setting\` drop foreign key \`core_setting_created_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_setting\` drop foreign key \`core_setting_updated_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_rsvp\` drop foreign key \`core_rsvp_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_rsvp\` drop foreign key \`core_rsvp_cancelled_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_rsvp\` drop foreign key \`core_rsvp_promoted_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_notification_intent\` drop foreign key \`core_notification_intent_recipient_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_hacker\` drop foreign key \`core_hacker_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_event_scan\` drop foreign key \`core_event_scan_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_event_scan\` drop foreign key \`core_event_scan_scanned_by_auth_id_foreign\`;`);
+    this.addSql(`alter table \`teams_team\` drop foreign key \`teams_team_owner_auth_id_foreign\`;`);
+    this.addSql(`alter table \`teams_member\` drop foreign key \`teams_member_auth_id_foreign\`;`);
+    this.addSql(`alter table \`teams_invite\` drop foreign key \`teams_invite_invitee_auth_id_foreign\`;`);
+    this.addSql(`alter table \`core_notification_delivery_attempt\` drop foreign key \`core_notification_delivery_attempt_intent_id_foreign\`;`);
+    this.addSql(`alter table \`teams_member\` drop foreign key \`teams_member_team_id_foreign\`;`);
+    this.addSql(`alter table \`teams_invite\` drop foreign key \`teams_invite_team_id_foreign\`;`);
+
+    this.addSql(`drop table if exists \`session\`;`);
+    this.addSql(`drop table if exists \`account\`;`);
+    this.addSql(`drop table if exists \`verification\`;`);
+    this.addSql(`drop table if exists \`core_event\`;`);
+    this.addSql(`drop table if exists \`core_operation_lock\`;`);
+    this.addSql(`drop table if exists \`core_role\`;`);
+    this.addSql(`drop table if exists \`core_user\`;`);
+    this.addSql(`drop table if exists \`discord_verification\`;`);
+    this.addSql(`drop table if exists \`discord_role_sync_attempt\`;`);
+    this.addSql(`drop table if exists \`discord_member\`;`);
+    this.addSql(`drop table if exists \`core_user_data\`;`);
+    this.addSql(`drop table if exists \`core_user_ban\`;`);
+    this.addSql(`drop table if exists \`core_setting\`;`);
+    this.addSql(`drop table if exists \`core_rsvp\`;`);
+    this.addSql(`drop table if exists \`core_notification_intent\`;`);
+    this.addSql(`drop table if exists \`core_notification_delivery_attempt\`;`);
+    this.addSql(`drop table if exists \`core_hacker\`;`);
+    this.addSql(`drop table if exists \`core_event_scan\`;`);
+    this.addSql(`drop table if exists \`teams_team\`;`);
+    this.addSql(`drop table if exists \`teams_member\`;`);
+    this.addSql(`drop table if exists \`teams_invite\`;`);
+  }
+
+}
diff --git a/apps/web/db/migrations/postgresql/.snapshot.json b/apps/web/db/migrations/postgresql/.snapshot.json
new file mode 100644
index 00000000..e4b30487
--- /dev/null
+++ b/apps/web/db/migrations/postgresql/.snapshot.json
@@ -0,0 +1,4449 @@
+{
+  "name": "public",
+  "namespaces": [
+    "public"
+  ],
+  "tables": [
+    {
+      "name": "account",
+      "schema": "public",
+      "columns": {
+        "access_token": {
+          "name": "access_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "account_id": {
+          "name": "account_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id_token": {
+          "name": "id_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "password": {
+          "name": "password",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "refresh_token": {
+          "name": "refresh_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "refresh_token_expires_at": {
+          "name": "refresh_token_expires_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "account_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "account_user_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "account_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "account_user_id_foreign",
+          "localTableName": "public.account",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_event",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "end_time": {
+          "name": "end_time",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "hidden": {
+          "name": "hidden",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "host": {
+          "name": "host",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "location": {
+          "name": "location",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": "'TBD'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "start_time": {
+          "name": "start_time",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "title": {
+          "name": "title",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "type": {
+          "name": "type",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "hidden"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_hidden_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_event_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "start_time"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_start_time_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "type"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_type_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_event_scan",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "scanned_at": {
+          "name": "scanned_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scanned_by_auth_id": {
+          "name": "scanned_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id",
+            "auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_event_scan_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "scanned_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_scanned_at_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_event_scan_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_event_scan_auth_id_foreign",
+          "localTableName": "public.core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_event_id_foreign": {
+          "columnNames": [
+            "event_id"
+          ],
+          "constraintName": "core_event_scan_event_id_foreign",
+          "localTableName": "public.core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_event",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_scanned_by_auth_id_foreign": {
+          "columnNames": [
+            "scanned_by_auth_id"
+          ],
+          "constraintName": "core_event_scan_scanned_by_auth_id_foreign",
+          "localTableName": "public.core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_hacker",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "github_url": {
+          "name": "github_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "group": {
+          "name": "group",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "hackathons_attended": {
+          "name": "hackathons_attended",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "heard_from": {
+          "name": "heard_from",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "level_of_study": {
+          "name": "level_of_study",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "linked_in_url": {
+          "name": "linked_in_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "major": {
+          "name": "major",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "personal_website_url": {
+          "name": "personal_website_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "resume_url": {
+          "name": "resume_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "school_id": {
+          "name": "school_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "software_experience": {
+          "name": "software_experience",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "university": {
+          "name": "university",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_hacker_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "registered_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_hacker_registered_at_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_hacker_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_hacker_auth_id_foreign",
+          "localTableName": "public.core_hacker",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_delivery_attempt",
+      "schema": "public",
+      "columns": {
+        "attempted_at": {
+          "name": "attempted_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "channel": {
+          "name": "channel",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "external_id": {
+          "name": "external_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "intent_id": {
+          "name": "intent_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "provider": {
+          "name": "provider",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "recipient": {
+          "name": "recipient",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "attempted_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_attempted_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "channel"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_channel_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "intent_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_intent_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_notification_delivery_attempt_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_notification_delivery_attempt_status_check",
+          "expression": "\"status\" in ('delivered', 'failed', 'skipped')",
+          "definition": "check (\"status\" in ('delivered', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_delivery_attempt_intent_id_foreign": {
+          "columnNames": [
+            "intent_id"
+          ],
+          "constraintName": "core_notification_delivery_attempt_intent_id_foreign",
+          "localTableName": "public.core_notification_delivery_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_notification_intent",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_intent",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "recipient_auth_id": {
+          "name": "recipient_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "processing",
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "idempotency_key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_notification_intent_idempotency_key_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "kind"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_kind_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_notification_intent_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_recipient_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_notification_intent_status_check",
+          "expression": "\"status\" in ('pending', 'processing', 'delivered', 'failed', 'skipped')",
+          "definition": "check (\"status\" in ('pending', 'processing', 'delivered', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_intent_recipient_auth_id_foreign": {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "constraintName": "core_notification_intent_recipient_auth_id_foreign",
+          "localTableName": "public.core_notification_intent",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_operation_lock",
+      "schema": "public",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "token": {
+          "name": "token",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_operation_lock_pkey",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_role",
+      "schema": "public",
+      "columns": {
+        "color": {
+          "name": "color",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "position": {
+          "name": "position",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "name"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_role_name_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_role_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_role_position_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_rsvp",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "cancelled_at": {
+          "name": "cancelled_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "cancelled_by_auth_id": {
+          "name": "cancelled_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "confirmed_at": {
+          "name": "confirmed_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_at": {
+          "name": "promoted_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_by_auth_id": {
+          "name": "promoted_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "confirmed",
+            "waitlisted",
+            "cancelled"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "waitlist_position": {
+          "name": "waitlist_position",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "waitlisted_at": {
+          "name": "waitlisted_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_rsvp_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "waitlist_position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_waitlist_position_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_rsvp_status_check",
+          "expression": "\"status\" in ('confirmed', 'waitlisted', 'cancelled')",
+          "definition": "check (\"status\" in ('confirmed', 'waitlisted', 'cancelled'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_rsvp_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_rsvp_auth_id_foreign",
+          "localTableName": "public.core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_rsvp_cancelled_by_auth_id_foreign": {
+          "columnNames": [
+            "cancelled_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_cancelled_by_auth_id_foreign",
+          "localTableName": "public.core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        },
+        "core_rsvp_promoted_by_auth_id_foreign": {
+          "columnNames": [
+            "promoted_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_promoted_by_auth_id_foreign",
+          "localTableName": "public.core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_setting",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_by_auth_id": {
+          "name": "created_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_by_auth_id": {
+          "name": "updated_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "value": {
+          "name": "value",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_setting_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_setting_created_by_auth_id_foreign": {
+          "columnNames": [
+            "created_by_auth_id"
+          ],
+          "constraintName": "core_setting_created_by_auth_id_foreign",
+          "localTableName": "public.core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        },
+        "core_setting_updated_by_auth_id_foreign": {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "constraintName": "core_setting_updated_by_auth_id_foreign",
+          "localTableName": "public.core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user",
+      "schema": "public",
+      "columns": {
+        "bio": {
+          "name": "bio",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "checked_in_at": {
+          "name": "checked_in_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_display_handle": {
+          "name": "discord_display_handle",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "email": {
+          "name": "email",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "email_verified": {
+          "name": "email_verified",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "hack_tag": {
+          "name": "hack_tag",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "is_approved": {
+          "name": "is_approved",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "is_profile_searchable": {
+          "name": "is_profile_searchable",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "true",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "profile_photo_url": {
+          "name": "profile_photo_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "pronouns": {
+          "name": "pronouns",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "skills": {
+          "name": "skills",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "email"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_email_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_hack_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_hack_tag_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "role_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_role_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_role_id_foreign": {
+          "columnNames": [
+            "role_id"
+          ],
+          "constraintName": "core_user_role_id_foreign",
+          "localTableName": "public.core_user",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_role",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_ban",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "banned_by_auth_id": {
+          "name": "banned_by_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "reason": {
+          "name": "reason",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_ban_pkey",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_ban_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_ban_auth_id_foreign",
+          "localTableName": "public.core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_user_ban_banned_by_auth_id_foreign": {
+          "columnNames": [
+            "banned_by_auth_id"
+          ],
+          "constraintName": "core_user_ban_banned_by_auth_id_foreign",
+          "localTableName": "public.core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_data",
+      "schema": "public",
+      "columns": {
+        "accommodation_note": {
+          "name": "accommodation_note",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "age": {
+          "name": "age",
+          "type": "int",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "country_of_residence": {
+          "name": "country_of_residence",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "dietary_restrictions": {
+          "name": "dietary_restrictions",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "ethnicity": {
+          "name": "ethnicity",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "gender": {
+          "name": "gender",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "has_accepted_mlhcode_of_conduct": {
+          "name": "has_accepted_mlhcode_of_conduct",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "has_shared_data_with_mlh": {
+          "name": "has_shared_data_with_mlh",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "is_emailable": {
+          "name": "is_emailable",
+          "type": "boolean",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "boolean"
+        },
+        "phone_number": {
+          "name": "phone_number",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "race": {
+          "name": "race",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "shirt_size": {
+          "name": "shirt_size",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_data_pkey",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_data_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_data_auth_id_foreign",
+          "localTableName": "public.core_user_data",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_member",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "last_role_sync_at": {
+          "name": "last_role_sync_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "username": {
+          "name": "username",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "verified_at": {
+          "name": "verified_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_member_discord_user_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_member_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_updated_at_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_member_auth_id_foreign",
+          "localTableName": "public.discord_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_role_sync_attempt",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "role_ids": {
+          "name": "role_ids",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "role_names": {
+          "name": "role_names",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "synced",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_role_sync_attempt_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "discord_role_sync_attempt_status_check",
+          "expression": "\"status\" in ('synced', 'failed', 'skipped')",
+          "definition": "check (\"status\" in ('synced', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_role_sync_attempt_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_role_sync_attempt_auth_id_foreign",
+          "localTableName": "public.discord_role_sync_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_verification",
+      "schema": "public",
+      "columns": {
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "code": {
+          "name": "code",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "rejected",
+            "expired"
+          ],
+          "mappedType": "enum"
+        },
+        "username": {
+          "name": "username",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "code"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_verification_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_status_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "discord_verification_status_check",
+          "expression": "\"status\" in ('pending', 'accepted', 'rejected', 'expired')",
+          "definition": "check (\"status\" in ('pending', 'accepted', 'rejected', 'expired'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_verification_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_verification_auth_id_foreign",
+          "localTableName": "public.discord_verification",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "session",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "token": {
+          "name": "token",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "session_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "token"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "session_token_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "session_user_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "session_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "session_user_id_foreign",
+          "localTableName": "public.session",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_invite",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "invitee_auth_id": {
+          "name": "invitee_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "declined"
+          ],
+          "mappedType": "enum"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_invite_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "team_id",
+            "invitee_auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "teams_invite_status_check",
+          "expression": "\"status\" in ('pending', 'accepted', 'declined')",
+          "definition": "check (\"status\" in ('pending', 'accepted', 'declined'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_invite_invitee_auth_id_foreign": {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "constraintName": "teams_invite_invitee_auth_id_foreign",
+          "localTableName": "public.teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_invite_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_invite_team_id_foreign",
+          "localTableName": "public.teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_member",
+      "schema": "public",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "joined_at": {
+          "name": "joined_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_member_auth_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_member_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_team_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "teams_member_auth_id_foreign",
+          "localTableName": "public.teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_member_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_member_team_id_foreign",
+          "localTableName": "public.teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_team",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "owner_auth_id": {
+          "name": "owner_auth_id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "tag": {
+          "name": "tag",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_owner_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_team_pkey",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_team_tag_unique",
+          "primary": false,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_team_owner_auth_id_foreign": {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "constraintName": "teams_team_owner_auth_id_foreign",
+          "localTableName": "public.teams_team",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "public.core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "verification",
+      "schema": "public",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "identifier": {
+          "name": "identifier",
+          "type": "varchar(255)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": 255,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "string"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz(6)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": 6,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "identifier"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "verification_identifier_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "verification_pkey",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    }
+  ],
+  "views": [],
+  "nativeEnums": {}
+}
\ No newline at end of file
diff --git a/apps/web/db/migrations/postgresql/Migration20260927180400_initial.ts b/apps/web/db/migrations/postgresql/Migration20260927180400_initial.ts
new file mode 100644
index 00000000..02ac9c29
--- /dev/null
+++ b/apps/web/db/migrations/postgresql/Migration20260927180400_initial.ts
@@ -0,0 +1,167 @@
+import { Migration } from "@mikro-orm/migrations";
+
+export class Migration20260927180400_initial extends Migration {
+  override name = "Migration20260927180400_initial";
+
+  override up(): void {
+    this.addSql("create table \"verification\" (\"id\" varchar(255) not null, \"identifier\" varchar(255) not null, \"value\" text not null, \"expires_at\" timestamptz not null, \"created_at\" timestamptz null, \"updated_at\" timestamptz null, primary key (\"id\"));");
+    this.addSql("create index \"verification_identifier_index\" on \"verification\" (\"identifier\");");
+    this.addSql("create table \"core_event\" (\"id\" varchar(255) not null, \"title\" varchar(255) not null, \"start_time\" timestamptz not null, \"end_time\" timestamptz not null, \"location\" varchar(255) not null default 'TBD', \"description\" text not null, \"type\" varchar(255) not null, \"host\" varchar(255) null, \"hidden\" boolean not null default false, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"core_event_start_time_index\" on \"core_event\" (\"start_time\");");
+    this.addSql("create index \"core_event_type_index\" on \"core_event\" (\"type\");");
+    this.addSql("create index \"core_event_hidden_index\" on \"core_event\" (\"hidden\");");
+    this.addSql("create table \"core_operation_lock\" (\"key\" varchar(255) not null, \"token\" varchar(255) not null, primary key (\"key\"));");
+    this.addSql("create table \"core_role\" (\"id\" varchar(255) not null, \"name\" varchar(255) not null, \"position\" int not null, \"permissions\" jsonb not null default '[]', \"color\" varchar(255) null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("alter table \"core_role\" add constraint \"core_role_name_unique\" unique (\"name\");");
+    this.addSql("create index \"core_role_position_index\" on \"core_role\" (\"position\");");
+    this.addSql("create table \"core_user\" (\"id\" varchar(255) not null, \"name\" varchar(255) not null, \"email\" varchar(255) not null, \"email_verified\" boolean not null default false, \"profile_photo_url\" text null, \"hack_tag\" varchar(255) null, \"bio\" text null, \"pronouns\" varchar(255) null, \"skills\" jsonb not null default '[]', \"is_profile_searchable\" boolean not null default true, \"discord_display_handle\" varchar(255) null, \"role_id\" varchar(255) null, \"is_approved\" boolean not null default false, \"checked_in_at\" timestamptz null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("alter table \"core_user\" add constraint \"core_user_email_unique\" unique (\"email\");");
+    this.addSql("alter table \"core_user\" add constraint \"core_user_hack_tag_unique\" unique (\"hack_tag\");");
+    this.addSql("create index \"core_user_hack_tag_index\" on \"core_user\" (\"hack_tag\");");
+    this.addSql("create index \"core_user_role_id_index\" on \"core_user\" (\"role_id\");");
+    this.addSql("create index \"core_user_created_at_index\" on \"core_user\" (\"created_at\");");
+    this.addSql("create table \"discord_verification\" (\"code\" varchar(255) not null, \"discord_user_id\" varchar(255) not null, \"guild_id\" varchar(255) not null, \"username\" varchar(255) not null, \"avatar_hash\" varchar(255) null, \"auth_id\" varchar(255) null, \"status\" text not null default 'pending', \"expires_at\" timestamptz not null, \"created_at\" timestamptz not null, \"accepted_at\" timestamptz null, primary key (\"code\"));");
+    this.addSql("create index \"discord_verification_discord_user_id_index\" on \"discord_verification\" (\"discord_user_id\");");
+    this.addSql("create index \"discord_verification_guild_id_index\" on \"discord_verification\" (\"guild_id\");");
+    this.addSql("create index \"discord_verification_auth_id_index\" on \"discord_verification\" (\"auth_id\");");
+    this.addSql("create index \"discord_verification_status_index\" on \"discord_verification\" (\"status\");");
+    this.addSql("create index \"discord_verification_created_at_index\" on \"discord_verification\" (\"created_at\");");
+    this.addSql("alter table \"discord_verification\" add constraint \"discord_verification_status_check\" check (\"status\" in ('pending', 'accepted', 'rejected', 'expired'));");
+    this.addSql("create table \"discord_role_sync_attempt\" (\"id\" varchar(255) not null, \"auth_id\" varchar(255) not null, \"discord_user_id\" varchar(255) not null, \"guild_id\" varchar(255) not null, \"status\" text not null, \"role_ids\" jsonb not null default '[]', \"role_names\" jsonb not null default '[]', \"error\" text null, \"created_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"discord_role_sync_attempt_auth_id_index\" on \"discord_role_sync_attempt\" (\"auth_id\");");
+    this.addSql("create index \"discord_role_sync_attempt_discord_user_id_index\" on \"discord_role_sync_attempt\" (\"discord_user_id\");");
+    this.addSql("create index \"discord_role_sync_attempt_status_index\" on \"discord_role_sync_attempt\" (\"status\");");
+    this.addSql("create index \"discord_role_sync_attempt_created_at_index\" on \"discord_role_sync_attempt\" (\"created_at\");");
+    this.addSql("alter table \"discord_role_sync_attempt\" add constraint \"discord_role_sync_attempt_status_check\" check (\"status\" in ('synced', 'failed', 'skipped'));");
+    this.addSql("create table \"discord_member\" (\"auth_id\" varchar(255) not null, \"discord_user_id\" varchar(255) not null, \"guild_id\" varchar(255) not null, \"username\" varchar(255) not null, \"avatar_hash\" varchar(255) null, \"verified_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"last_role_sync_at\" timestamptz null, primary key (\"auth_id\"));");
+    this.addSql("alter table \"discord_member\" add constraint \"discord_member_discord_user_id_unique\" unique (\"discord_user_id\");");
+    this.addSql("create index \"discord_member_discord_user_id_index\" on \"discord_member\" (\"discord_user_id\");");
+    this.addSql("create index \"discord_member_guild_id_index\" on \"discord_member\" (\"guild_id\");");
+    this.addSql("create index \"discord_member_updated_at_index\" on \"discord_member\" (\"updated_at\");");
+    this.addSql("create table \"core_user_data\" (\"auth_id\" varchar(255) not null, \"age\" int not null, \"gender\" varchar(255) not null, \"race\" varchar(255) not null, \"ethnicity\" varchar(255) not null, \"shirt_size\" varchar(255) not null, \"dietary_restrictions\" jsonb not null default '[]', \"accommodation_note\" text null, \"phone_number\" varchar(255) null, \"country_of_residence\" varchar(255) null, \"has_accepted_mlhcode_of_conduct\" boolean not null, \"has_shared_data_with_mlh\" boolean not null, \"is_emailable\" boolean not null, \"completed_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"auth_id\"));");
+    this.addSql("create table \"core_user_ban\" (\"auth_id\" varchar(255) not null, \"reason\" varchar(255) null, \"banned_by_auth_id\" varchar(255) not null, \"created_at\" timestamptz not null, primary key (\"auth_id\"));");
+    this.addSql("create table \"core_setting\" (\"key\" varchar(255) not null, \"value\" jsonb not null, \"created_at\" timestamptz not null, \"created_by_auth_id\" varchar(255) null, \"updated_at\" timestamptz not null, \"updated_by_auth_id\" varchar(255) null, primary key (\"key\"));");
+    this.addSql("create index \"core_setting_updated_at_index\" on \"core_setting\" (\"updated_at\");");
+    this.addSql("create index \"core_setting_updated_by_auth_id_index\" on \"core_setting\" (\"updated_by_auth_id\");");
+    this.addSql("create table \"core_rsvp\" (\"auth_id\" varchar(255) not null, \"status\" text not null, \"waitlist_position\" int null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"confirmed_at\" timestamptz null, \"waitlisted_at\" timestamptz null, \"cancelled_at\" timestamptz null, \"cancelled_by_auth_id\" varchar(255) null, \"promoted_at\" timestamptz null, \"promoted_by_auth_id\" varchar(255) null, primary key (\"auth_id\"));");
+    this.addSql("create index \"core_rsvp_status_index\" on \"core_rsvp\" (\"status\");");
+    this.addSql("create index \"core_rsvp_waitlist_position_index\" on \"core_rsvp\" (\"waitlist_position\");");
+    this.addSql("create index \"core_rsvp_created_at_index\" on \"core_rsvp\" (\"created_at\");");
+    this.addSql("create index \"core_rsvp_updated_at_index\" on \"core_rsvp\" (\"updated_at\");");
+    this.addSql("alter table \"core_rsvp\" add constraint \"core_rsvp_status_check\" check (\"status\" in ('confirmed', 'waitlisted', 'cancelled'));");
+    this.addSql("create table \"core_notification_intent\" (\"id\" varchar(255) not null, \"kind\" varchar(255) not null, \"recipient_auth_id\" varchar(255) null, \"payload\" jsonb not null, \"status\" text not null default 'pending', \"idempotency_key\" varchar(255) null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("alter table \"core_notification_intent\" add constraint \"core_notification_intent_idempotency_key_unique\" unique (\"idempotency_key\");");
+    this.addSql("create index \"core_notification_intent_kind_index\" on \"core_notification_intent\" (\"kind\");");
+    this.addSql("create index \"core_notification_intent_recipient_auth_id_index\" on \"core_notification_intent\" (\"recipient_auth_id\");");
+    this.addSql("create index \"core_notification_intent_status_index\" on \"core_notification_intent\" (\"status\");");
+    this.addSql("create index \"core_notification_intent_created_at_index\" on \"core_notification_intent\" (\"created_at\");");
+    this.addSql("alter table \"core_notification_intent\" add constraint \"core_notification_intent_status_check\" check (\"status\" in ('pending', 'processing', 'delivered', 'failed', 'skipped'));");
+    this.addSql("create table \"core_notification_delivery_attempt\" (\"id\" varchar(255) not null, \"intent_id\" varchar(255) not null, \"channel\" varchar(255) not null, \"provider\" varchar(255) null, \"status\" text not null, \"recipient\" varchar(255) null, \"external_id\" varchar(255) null, \"error\" text null, \"metadata\" jsonb not null, \"attempted_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"core_notification_delivery_attempt_intent_id_index\" on \"core_notification_delivery_attempt\" (\"intent_id\");");
+    this.addSql("create index \"core_notification_delivery_attempt_channel_index\" on \"core_notification_delivery_attempt\" (\"channel\");");
+    this.addSql("create index \"core_notification_delivery_attempt_status_index\" on \"core_notification_delivery_attempt\" (\"status\");");
+    this.addSql("create index \"core_notification_delivery_attempt_attempted_at_index\" on \"core_notification_delivery_attempt\" (\"attempted_at\");");
+    this.addSql("alter table \"core_notification_delivery_attempt\" add constraint \"core_notification_delivery_attempt_status_check\" check (\"status\" in ('delivered', 'failed', 'skipped'));");
+    this.addSql("create table \"core_hacker\" (\"auth_id\" varchar(255) not null, \"university\" varchar(255) not null, \"major\" varchar(255) not null, \"school_id\" varchar(255) null, \"level_of_study\" varchar(255) not null, \"hackathons_attended\" int not null, \"software_experience\" varchar(255) not null, \"heard_from\" varchar(255) null, \"github_url\" text null, \"linked_in_url\" text null, \"personal_website_url\" text null, \"resume_url\" text null, \"group\" varchar(255) null, \"registered_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"auth_id\"));");
+    this.addSql("create index \"core_hacker_registered_at_index\" on \"core_hacker\" (\"registered_at\");");
+    this.addSql("create table \"core_event_scan\" (\"id\" varchar(255) not null, \"event_id\" varchar(255) not null, \"auth_id\" varchar(255) not null, \"scanned_by_auth_id\" varchar(255) not null, \"scanned_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"core_event_scan_event_id_index\" on \"core_event_scan\" (\"event_id\");");
+    this.addSql("create index \"core_event_scan_auth_id_index\" on \"core_event_scan\" (\"auth_id\");");
+    this.addSql("create index \"core_event_scan_event_id_auth_id_index\" on \"core_event_scan\" (\"event_id\", \"auth_id\");");
+    this.addSql("create index \"core_event_scan_scanned_at_index\" on \"core_event_scan\" (\"scanned_at\");");
+    this.addSql("create table \"session\" (\"id\" varchar(255) not null, \"expires_at\" timestamptz not null, \"token\" varchar(255) not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, \"ip_address\" varchar(255) null, \"user_agent\" text null, \"user_id\" varchar(255) not null, primary key (\"id\"));");
+    this.addSql("alter table \"session\" add constraint \"session_token_unique\" unique (\"token\");");
+    this.addSql("create index \"session_user_id_index\" on \"session\" (\"user_id\");");
+    this.addSql("create table \"account\" (\"id\" varchar(255) not null, \"account_id\" varchar(255) not null, \"provider_id\" varchar(255) not null, \"user_id\" varchar(255) not null, \"access_token\" text null, \"refresh_token\" text null, \"id_token\" text null, \"access_token_expires_at\" timestamptz null, \"refresh_token_expires_at\" timestamptz null, \"scope\" text null, \"password\" varchar(255) null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"account_user_id_index\" on \"account\" (\"user_id\");");
+    this.addSql("create table \"teams_team\" (\"id\" varchar(255) not null, \"name\" varchar(255) not null, \"tag\" varchar(255) not null, \"owner_auth_id\" varchar(255) not null, \"created_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("alter table \"teams_team\" add constraint \"teams_team_tag_unique\" unique (\"tag\");");
+    this.addSql("create index \"teams_team_tag_index\" on \"teams_team\" (\"tag\");");
+    this.addSql("create index \"teams_team_owner_auth_id_index\" on \"teams_team\" (\"owner_auth_id\");");
+    this.addSql("create table \"teams_member\" (\"id\" varchar(255) not null, \"team_id\" varchar(255) not null, \"auth_id\" varchar(255) not null, \"joined_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("alter table \"teams_member\" add constraint \"teams_member_auth_id_unique\" unique (\"auth_id\");");
+    this.addSql("create index \"teams_member_team_id_index\" on \"teams_member\" (\"team_id\");");
+    this.addSql("create index \"teams_member_auth_id_index\" on \"teams_member\" (\"auth_id\");");
+    this.addSql("create table \"teams_invite\" (\"id\" varchar(255) not null, \"team_id\" varchar(255) not null, \"invitee_auth_id\" varchar(255) not null, \"status\" text not null default 'pending', \"created_at\" timestamptz not null, primary key (\"id\"));");
+    this.addSql("create index \"teams_invite_team_id_index\" on \"teams_invite\" (\"team_id\");");
+    this.addSql("create index \"teams_invite_invitee_auth_id_index\" on \"teams_invite\" (\"invitee_auth_id\");");
+    this.addSql("create index \"teams_invite_team_id_invitee_auth_id_index\" on \"teams_invite\" (\"team_id\", \"invitee_auth_id\");");
+    this.addSql("alter table \"teams_invite\" add constraint \"teams_invite_status_check\" check (\"status\" in ('pending', 'accepted', 'declined'));");
+    this.addSql("alter table \"core_user\" add constraint \"core_user_role_id_foreign\" foreign key (\"role_id\") references \"core_role\" (\"id\") on delete set null;");
+    this.addSql("alter table \"discord_verification\" add constraint \"discord_verification_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"discord_role_sync_attempt\" add constraint \"discord_role_sync_attempt_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"discord_member\" add constraint \"discord_member_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on update cascade on delete cascade;");
+    this.addSql("alter table \"core_user_data\" add constraint \"core_user_data_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on update cascade on delete cascade;");
+    this.addSql("alter table \"core_user_ban\" add constraint \"core_user_ban_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on update cascade on delete cascade;");
+    this.addSql("alter table \"core_user_ban\" add constraint \"core_user_ban_banned_by_auth_id_foreign\" foreign key (\"banned_by_auth_id\") references \"core_user\" (\"id\");");
+    this.addSql("alter table \"core_setting\" add constraint \"core_setting_created_by_auth_id_foreign\" foreign key (\"created_by_auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"core_setting\" add constraint \"core_setting_updated_by_auth_id_foreign\" foreign key (\"updated_by_auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"core_rsvp\" add constraint \"core_rsvp_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on update cascade on delete cascade;");
+    this.addSql("alter table \"core_rsvp\" add constraint \"core_rsvp_cancelled_by_auth_id_foreign\" foreign key (\"cancelled_by_auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"core_rsvp\" add constraint \"core_rsvp_promoted_by_auth_id_foreign\" foreign key (\"promoted_by_auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"core_notification_intent\" add constraint \"core_notification_intent_recipient_auth_id_foreign\" foreign key (\"recipient_auth_id\") references \"core_user\" (\"id\") on delete set null;");
+    this.addSql("alter table \"core_notification_delivery_attempt\" add constraint \"core_notification_delivery_attempt_intent_id_foreign\" foreign key (\"intent_id\") references \"core_notification_intent\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"core_hacker\" add constraint \"core_hacker_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on update cascade on delete cascade;");
+    this.addSql("alter table \"core_event_scan\" add constraint \"core_event_scan_event_id_foreign\" foreign key (\"event_id\") references \"core_event\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"core_event_scan\" add constraint \"core_event_scan_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"core_event_scan\" add constraint \"core_event_scan_scanned_by_auth_id_foreign\" foreign key (\"scanned_by_auth_id\") references \"core_user\" (\"id\");");
+    this.addSql("alter table \"session\" add constraint \"session_user_id_foreign\" foreign key (\"user_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"account\" add constraint \"account_user_id_foreign\" foreign key (\"user_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"teams_team\" add constraint \"teams_team_owner_auth_id_foreign\" foreign key (\"owner_auth_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"teams_member\" add constraint \"teams_member_team_id_foreign\" foreign key (\"team_id\") references \"teams_team\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"teams_member\" add constraint \"teams_member_auth_id_foreign\" foreign key (\"auth_id\") references \"core_user\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"teams_invite\" add constraint \"teams_invite_team_id_foreign\" foreign key (\"team_id\") references \"teams_team\" (\"id\") on delete cascade;");
+    this.addSql("alter table \"teams_invite\" add constraint \"teams_invite_invitee_auth_id_foreign\" foreign key (\"invitee_auth_id\") references \"core_user\" (\"id\") on delete cascade;");
+  }
+
+  override down(): void | Promise<void> {
+    this.addSql(`alter table "session" drop constraint "session_user_id_foreign";`);
+    this.addSql(`alter table "account" drop constraint "account_user_id_foreign";`);
+    this.addSql(`alter table "core_event_scan" drop constraint "core_event_scan_event_id_foreign";`);
+    this.addSql(`alter table "core_user" drop constraint "core_user_role_id_foreign";`);
+    this.addSql(`alter table "discord_verification" drop constraint "discord_verification_auth_id_foreign";`);
+    this.addSql(`alter table "discord_role_sync_attempt" drop constraint "discord_role_sync_attempt_auth_id_foreign";`);
+    this.addSql(`alter table "discord_member" drop constraint "discord_member_auth_id_foreign";`);
+    this.addSql(`alter table "core_user_data" drop constraint "core_user_data_auth_id_foreign";`);
+    this.addSql(`alter table "core_user_ban" drop constraint "core_user_ban_auth_id_foreign";`);
+    this.addSql(`alter table "core_user_ban" drop constraint "core_user_ban_banned_by_auth_id_foreign";`);
+    this.addSql(`alter table "core_setting" drop constraint "core_setting_created_by_auth_id_foreign";`);
+    this.addSql(`alter table "core_setting" drop constraint "core_setting_updated_by_auth_id_foreign";`);
+    this.addSql(`alter table "core_rsvp" drop constraint "core_rsvp_auth_id_foreign";`);
+    this.addSql(`alter table "core_rsvp" drop constraint "core_rsvp_cancelled_by_auth_id_foreign";`);
+    this.addSql(`alter table "core_rsvp" drop constraint "core_rsvp_promoted_by_auth_id_foreign";`);
+    this.addSql(`alter table "core_notification_intent" drop constraint "core_notification_intent_recipient_auth_id_foreign";`);
+    this.addSql(`alter table "core_hacker" drop constraint "core_hacker_auth_id_foreign";`);
+    this.addSql(`alter table "core_event_scan" drop constraint "core_event_scan_auth_id_foreign";`);
+    this.addSql(`alter table "core_event_scan" drop constraint "core_event_scan_scanned_by_auth_id_foreign";`);
+    this.addSql(`alter table "teams_team" drop constraint "teams_team_owner_auth_id_foreign";`);
+    this.addSql(`alter table "teams_member" drop constraint "teams_member_auth_id_foreign";`);
+    this.addSql(`alter table "teams_invite" drop constraint "teams_invite_invitee_auth_id_foreign";`);
+    this.addSql(`alter table "core_notification_delivery_attempt" drop constraint "core_notification_delivery_attempt_intent_id_foreign";`);
+    this.addSql(`alter table "teams_member" drop constraint "teams_member_team_id_foreign";`);
+    this.addSql(`alter table "teams_invite" drop constraint "teams_invite_team_id_foreign";`);
+
+    this.addSql(`drop table if exists "session" cascade;`);
+    this.addSql(`drop table if exists "account" cascade;`);
+    this.addSql(`drop table if exists "verification" cascade;`);
+    this.addSql(`drop table if exists "core_event" cascade;`);
+    this.addSql(`drop table if exists "core_operation_lock" cascade;`);
+    this.addSql(`drop table if exists "core_role" cascade;`);
+    this.addSql(`drop table if exists "core_user" cascade;`);
+    this.addSql(`drop table if exists "discord_verification" cascade;`);
+    this.addSql(`drop table if exists "discord_role_sync_attempt" cascade;`);
+    this.addSql(`drop table if exists "discord_member" cascade;`);
+    this.addSql(`drop table if exists "core_user_data" cascade;`);
+    this.addSql(`drop table if exists "core_user_ban" cascade;`);
+    this.addSql(`drop table if exists "core_setting" cascade;`);
+    this.addSql(`drop table if exists "core_rsvp" cascade;`);
+    this.addSql(`drop table if exists "core_notification_intent" cascade;`);
+    this.addSql(`drop table if exists "core_notification_delivery_attempt" cascade;`);
+    this.addSql(`drop table if exists "core_hacker" cascade;`);
+    this.addSql(`drop table if exists "core_event_scan" cascade;`);
+    this.addSql(`drop table if exists "teams_team" cascade;`);
+    this.addSql(`drop table if exists "teams_member" cascade;`);
+    this.addSql(`drop table if exists "teams_invite" cascade;`);
+  }
+
+}
diff --git a/apps/web/db/migrations/sqlite/.snapshot.json b/apps/web/db/migrations/sqlite/.snapshot.json
new file mode 100644
index 00000000..94c45c41
--- /dev/null
+++ b/apps/web/db/migrations/sqlite/.snapshot.json
@@ -0,0 +1,4525 @@
+{
+  "namespaces": [],
+  "tables": [
+    {
+      "name": "account",
+      "columns": {
+        "access_token": {
+          "name": "access_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "account_id": {
+          "name": "account_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id_token": {
+          "name": "id_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "refresh_token": {
+          "name": "refresh_token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "refresh_token_expires_at": {
+          "name": "refresh_token_expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "account_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "account_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "account_user_id_foreign",
+          "localTableName": "account",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_event",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "end_time": {
+          "name": "end_time",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "hidden": {
+          "name": "hidden",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "host": {
+          "name": "host",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "location": {
+          "name": "location",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'TBD'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "start_time": {
+          "name": "start_time",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "hidden"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_hidden_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "start_time"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_start_time_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "type"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_type_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_event_scan",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "scanned_at": {
+          "name": "scanned_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "scanned_by_auth_id": {
+          "name": "scanned_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id",
+            "auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "event_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_event_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "scanned_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_scanned_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "scanned_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_event_scan_scanned_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_event_scan_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_event_scan_auth_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_event_id_foreign": {
+          "columnNames": [
+            "event_id"
+          ],
+          "constraintName": "core_event_scan_event_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_event",
+          "deleteRule": "cascade"
+        },
+        "core_event_scan_scanned_by_auth_id_foreign": {
+          "columnNames": [
+            "scanned_by_auth_id"
+          ],
+          "constraintName": "core_event_scan_scanned_by_auth_id_foreign",
+          "localTableName": "core_event_scan",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_hacker",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "github_url": {
+          "name": "github_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "group": {
+          "name": "group",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "hackathons_attended": {
+          "name": "hackathons_attended",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "heard_from": {
+          "name": "heard_from",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "level_of_study": {
+          "name": "level_of_study",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "linked_in_url": {
+          "name": "linked_in_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "major": {
+          "name": "major",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "personal_website_url": {
+          "name": "personal_website_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "resume_url": {
+          "name": "resume_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "school_id": {
+          "name": "school_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "software_experience": {
+          "name": "software_experience",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "university": {
+          "name": "university",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_hacker_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "registered_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_hacker_registered_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_hacker_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_hacker_auth_id_foreign",
+          "localTableName": "core_hacker",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_delivery_attempt",
+      "columns": {
+        "attempted_at": {
+          "name": "attempted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "external_id": {
+          "name": "external_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "intent_id": {
+          "name": "intent_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "recipient": {
+          "name": "recipient",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "attempted_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_attempted_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "channel"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_channel_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "intent_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_intent_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_delivery_attempt_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_notification_delivery_attempt_status_check",
+          "expression": "`status` in ('delivered', 'failed', 'skipped')",
+          "definition": "check (`status` in ('delivered', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_delivery_attempt_intent_id_foreign": {
+          "columnNames": [
+            "intent_id"
+          ],
+          "constraintName": "core_notification_delivery_attempt_intent_id_foreign",
+          "localTableName": "core_notification_delivery_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_notification_intent",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_notification_intent",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "payload": {
+          "name": "payload",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "recipient_auth_id": {
+          "name": "recipient_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "processing",
+            "delivered",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "idempotency_key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_notification_intent_idempotency_key_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "kind"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_kind_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_recipient_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_notification_intent_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_notification_intent_status_check",
+          "expression": "`status` in ('pending', 'processing', 'delivered', 'failed', 'skipped')",
+          "definition": "check (`status` in ('pending', 'processing', 'delivered', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_notification_intent_recipient_auth_id_foreign": {
+          "columnNames": [
+            "recipient_auth_id"
+          ],
+          "constraintName": "core_notification_intent_recipient_auth_id_foreign",
+          "localTableName": "core_notification_intent",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_operation_lock",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "token": {
+          "name": "token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_role",
+      "columns": {
+        "color": {
+          "name": "color",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "position": {
+          "name": "position",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "name"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_role_name_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_role_position_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    },
+    {
+      "name": "core_rsvp",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "cancelled_at": {
+          "name": "cancelled_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "cancelled_by_auth_id": {
+          "name": "cancelled_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "confirmed_at": {
+          "name": "confirmed_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_at": {
+          "name": "promoted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "promoted_by_auth_id": {
+          "name": "promoted_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "confirmed",
+            "waitlisted",
+            "cancelled"
+          ],
+          "mappedType": "enum"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "waitlist_position": {
+          "name": "waitlist_position",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "waitlisted_at": {
+          "name": "waitlisted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "cancelled_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_cancelled_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "promoted_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_promoted_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "waitlist_position"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_rsvp_waitlist_position_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [
+        {
+          "name": "core_rsvp_status_check",
+          "expression": "`status` in ('confirmed', 'waitlisted', 'cancelled')",
+          "definition": "check (`status` in ('confirmed', 'waitlisted', 'cancelled'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "core_rsvp_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_rsvp_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_rsvp_cancelled_by_auth_id_foreign": {
+          "columnNames": [
+            "cancelled_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_cancelled_by_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        },
+        "core_rsvp_promoted_by_auth_id_foreign": {
+          "columnNames": [
+            "promoted_by_auth_id"
+          ],
+          "constraintName": "core_rsvp_promoted_by_auth_id_foreign",
+          "localTableName": "core_rsvp",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_setting",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_by_auth_id": {
+          "name": "created_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_by_auth_id": {
+          "name": "updated_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "value": {
+          "name": "value",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_created_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_setting_updated_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "key"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_setting_created_by_auth_id_foreign": {
+          "columnNames": [
+            "created_by_auth_id"
+          ],
+          "constraintName": "core_setting_created_by_auth_id_foreign",
+          "localTableName": "core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        },
+        "core_setting_updated_by_auth_id_foreign": {
+          "columnNames": [
+            "updated_by_auth_id"
+          ],
+          "constraintName": "core_setting_updated_by_auth_id_foreign",
+          "localTableName": "core_setting",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user",
+      "columns": {
+        "bio": {
+          "name": "bio",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "checked_in_at": {
+          "name": "checked_in_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_display_handle": {
+          "name": "discord_display_handle",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "email_verified": {
+          "name": "email_verified",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "hack_tag": {
+          "name": "hack_tag",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "is_approved": {
+          "name": "is_approved",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "false",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "is_profile_searchable": {
+          "name": "is_profile_searchable",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "true",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "profile_photo_url": {
+          "name": "profile_photo_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "pronouns": {
+          "name": "pronouns",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "skills": {
+          "name": "skills",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "email"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_email_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_hack_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "hack_tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "core_user_hack_tag_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "role_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_role_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_role_id_foreign": {
+          "columnNames": [
+            "role_id"
+          ],
+          "constraintName": "core_user_role_id_foreign",
+          "localTableName": "core_user",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_role",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_ban",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "banned_by_auth_id": {
+          "name": "banned_by_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_ban_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "banned_by_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_ban_banned_by_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_ban_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_ban_auth_id_foreign",
+          "localTableName": "core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        },
+        "core_user_ban_banned_by_auth_id_foreign": {
+          "columnNames": [
+            "banned_by_auth_id"
+          ],
+          "constraintName": "core_user_ban_banned_by_auth_id_foreign",
+          "localTableName": "core_user_ban",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "core_user_data",
+      "columns": {
+        "accommodation_note": {
+          "name": "accommodation_note",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "age": {
+          "name": "age",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "country_of_residence": {
+          "name": "country_of_residence",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "dietary_restrictions": {
+          "name": "dietary_restrictions",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "ethnicity": {
+          "name": "ethnicity",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "gender": {
+          "name": "gender",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "has_accepted_mlhcode_of_conduct": {
+          "name": "has_accepted_mlhcode_of_conduct",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "has_shared_data_with_mlh": {
+          "name": "has_shared_data_with_mlh",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "is_emailable": {
+          "name": "is_emailable",
+          "type": "integer",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "integer"
+        },
+        "phone_number": {
+          "name": "phone_number",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "race": {
+          "name": "race",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "shirt_size": {
+          "name": "shirt_size",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "core_user_data_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "core_user_data_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "core_user_data_auth_id_foreign",
+          "localTableName": "core_user_data",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_member",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "last_role_sync_at": {
+          "name": "last_role_sync_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "verified_at": {
+          "name": "verified_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "discord_member_discord_user_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "updated_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_member_updated_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_member_auth_id_foreign",
+          "localTableName": "discord_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "updateRule": "cascade",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_role_sync_attempt",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "role_ids": {
+          "name": "role_ids",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "role_names": {
+          "name": "role_names",
+          "type": "json",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'[]'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "json"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "synced",
+            "failed",
+            "skipped"
+          ],
+          "mappedType": "enum"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_role_sync_attempt_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [
+        {
+          "name": "discord_role_sync_attempt_status_check",
+          "expression": "`status` in ('synced', 'failed', 'skipped')",
+          "definition": "check (`status` in ('synced', 'failed', 'skipped'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_role_sync_attempt_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_role_sync_attempt_auth_id_foreign",
+          "localTableName": "discord_role_sync_attempt",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "discord_verification",
+      "columns": {
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "avatar_hash": {
+          "name": "avatar_hash",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "discord_user_id": {
+          "name": "discord_user_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "guild_id": {
+          "name": "guild_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "rejected",
+            "expired"
+          ],
+          "mappedType": "enum"
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "created_at"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_created_at_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "discord_user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_discord_user_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "guild_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_guild_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "status"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "discord_verification_status_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "code"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [
+        {
+          "name": "discord_verification_status_check",
+          "expression": "`status` in ('pending', 'accepted', 'rejected', 'expired')",
+          "definition": "check (`status` in ('pending', 'accepted', 'rejected', 'expired'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "discord_verification_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "discord_verification_auth_id_foreign",
+          "localTableName": "discord_verification",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "set null"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "session",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "token": {
+          "name": "token",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "token"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "session_token_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "user_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "session_user_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "session_user_id_foreign": {
+          "columnNames": [
+            "user_id"
+          ],
+          "constraintName": "session_user_id_foreign",
+          "localTableName": "session",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_invite",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "invitee_auth_id": {
+          "name": "invitee_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": "'pending'",
+          "comment": null,
+          "collation": null,
+          "enumItems": [
+            "pending",
+            "accepted",
+            "declined"
+          ],
+          "mappedType": "enum"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "team_id",
+            "invitee_auth_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "keyName": "teams_invite_team_id_invitee_auth_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [
+        {
+          "name": "teams_invite_status_check",
+          "expression": "`status` in ('pending', 'accepted', 'declined')",
+          "definition": "check (`status` in ('pending', 'accepted', 'declined'))",
+          "columnName": "status"
+        }
+      ],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_invite_invitee_auth_id_foreign": {
+          "columnNames": [
+            "invitee_auth_id"
+          ],
+          "constraintName": "teams_invite_invitee_auth_id_foreign",
+          "localTableName": "teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_invite_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_invite_team_id_foreign",
+          "localTableName": "teams_invite",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_member",
+      "columns": {
+        "auth_id": {
+          "name": "auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "joined_at": {
+          "name": "joined_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "team_id": {
+          "name": "team_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "auth_id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_member_auth_id_unique",
+          "primary": false,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "team_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_member_team_id_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_member_auth_id_foreign": {
+          "columnNames": [
+            "auth_id"
+          ],
+          "constraintName": "teams_member_auth_id_foreign",
+          "localTableName": "teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        },
+        "teams_member_team_id_foreign": {
+          "columnNames": [
+            "team_id"
+          ],
+          "constraintName": "teams_member_team_id_foreign",
+          "localTableName": "teams_member",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "teams_team",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "teams_team",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "owner_auth_id": {
+          "name": "owner_auth_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "tag": {
+          "name": "tag",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": true,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_owner_auth_id_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "teams_team_tag_index",
+          "primary": false,
+          "unique": false
+        },
+        {
+          "columnNames": [
+            "tag"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "teams_team_tag_unique",
+          "primary": false,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {
+        "teams_team_owner_auth_id_foreign": {
+          "columnNames": [
+            "owner_auth_id"
+          ],
+          "constraintName": "teams_team_owner_auth_id_foreign",
+          "localTableName": "teams_team",
+          "referencedColumnNames": [
+            "id"
+          ],
+          "referencedTableName": "core_user",
+          "deleteRule": "cascade"
+        }
+      },
+      "comment": null
+    },
+    {
+      "name": "verification",
+      "columns": {
+        "created_at": {
+          "name": "created_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "id": {
+          "name": "id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": true,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "identifier": {
+          "name": "identifier",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "datetime",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "datetime"
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "unique": false,
+          "length": null,
+          "precision": null,
+          "scale": null,
+          "default": null,
+          "comment": null,
+          "collation": null,
+          "enumItems": [],
+          "mappedType": "text"
+        }
+      },
+      "indexes": [
+        {
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "keyName": "primary",
+          "primary": true,
+          "unique": true
+        },
+        {
+          "columnNames": [
+            "identifier"
+          ],
+          "composite": false,
+          "constraint": false,
+          "keyName": "verification_identifier_index",
+          "primary": false,
+          "unique": false
+        }
+      ],
+      "checks": [],
+      "triggers": [],
+      "foreignKeys": {},
+      "comment": null
+    }
+  ],
+  "views": [],
+  "nativeEnums": {}
+}
\ No newline at end of file
diff --git a/apps/web/db/migrations/sqlite/Migration20260927180400_initial.ts b/apps/web/db/migrations/sqlite/Migration20260927180400_initial.ts
new file mode 100644
index 00000000..7adbaced
--- /dev/null
+++ b/apps/web/db/migrations/sqlite/Migration20260927180400_initial.ts
@@ -0,0 +1,119 @@
+import { Migration } from "@mikro-orm/migrations";
+
+export class Migration20260927180400_initial extends Migration {
+  override name = "Migration20260927180400_initial";
+
+  override up(): void {
+    this.addSql("create table `verification` (`id` text not null primary key, `identifier` text not null, `value` text not null, `expires_at` datetime not null, `created_at` datetime null, `updated_at` datetime null);");
+    this.addSql("create index `verification_identifier_index` on `verification` (`identifier`);");
+    this.addSql("create table `core_event` (`id` text not null primary key, `title` text not null, `start_time` datetime not null, `end_time` datetime not null, `location` text not null default 'TBD', `description` text not null, `type` text not null, `host` text null, `hidden` integer not null default false, `created_at` datetime not null, `updated_at` datetime not null);");
+    this.addSql("create index `core_event_start_time_index` on `core_event` (`start_time`);");
+    this.addSql("create index `core_event_type_index` on `core_event` (`type`);");
+    this.addSql("create index `core_event_hidden_index` on `core_event` (`hidden`);");
+    this.addSql("create table `core_operation_lock` (`key` text not null primary key, `token` text not null);");
+    this.addSql("create table `core_role` (`id` text not null primary key, `name` text not null, `position` integer not null, `permissions` json not null default '[]', `color` text null, `created_at` datetime not null, `updated_at` datetime not null);");
+    this.addSql("create unique index `core_role_name_unique` on `core_role` (`name`);");
+    this.addSql("create index `core_role_position_index` on `core_role` (`position`);");
+    this.addSql("create table `core_user` (`id` text not null primary key, `name` text not null, `email` text not null, `email_verified` integer not null default false, `profile_photo_url` text null, `hack_tag` text null, `bio` text null, `pronouns` text null, `skills` json not null default '[]', `is_profile_searchable` integer not null default true, `discord_display_handle` text null, `role_id` text null, `is_approved` integer not null default false, `checked_in_at` datetime null, `created_at` datetime not null, `updated_at` datetime not null, constraint `core_user_role_id_foreign` foreign key (`role_id`) references `core_role` (`id`) on delete set null);");
+    this.addSql("create unique index `core_user_email_unique` on `core_user` (`email`);");
+    this.addSql("create unique index `core_user_hack_tag_unique` on `core_user` (`hack_tag`);");
+    this.addSql("create index `core_user_hack_tag_index` on `core_user` (`hack_tag`);");
+    this.addSql("create index `core_user_role_id_index` on `core_user` (`role_id`);");
+    this.addSql("create index `core_user_created_at_index` on `core_user` (`created_at`);");
+    this.addSql("create table `discord_verification` (`code` text not null primary key, `discord_user_id` text not null, `guild_id` text not null, `username` text not null, `avatar_hash` text null, `auth_id` text null, `status` text check (`status` in ('pending', 'accepted', 'rejected', 'expired')) not null default 'pending', `expires_at` datetime not null, `created_at` datetime not null, `accepted_at` datetime null, constraint `discord_verification_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete set null);");
+    this.addSql("create index `discord_verification_discord_user_id_index` on `discord_verification` (`discord_user_id`);");
+    this.addSql("create index `discord_verification_guild_id_index` on `discord_verification` (`guild_id`);");
+    this.addSql("create index `discord_verification_auth_id_index` on `discord_verification` (`auth_id`);");
+    this.addSql("create index `discord_verification_status_index` on `discord_verification` (`status`);");
+    this.addSql("create index `discord_verification_created_at_index` on `discord_verification` (`created_at`);");
+    this.addSql("create table `discord_role_sync_attempt` (`id` text not null primary key, `auth_id` text not null, `discord_user_id` text not null, `guild_id` text not null, `status` text check (`status` in ('synced', 'failed', 'skipped')) not null, `role_ids` json not null default '[]', `role_names` json not null default '[]', `error` text null, `created_at` datetime not null, constraint `discord_role_sync_attempt_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create index `discord_role_sync_attempt_auth_id_index` on `discord_role_sync_attempt` (`auth_id`);");
+    this.addSql("create index `discord_role_sync_attempt_discord_user_id_index` on `discord_role_sync_attempt` (`discord_user_id`);");
+    this.addSql("create index `discord_role_sync_attempt_status_index` on `discord_role_sync_attempt` (`status`);");
+    this.addSql("create index `discord_role_sync_attempt_created_at_index` on `discord_role_sync_attempt` (`created_at`);");
+    this.addSql("create table `discord_member` (`auth_id` text not null primary key, `discord_user_id` text not null, `guild_id` text not null, `username` text not null, `avatar_hash` text null, `verified_at` datetime not null, `updated_at` datetime not null, `last_role_sync_at` datetime null, constraint `discord_member_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade);");
+    this.addSql("create index `discord_member_auth_id_index` on `discord_member` (`auth_id`);");
+    this.addSql("create unique index `discord_member_discord_user_id_unique` on `discord_member` (`discord_user_id`);");
+    this.addSql("create index `discord_member_discord_user_id_index` on `discord_member` (`discord_user_id`);");
+    this.addSql("create index `discord_member_guild_id_index` on `discord_member` (`guild_id`);");
+    this.addSql("create index `discord_member_updated_at_index` on `discord_member` (`updated_at`);");
+    this.addSql("create table `core_user_data` (`auth_id` text not null primary key, `age` integer not null, `gender` text not null, `race` text not null, `ethnicity` text not null, `shirt_size` text not null, `dietary_restrictions` json not null default '[]', `accommodation_note` text null, `phone_number` text null, `country_of_residence` text null, `has_accepted_mlhcode_of_conduct` integer not null, `has_shared_data_with_mlh` integer not null, `is_emailable` integer not null, `completed_at` datetime not null, `updated_at` datetime not null, constraint `core_user_data_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade);");
+    this.addSql("create index `core_user_data_auth_id_index` on `core_user_data` (`auth_id`);");
+    this.addSql("create table `core_user_ban` (`auth_id` text not null primary key, `reason` text null, `banned_by_auth_id` text not null, `created_at` datetime not null, constraint `core_user_ban_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade, constraint `core_user_ban_banned_by_auth_id_foreign` foreign key (`banned_by_auth_id`) references `core_user` (`id`));");
+    this.addSql("create index `core_user_ban_auth_id_index` on `core_user_ban` (`auth_id`);");
+    this.addSql("create index `core_user_ban_banned_by_auth_id_index` on `core_user_ban` (`banned_by_auth_id`);");
+    this.addSql("create table `core_setting` (`key` text not null primary key, `value` json not null, `created_at` datetime not null, `created_by_auth_id` text null, `updated_at` datetime not null, `updated_by_auth_id` text null, constraint `core_setting_created_by_auth_id_foreign` foreign key (`created_by_auth_id`) references `core_user` (`id`) on delete set null, constraint `core_setting_updated_by_auth_id_foreign` foreign key (`updated_by_auth_id`) references `core_user` (`id`) on delete set null);");
+    this.addSql("create index `core_setting_created_by_auth_id_index` on `core_setting` (`created_by_auth_id`);");
+    this.addSql("create index `core_setting_updated_at_index` on `core_setting` (`updated_at`);");
+    this.addSql("create index `core_setting_updated_by_auth_id_index` on `core_setting` (`updated_by_auth_id`);");
+    this.addSql("create table `core_rsvp` (`auth_id` text not null primary key, `status` text check (`status` in ('confirmed', 'waitlisted', 'cancelled')) not null, `waitlist_position` integer null, `created_at` datetime not null, `updated_at` datetime not null, `confirmed_at` datetime null, `waitlisted_at` datetime null, `cancelled_at` datetime null, `cancelled_by_auth_id` text null, `promoted_at` datetime null, `promoted_by_auth_id` text null, constraint `core_rsvp_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade, constraint `core_rsvp_cancelled_by_auth_id_foreign` foreign key (`cancelled_by_auth_id`) references `core_user` (`id`) on delete set null, constraint `core_rsvp_promoted_by_auth_id_foreign` foreign key (`promoted_by_auth_id`) references `core_user` (`id`) on delete set null);");
+    this.addSql("create index `core_rsvp_auth_id_index` on `core_rsvp` (`auth_id`);");
+    this.addSql("create index `core_rsvp_cancelled_by_auth_id_index` on `core_rsvp` (`cancelled_by_auth_id`);");
+    this.addSql("create index `core_rsvp_promoted_by_auth_id_index` on `core_rsvp` (`promoted_by_auth_id`);");
+    this.addSql("create index `core_rsvp_status_index` on `core_rsvp` (`status`);");
+    this.addSql("create index `core_rsvp_waitlist_position_index` on `core_rsvp` (`waitlist_position`);");
+    this.addSql("create index `core_rsvp_created_at_index` on `core_rsvp` (`created_at`);");
+    this.addSql("create index `core_rsvp_updated_at_index` on `core_rsvp` (`updated_at`);");
+    this.addSql("create table `core_notification_intent` (`id` text not null primary key, `kind` text not null, `recipient_auth_id` text null, `payload` json not null, `status` text check (`status` in ('pending', 'processing', 'delivered', 'failed', 'skipped')) not null default 'pending', `idempotency_key` text null, `created_at` datetime not null, `updated_at` datetime not null, constraint `core_notification_intent_recipient_auth_id_foreign` foreign key (`recipient_auth_id`) references `core_user` (`id`) on delete set null);");
+    this.addSql("create unique index `core_notification_intent_idempotency_key_unique` on `core_notification_intent` (`idempotency_key`);");
+    this.addSql("create index `core_notification_intent_kind_index` on `core_notification_intent` (`kind`);");
+    this.addSql("create index `core_notification_intent_recipient_auth_id_index` on `core_notification_intent` (`recipient_auth_id`);");
+    this.addSql("create index `core_notification_intent_status_index` on `core_notification_intent` (`status`);");
+    this.addSql("create index `core_notification_intent_created_at_index` on `core_notification_intent` (`created_at`);");
+    this.addSql("create table `core_notification_delivery_attempt` (`id` text not null primary key, `intent_id` text not null, `channel` text not null, `provider` text null, `status` text check (`status` in ('delivered', 'failed', 'skipped')) not null, `recipient` text null, `external_id` text null, `error` text null, `metadata` json not null, `attempted_at` datetime not null, constraint `core_notification_delivery_attempt_intent_id_foreign` foreign key (`intent_id`) references `core_notification_intent` (`id`) on delete cascade);");
+    this.addSql("create index `core_notification_delivery_attempt_intent_id_index` on `core_notification_delivery_attempt` (`intent_id`);");
+    this.addSql("create index `core_notification_delivery_attempt_channel_index` on `core_notification_delivery_attempt` (`channel`);");
+    this.addSql("create index `core_notification_delivery_attempt_status_index` on `core_notification_delivery_attempt` (`status`);");
+    this.addSql("create index `core_notification_delivery_attempt_attempted_at_index` on `core_notification_delivery_attempt` (`attempted_at`);");
+    this.addSql("create table `core_hacker` (`auth_id` text not null primary key, `university` text not null, `major` text not null, `school_id` text null, `level_of_study` text not null, `hackathons_attended` integer not null, `software_experience` text not null, `heard_from` text null, `github_url` text null, `linked_in_url` text null, `personal_website_url` text null, `resume_url` text null, `group` text null, `registered_at` datetime not null, `updated_at` datetime not null, constraint `core_hacker_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on update cascade on delete cascade);");
+    this.addSql("create index `core_hacker_auth_id_index` on `core_hacker` (`auth_id`);");
+    this.addSql("create index `core_hacker_registered_at_index` on `core_hacker` (`registered_at`);");
+    this.addSql("create table `core_event_scan` (`id` text not null primary key, `event_id` text not null, `auth_id` text not null, `scanned_by_auth_id` text not null, `scanned_at` datetime not null, constraint `core_event_scan_event_id_foreign` foreign key (`event_id`) references `core_event` (`id`) on delete cascade, constraint `core_event_scan_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade, constraint `core_event_scan_scanned_by_auth_id_foreign` foreign key (`scanned_by_auth_id`) references `core_user` (`id`));");
+    this.addSql("create index `core_event_scan_scanned_by_auth_id_index` on `core_event_scan` (`scanned_by_auth_id`);");
+    this.addSql("create index `core_event_scan_event_id_index` on `core_event_scan` (`event_id`);");
+    this.addSql("create index `core_event_scan_auth_id_index` on `core_event_scan` (`auth_id`);");
+    this.addSql("create index `core_event_scan_event_id_auth_id_index` on `core_event_scan` (`event_id`, `auth_id`);");
+    this.addSql("create index `core_event_scan_scanned_at_index` on `core_event_scan` (`scanned_at`);");
+    this.addSql("create table `session` (`id` text not null primary key, `expires_at` datetime not null, `token` text not null, `created_at` datetime not null, `updated_at` datetime not null, `ip_address` text null, `user_agent` text null, `user_id` text not null, constraint `session_user_id_foreign` foreign key (`user_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create unique index `session_token_unique` on `session` (`token`);");
+    this.addSql("create index `session_user_id_index` on `session` (`user_id`);");
+    this.addSql("create table `account` (`id` text not null primary key, `account_id` text not null, `provider_id` text not null, `user_id` text not null, `access_token` text null, `refresh_token` text null, `id_token` text null, `access_token_expires_at` datetime null, `refresh_token_expires_at` datetime null, `scope` text null, `password` text null, `created_at` datetime not null, `updated_at` datetime not null, constraint `account_user_id_foreign` foreign key (`user_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create index `account_user_id_index` on `account` (`user_id`);");
+    this.addSql("create table `teams_team` (`id` text not null primary key, `name` text not null, `tag` text not null, `owner_auth_id` text not null, `created_at` datetime not null, constraint `teams_team_owner_auth_id_foreign` foreign key (`owner_auth_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create unique index `teams_team_tag_unique` on `teams_team` (`tag`);");
+    this.addSql("create index `teams_team_tag_index` on `teams_team` (`tag`);");
+    this.addSql("create index `teams_team_owner_auth_id_index` on `teams_team` (`owner_auth_id`);");
+    this.addSql("create table `teams_member` (`id` text not null primary key, `team_id` text not null, `auth_id` text not null, `joined_at` datetime not null, constraint `teams_member_team_id_foreign` foreign key (`team_id`) references `teams_team` (`id`) on delete cascade, constraint `teams_member_auth_id_foreign` foreign key (`auth_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create unique index `teams_member_auth_id_unique` on `teams_member` (`auth_id`);");
+    this.addSql("create index `teams_member_team_id_index` on `teams_member` (`team_id`);");
+    this.addSql("create index `teams_member_auth_id_index` on `teams_member` (`auth_id`);");
+    this.addSql("create table `teams_invite` (`id` text not null primary key, `team_id` text not null, `invitee_auth_id` text not null, `status` text check (`status` in ('pending', 'accepted', 'declined')) not null default 'pending', `created_at` datetime not null, constraint `teams_invite_team_id_foreign` foreign key (`team_id`) references `teams_team` (`id`) on delete cascade, constraint `teams_invite_invitee_auth_id_foreign` foreign key (`invitee_auth_id`) references `core_user` (`id`) on delete cascade);");
+    this.addSql("create index `teams_invite_team_id_index` on `teams_invite` (`team_id`);");
+    this.addSql("create index `teams_invite_invitee_auth_id_index` on `teams_invite` (`invitee_auth_id`);");
+    this.addSql("create index `teams_invite_team_id_invitee_auth_id_index` on `teams_invite` (`team_id`, `invitee_auth_id`);");
+  }
+
+  override down(): void {
+    this.addSql("drop table if exists `teams_invite`;");
+    this.addSql("drop table if exists `teams_member`;");
+    this.addSql("drop table if exists `teams_team`;");
+    this.addSql("drop table if exists `account`;");
+    this.addSql("drop table if exists `session`;");
+    this.addSql("drop table if exists `core_event_scan`;");
+    this.addSql("drop table if exists `core_hacker`;");
+    this.addSql("drop table if exists `core_notification_delivery_attempt`;");
+    this.addSql("drop table if exists `core_notification_intent`;");
+    this.addSql("drop table if exists `core_rsvp`;");
+    this.addSql("drop table if exists `core_setting`;");
+    this.addSql("drop table if exists `core_user_ban`;");
+    this.addSql("drop table if exists `core_user_data`;");
+    this.addSql("drop table if exists `discord_member`;");
+    this.addSql("drop table if exists `discord_role_sync_attempt`;");
+    this.addSql("drop table if exists `discord_verification`;");
+    this.addSql("drop table if exists `core_user`;");
+    this.addSql("drop table if exists `core_role`;");
+    this.addSql("drop table if exists `core_operation_lock`;");
+    this.addSql("drop table if exists `core_event`;");
+    this.addSql("drop table if exists `verification`;");
+  }
+}
diff --git a/apps/web/db/schema/auth.ts b/apps/web/db/schema/auth.ts
deleted file mode 100644
index 66fc6334..00000000
--- a/apps/web/db/schema/auth.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-import { relations, sql } from "drizzle-orm";
-import { sqliteTable, text, integer, index } from "drizzle-orm/sqlite-core";
-
-export const user = sqliteTable("user", {
-  id: text("id").primaryKey(),
-  name: text("name").notNull(),
-  email: text("email").notNull().unique(),
-  emailVerified: integer("email_verified", { mode: "boolean" })
-    .default(false)
-    .notNull(),
-  image: text("image"),
-  createdAt: integer("created_at", { mode: "timestamp_ms" })
-    .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-    .notNull(),
-  updatedAt: integer("updated_at", { mode: "timestamp_ms" })
-    .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-    .$onUpdate(() => /* @__PURE__ */ new Date())
-    .notNull(),
-});
-
-export const session = sqliteTable(
-  "session",
-  {
-    id: text("id").primaryKey(),
-    expiresAt: integer("expires_at", { mode: "timestamp_ms" }).notNull(),
-    token: text("token").notNull().unique(),
-    createdAt: integer("created_at", { mode: "timestamp_ms" })
-      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-      .notNull(),
-    updatedAt: integer("updated_at", { mode: "timestamp_ms" })
-      .$onUpdate(() => /* @__PURE__ */ new Date())
-      .notNull(),
-    ipAddress: text("ip_address"),
-    userAgent: text("user_agent"),
-    userId: text("user_id")
-      .notNull()
-      .references(() => user.id, { onDelete: "cascade" }),
-  },
-  (table) => [index("session_userId_idx").on(table.userId)],
-);
-
-export const account = sqliteTable(
-  "account",
-  {
-    id: text("id").primaryKey(),
-    accountId: text("account_id").notNull(),
-    providerId: text("provider_id").notNull(),
-    userId: text("user_id")
-      .notNull()
-      .references(() => user.id, { onDelete: "cascade" }),
-    accessToken: text("access_token"),
-    refreshToken: text("refresh_token"),
-    idToken: text("id_token"),
-    accessTokenExpiresAt: integer("access_token_expires_at", {
-      mode: "timestamp_ms",
-    }),
-    refreshTokenExpiresAt: integer("refresh_token_expires_at", {
-      mode: "timestamp_ms",
-    }),
-    scope: text("scope"),
-    password: text("password"),
-    createdAt: integer("created_at", { mode: "timestamp_ms" })
-      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-      .notNull(),
-    updatedAt: integer("updated_at", { mode: "timestamp_ms" })
-      .$onUpdate(() => /* @__PURE__ */ new Date())
-      .notNull(),
-  },
-  (table) => [index("account_userId_idx").on(table.userId)],
-);
-
-export const verification = sqliteTable(
-  "verification",
-  {
-    id: text("id").primaryKey(),
-    identifier: text("identifier").notNull(),
-    value: text("value").notNull(),
-    expiresAt: integer("expires_at", { mode: "timestamp_ms" }).notNull(),
-    createdAt: integer("created_at", { mode: "timestamp_ms" })
-      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-      .notNull(),
-    updatedAt: integer("updated_at", { mode: "timestamp_ms" })
-      .default(sql`(cast(unixepoch('subsecond') * 1000 as integer))`)
-      .$onUpdate(() => /* @__PURE__ */ new Date())
-      .notNull(),
-  },
-  (table) => [index("verification_identifier_idx").on(table.identifier)],
-);
-
-export const userRelations = relations(user, ({ many }) => ({
-  sessions: many(session),
-  accounts: many(account),
-}));
-
-export const sessionRelations = relations(session, ({ one }) => ({
-  user: one(user, {
-    fields: [session.userId],
-    references: [user.id],
-  }),
-}));
-
-export const accountRelations = relations(account, ({ one }) => ({
-  user: one(user, {
-    fields: [account.userId],
-    references: [user.id],
-  }),
-}));
diff --git a/apps/web/db/schema/hackkit.ts b/apps/web/db/schema/hackkit.ts
deleted file mode 100644
index 2bfac16b..00000000
--- a/apps/web/db/schema/hackkit.ts
+++ /dev/null
@@ -1,262 +0,0 @@
-import { index, integer, real, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
-
-export const coreEvent = sqliteTable("core_event", {
-	id: text("id").primaryKey().notNull(),
-	title: text("title").notNull(),
-	startTime: integer("startTime", { mode: "timestamp" }).notNull(),
-	endTime: integer("endTime", { mode: "timestamp" }).notNull(),
-	location: text("location").notNull().default("TBD"),
-	description: text("description").notNull(),
-	type: text("type").notNull(),
-	host: text("host"),
-	hidden: integer("hidden", { mode: "boolean" }).notNull().default(false),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_event_startTime_idx: index("core_event_startTime_idx").on(table.startTime),
-	core_event_type_idx: index("core_event_type_idx").on(table.type),
-	core_event_hidden_idx: index("core_event_hidden_idx").on(table.hidden)
-}));
-
-export const coreRole = sqliteTable("core_role", {
-	id: text("id").primaryKey().notNull(),
-	name: text("name").notNull().unique(),
-	position: integer("position").notNull(),
-	permissions: text("permissions", { mode: "json" }).notNull().default([]),
-	color: text("color"),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_role_position_idx: index("core_role_position_idx").on(table.position)
-}));
-
-export const coreUser = sqliteTable("core_user", {
-	authId: text("authId").primaryKey().notNull(),
-	email: text("email").notNull().unique(),
-	firstName: text("firstName").notNull(),
-	lastName: text("lastName").notNull(),
-	profilePhotoUrl: text("profilePhotoUrl"),
-	hackTag: text("hackTag").unique(),
-	bio: text("bio"),
-	pronouns: text("pronouns"),
-	skills: text("skills", { mode: "json" }).notNull().default([]),
-	isProfileSearchable: integer("isProfileSearchable", { mode: "boolean" }).notNull().default(true),
-	discordDisplayHandle: text("discordDisplayHandle"),
-	roleId: text("roleId").references(() => coreRole.id, { onDelete: "set null" }),
-	isApproved: integer("isApproved", { mode: "boolean" }).notNull().default(false),
-	checkedInAt: integer("checkedInAt", { mode: "timestamp" }),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_user_email_idx: index("core_user_email_idx").on(table.email),
-	core_user_hackTag_idx: index("core_user_hackTag_idx").on(table.hackTag),
-	core_user_roleId_idx: index("core_user_roleId_idx").on(table.roleId),
-	core_user_createdAt_idx: index("core_user_createdAt_idx").on(table.createdAt)
-}));
-
-export const coreEventScan = sqliteTable("core_eventScan", {
-	id: text("id").primaryKey().notNull(),
-	eventId: text("eventId").notNull().references(() => coreEvent.id, { onDelete: "cascade" }),
-	authId: text("authId").notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	scannedByAuthId: text("scannedByAuthId").notNull().references(() => coreUser.authId),
-	scannedAt: integer("scannedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_eventScan_eventId_idx: index("core_eventScan_eventId_idx").on(table.eventId),
-	core_eventScan_authId_idx: index("core_eventScan_authId_idx").on(table.authId),
-	core_eventScan_eventId_authId_idx: index("core_eventScan_eventId_authId_idx").on(table.eventId, table.authId),
-	core_eventScan_scannedAt_idx: index("core_eventScan_scannedAt_idx").on(table.scannedAt)
-}));
-
-export const coreHacker = sqliteTable("core_hacker", {
-	authId: text("authId").primaryKey().notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	university: text("university").notNull(),
-	major: text("major").notNull(),
-	schoolId: text("schoolId"),
-	levelOfStudy: text("levelOfStudy").notNull(),
-	hackathonsAttended: integer("hackathonsAttended").notNull(),
-	softwareExperience: text("softwareExperience").notNull(),
-	heardFrom: text("heardFrom"),
-	githubUrl: text("githubUrl"),
-	linkedInUrl: text("linkedInUrl"),
-	personalWebsiteUrl: text("personalWebsiteUrl"),
-	resumeUrl: text("resumeUrl"),
-	group: text("group"),
-	registeredAt: integer("registeredAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_hacker_registeredAt_idx: index("core_hacker_registeredAt_idx").on(table.registeredAt)
-}));
-
-export const coreNotificationIntent = sqliteTable("core_notificationIntent", {
-	id: text("id").primaryKey().notNull(),
-	kind: text("kind").notNull(),
-	recipientAuthId: text("recipientAuthId").references(() => coreUser.authId, { onDelete: "set null" }),
-	payload: text("payload", { mode: "json" }).notNull().default({}),
-	status: text("status").notNull().default("pending"),
-	idempotencyKey: text("idempotencyKey").unique(),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_notificationIntent_kind_idx: index("core_notificationIntent_kind_idx").on(table.kind),
-	core_notificationIntent_recipientAuthId_idx: index("core_notificationIntent_recipientAuthId_idx").on(table.recipientAuthId),
-	core_notificationIntent_status_idx: index("core_notificationIntent_status_idx").on(table.status),
-	core_notificationIntent_createdAt_idx: index("core_notificationIntent_createdAt_idx").on(table.createdAt)
-}));
-
-export const coreNotificationDeliveryAttempt = sqliteTable("core_notificationDeliveryAttempt", {
-	id: text("id").primaryKey().notNull(),
-	intentId: text("intentId").notNull().references(() => coreNotificationIntent.id, { onDelete: "cascade" }),
-	channel: text("channel").notNull(),
-	provider: text("provider"),
-	status: text("status").notNull(),
-	recipient: text("recipient"),
-	externalId: text("externalId"),
-	error: text("error"),
-	metadata: text("metadata", { mode: "json" }).notNull().default({}),
-	attemptedAt: integer("attemptedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	core_notificationDeliveryAttempt_intentId_idx: index("core_notificationDeliveryAttempt_intentId_idx").on(table.intentId),
-	core_notificationDeliveryAttempt_channel_idx: index("core_notificationDeliveryAttempt_channel_idx").on(table.channel),
-	core_notificationDeliveryAttempt_status_idx: index("core_notificationDeliveryAttempt_status_idx").on(table.status),
-	core_notificationDeliveryAttempt_attemptedAt_idx: index("core_notificationDeliveryAttempt_attemptedAt_idx").on(table.attemptedAt)
-}));
-
-export const coreRsvp = sqliteTable("core_rsvp", {
-	authId: text("authId").primaryKey().notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	status: text("status").notNull(),
-	waitlistPosition: integer("waitlistPosition"),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull(),
-	confirmedAt: integer("confirmedAt", { mode: "timestamp" }),
-	waitlistedAt: integer("waitlistedAt", { mode: "timestamp" }),
-	cancelledAt: integer("cancelledAt", { mode: "timestamp" }),
-	cancelledByAuthId: text("cancelledByAuthId").references(() => coreUser.authId, { onDelete: "set null" }),
-	promotedAt: integer("promotedAt", { mode: "timestamp" }),
-	promotedByAuthId: text("promotedByAuthId").references(() => coreUser.authId, { onDelete: "set null" })
-}, (table) => ({
-	core_rsvp_status_idx: index("core_rsvp_status_idx").on(table.status),
-	core_rsvp_waitlistPosition_idx: index("core_rsvp_waitlistPosition_idx").on(table.waitlistPosition),
-	core_rsvp_createdAt_idx: index("core_rsvp_createdAt_idx").on(table.createdAt),
-	core_rsvp_updatedAt_idx: index("core_rsvp_updatedAt_idx").on(table.updatedAt)
-}));
-
-export const coreSetting = sqliteTable("core_setting", {
-	key: text("key").primaryKey().notNull(),
-	value: text("value", { mode: "json" }).notNull(),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	createdByAuthId: text("createdByAuthId").references(() => coreUser.authId, { onDelete: "set null" }),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull(),
-	updatedByAuthId: text("updatedByAuthId").references(() => coreUser.authId, { onDelete: "set null" })
-}, (table) => ({
-	core_setting_updatedAt_idx: index("core_setting_updatedAt_idx").on(table.updatedAt),
-	core_setting_updatedByAuthId_idx: index("core_setting_updatedByAuthId_idx").on(table.updatedByAuthId)
-}));
-
-export const coreUserBan = sqliteTable("core_userBan", {
-	authId: text("authId").primaryKey().notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	reason: text("reason"),
-	bannedByAuthId: text("bannedByAuthId").notNull().references(() => coreUser.authId),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull()
-});
-
-export const coreUserData = sqliteTable("core_userData", {
-	authId: text("authId").primaryKey().notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	age: integer("age").notNull(),
-	gender: text("gender").notNull(),
-	race: text("race").notNull(),
-	ethnicity: text("ethnicity").notNull(),
-	shirtSize: text("shirtSize").notNull(),
-	dietaryRestrictions: text("dietaryRestrictions", { mode: "json" }).notNull().default([]),
-	accommodationNote: text("accommodationNote"),
-	phoneNumber: text("phoneNumber"),
-	countryOfResidence: text("countryOfResidence"),
-	hasAcceptedMLHCodeOfConduct: integer("hasAcceptedMLHCodeOfConduct", { mode: "boolean" }).notNull(),
-	hasSharedDataWithMLH: integer("hasSharedDataWithMLH", { mode: "boolean" }).notNull(),
-	isEmailable: integer("isEmailable", { mode: "boolean" }).notNull(),
-	completedAt: integer("completedAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull()
-});
-
-export const discordMember = sqliteTable("discord_member", {
-	authId: text("authId").primaryKey().notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	discordUserId: text("discordUserId").notNull().unique(),
-	guildId: text("guildId").notNull(),
-	username: text("username").notNull(),
-	avatarHash: text("avatarHash"),
-	verifiedAt: integer("verifiedAt", { mode: "timestamp" }).notNull(),
-	updatedAt: integer("updatedAt", { mode: "timestamp" }).notNull(),
-	lastRoleSyncAt: integer("lastRoleSyncAt", { mode: "timestamp" })
-}, (table) => ({
-	discord_member_discordUserId_idx: index("discord_member_discordUserId_idx").on(table.discordUserId),
-	discord_member_guildId_idx: index("discord_member_guildId_idx").on(table.guildId),
-	discord_member_updatedAt_idx: index("discord_member_updatedAt_idx").on(table.updatedAt)
-}));
-
-export const discordRoleSyncAttempt = sqliteTable("discord_roleSyncAttempt", {
-	id: text("id").primaryKey().notNull(),
-	authId: text("authId").notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	discordUserId: text("discordUserId").notNull(),
-	guildId: text("guildId").notNull(),
-	status: text("status").notNull(),
-	roleIds: text("roleIds", { mode: "json" }).notNull().default([]),
-	roleNames: text("roleNames", { mode: "json" }).notNull().default([]),
-	error: text("error"),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	discord_roleSyncAttempt_authId_idx: index("discord_roleSyncAttempt_authId_idx").on(table.authId),
-	discord_roleSyncAttempt_discordUserId_idx: index("discord_roleSyncAttempt_discordUserId_idx").on(table.discordUserId),
-	discord_roleSyncAttempt_status_idx: index("discord_roleSyncAttempt_status_idx").on(table.status),
-	discord_roleSyncAttempt_createdAt_idx: index("discord_roleSyncAttempt_createdAt_idx").on(table.createdAt)
-}));
-
-export const discordVerification = sqliteTable("discord_verification", {
-	code: text("code").primaryKey().notNull(),
-	discordUserId: text("discordUserId").notNull(),
-	guildId: text("guildId").notNull(),
-	username: text("username").notNull(),
-	avatarHash: text("avatarHash"),
-	authId: text("authId").references(() => coreUser.authId, { onDelete: "set null" }),
-	status: text("status").notNull().default("pending"),
-	expiresAt: integer("expiresAt", { mode: "timestamp" }).notNull(),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull(),
-	acceptedAt: integer("acceptedAt", { mode: "timestamp" })
-}, (table) => ({
-	discord_verification_discordUserId_idx: index("discord_verification_discordUserId_idx").on(table.discordUserId),
-	discord_verification_guildId_idx: index("discord_verification_guildId_idx").on(table.guildId),
-	discord_verification_authId_idx: index("discord_verification_authId_idx").on(table.authId),
-	discord_verification_status_idx: index("discord_verification_status_idx").on(table.status),
-	discord_verification_createdAt_idx: index("discord_verification_createdAt_idx").on(table.createdAt)
-}));
-
-export const teamsTeam = sqliteTable("teams_team", {
-	id: text("id").primaryKey().notNull(),
-	name: text("name").notNull(),
-	tag: text("tag").notNull().unique(),
-	ownerAuthId: text("ownerAuthId").notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	teams_team_tag_idx: index("teams_team_tag_idx").on(table.tag),
-	teams_team_ownerAuthId_idx: index("teams_team_ownerAuthId_idx").on(table.ownerAuthId)
-}));
-
-export const teamsInvite = sqliteTable("teams_invite", {
-	id: text("id").primaryKey().notNull(),
-	teamId: text("teamId").notNull().references(() => teamsTeam.id, { onDelete: "cascade" }),
-	inviteeAuthId: text("inviteeAuthId").notNull().references(() => coreUser.authId, { onDelete: "cascade" }),
-	status: text("status").notNull().default("pending"),
-	createdAt: integer("createdAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	teams_invite_teamId_idx: index("teams_invite_teamId_idx").on(table.teamId),
-	teams_invite_inviteeAuthId_idx: index("teams_invite_inviteeAuthId_idx").on(table.inviteeAuthId),
-	teams_invite_teamId_inviteeAuthId_idx: index("teams_invite_teamId_inviteeAuthId_idx").on(table.teamId, table.inviteeAuthId)
-}));
-
-export const teamsMember = sqliteTable("teams_member", {
-	id: text("id").primaryKey().notNull(),
-	teamId: text("teamId").notNull().references(() => teamsTeam.id, { onDelete: "cascade" }),
-	authId: text("authId").notNull().unique().references(() => coreUser.authId, { onDelete: "cascade" }),
-	joinedAt: integer("joinedAt", { mode: "timestamp" }).notNull()
-}, (table) => ({
-	teams_member_teamId_idx: index("teams_member_teamId_idx").on(table.teamId),
-	teams_member_authId_idx: index("teams_member_authId_idx").on(table.authId)
-}));
diff --git a/apps/web/drizzle.config.ts b/apps/web/drizzle.config.ts
deleted file mode 100644
index 527ae2e8..00000000
--- a/apps/web/drizzle.config.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-import { env } from "./env";
-
-export default defineConfig({
-	schema: "./db/schema/**/*.ts",
-	out: "./db/migrations",
-	dialect: "turso",
-	dbCredentials: {
-		url: env.databaseUrl,
-		authToken: env.tursoAuthToken,
-	},
-});
diff --git a/apps/web/env.ts b/apps/web/env.ts
index 0a830898..d31148b4 100644
--- a/apps/web/env.ts
+++ b/apps/web/env.ts
@@ -1,3 +1,5 @@
+type DatabaseDialect = "sqlite" | "libsql" | "mysql" | "postgresql";
+
 type BlobAdapter = "local" | "s3";
 type EmailProvider = "none" | "resend" | "smtp";
 
@@ -8,6 +10,7 @@ type TestWebEnv = {
 	betterAuthSecret: string;
 	betterAuthTrustedOrigins: string[];
 	databaseUrl: string;
+	databaseDialect: DatabaseDialect;
 	tursoAuthToken?: string;
 	blobAdapter: BlobAdapter;
 	localBlobBaseDir: string;
@@ -105,16 +108,6 @@ function assertProductionEnv(env: TestWebEnv): void {
 		);
 	}
 
-	if (env.databaseUrl.startsWith("file:")) {
-		throw new Error(
-			"DATABASE_URL must point to remote libSQL/Turso in production.",
-		);
-	}
-
-	if (!env.tursoAuthToken) {
-		throw new Error("TURSO_AUTH_TOKEN must be set in production.");
-	}
-
 	if (env.blobAdapter !== "s3") {
 		throw new Error("HACKKIT_BLOB_ADAPTER must be s3 in production.");
 	}
@@ -156,6 +149,21 @@ function assertProductionEnv(env: TestWebEnv): void {
 	}
 }
 
+function resolveDatabaseDialect(url: string): DatabaseDialect {
+	const dialect = read("HACKKIT_DATABASE_DIALECT");
+	if (dialect) {
+		if (["sqlite", "libsql", "mysql", "postgresql"].includes(dialect))
+			return dialect as DatabaseDialect;
+		throw new Error(
+			"HACKKIT_DATABASE_DIALECT must be sqlite, libsql, mysql, or postgresql.",
+		);
+	}
+	if (/^postgres(ql)?:/.test(url)) return "postgresql";
+	if (url.startsWith("mysql:")) return "mysql";
+	if (/^(libsql|https?):/.test(url)) return "libsql";
+	return "sqlite";
+}
+
 export function resolveTestWebEnv(): TestWebEnv {
 	const nodeEnv = resolveNodeEnv();
 	const appUrl =
@@ -166,6 +174,7 @@ export function resolveTestWebEnv(): TestWebEnv {
 	const blobAdapter = resolveBlobAdapter(nodeEnv);
 	const emailProvider = resolveEmailProvider();
 
+	const databaseUrl = read("DATABASE_URL") ?? "file:.data/web.db";
 	const env: TestWebEnv = {
 		nodeEnv,
 		appUrl,
@@ -174,7 +183,8 @@ export function resolveTestWebEnv(): TestWebEnv {
 			read("BETTER_AUTH_SECRET") ??
 			"web-development-secret-change-me-please",
 		betterAuthTrustedOrigins: readList("BETTER_AUTH_TRUSTED_ORIGINS"),
-		databaseUrl: read("DATABASE_URL") ?? "file:.data/web.db",
+		databaseUrl,
+		databaseDialect: resolveDatabaseDialect(databaseUrl),
 		tursoAuthToken: read("TURSO_AUTH_TOKEN"),
 		blobAdapter,
 		localBlobBaseDir:
diff --git a/apps/web/hackkit.config.ts b/apps/web/hackkit.config.ts
index 12396061..457c0a12 100644
--- a/apps/web/hackkit.config.ts
+++ b/apps/web/hackkit.config.ts
@@ -1,6 +1,7 @@
 import { defineHackkitConfig } from "@hackkit/config";
 import { CorePermission, type PermissionKey } from "@hackkit/core";
-import { createDrizzleLibsqlAdapter } from "@hackkit/db-drizzle/libsql";
+import { databaseOptions } from "./lib/database-config";
+import { authOptions } from "./lib/auth-options";
 import {
 	createResendEmailProvider,
 	createSmtpEmailProvider,
@@ -13,7 +14,6 @@ import {
 } from "@hackkit/plugin-discord";
 import { teamsPlugin, TeamsPermission } from "@hackkit/plugin-teams";
 import { env } from "./env";
-import { getDb } from "./lib/db";
 
 const participantPermissions = [] as PermissionKey[];
 
@@ -140,7 +140,8 @@ function createDiscordRoleSyncProvider() {
 }
 
 export default defineHackkitConfig({
-	database: createDrizzleLibsqlAdapter(getDb),
+	database: databaseOptions,
+	auth: authOptions,
 	defaultCompetitorRoleId: "core.participant",
 	groups,
 	seedRoles: [
@@ -176,7 +177,7 @@ export default defineHackkitConfig({
 	},
 	plugins: [
 		teamsPlugin(),
-		discordPlugin({
+		discordPlugin(() => ({
 			guildId: env.discordGuildId,
 			verificationBaseUrl: env.discordVerificationBaseUrl,
 			participantRole: {
@@ -184,14 +185,14 @@ export default defineHackkitConfig({
 				name: env.discordParticipantRoleName,
 			},
 			roleSyncProvider: createDiscordRoleSyncProvider(),
-		}),
-		emailNotificationsPlugin({
+		})),
+		emailNotificationsPlugin(() => ({
 			provider: createEmailProvider(),
 			from: env.emailFrom ?? "HackKit <notifications@example.com>",
 			replyTo: env.emailReplyTo,
 			appName: "HackKit",
 			baseUrl: env.appUrl,
-		}),
+		})),
 	],
 	userDataOptions: {
 		shirtSize: shirtSizeOptions,
diff --git a/apps/web/lib/auth-options.ts b/apps/web/lib/auth-options.ts
new file mode 100644
index 00000000..401ae1bd
--- /dev/null
+++ b/apps/web/lib/auth-options.ts
@@ -0,0 +1,29 @@
+import type { HackKitAuthOptions } from "@hackkit/core";
+import { env } from "../env";
+
+const socialProviders = {
+	...(env.githubClientId && env.githubClientSecret
+		? {
+				github: {
+					clientId: env.githubClientId,
+					clientSecret: env.githubClientSecret,
+				},
+			}
+		: {}),
+	...(env.googleClientId && env.googleClientSecret
+		? {
+				google: {
+					clientId: env.googleClientId,
+					clientSecret: env.googleClientSecret,
+				},
+			}
+		: {}),
+};
+
+export const authOptions = {
+	baseURL: env.betterAuthUrl,
+	secret: env.betterAuthSecret,
+	trustedOrigins: env.betterAuthTrustedOrigins,
+	emailAndPassword: { enabled: true },
+	socialProviders,
+} satisfies HackKitAuthOptions;
diff --git a/apps/web/lib/auth.ts b/apps/web/lib/auth.ts
index 53fd18a7..66b0565a 100644
--- a/apps/web/lib/auth.ts
+++ b/apps/web/lib/auth.ts
@@ -1,51 +1,11 @@
 import "server-only";
+import { headers } from "next/headers";
+import { getCoreRuntime } from "./runtime";
 
-import { betterAuth } from "better-auth";
-import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { nextCookies } from "better-auth/next-js";
-import { toBetterAuthLogger } from "@hackkit/auth-better-auth";
-import { getAuthSession as getAuthSessionFromAuth } from "@hackkit/auth-better-auth/session";
-import { getDb } from "./db";
-import { getAppLogger } from "./logger";
-import { env } from "../env";
-import { account, session, user, verification } from "../db/schema/auth";
-
-const socialProviders = {
-	...(env.githubClientId && env.githubClientSecret
-		? {
-				github: {
-					clientId: env.githubClientId,
-					clientSecret: env.githubClientSecret,
-				},
-			}
-		: {}),
-	...(env.googleClientId && env.googleClientSecret
-		? {
-				google: {
-					clientId: env.googleClientId,
-					clientSecret: env.googleClientSecret,
-				},
-			}
-		: {}),
-};
-
-export const auth = betterAuth({
-	baseURL: env.betterAuthUrl,
-	secret: env.betterAuthSecret,
-	trustedOrigins: env.betterAuthTrustedOrigins,
-	database: drizzleAdapter(getDb(), {
-		provider: "sqlite",
-		schema: { user, session, account, verification },
-		camelCase: true,
-	}),
-	emailAndPassword: {
-		enabled: true,
-	},
-	socialProviders,
-	plugins: [nextCookies()],
-	logger: toBetterAuthLogger(getAppLogger()),
-});
+export async function getAuth() {
+	return (await getCoreRuntime()).auth;
+}
 
 export async function getAuthSession() {
-	return getAuthSessionFromAuth(auth);
+	return (await getAuth()).api.getSession({ headers: await headers() });
 }
diff --git a/apps/web/lib/database-config.ts b/apps/web/lib/database-config.ts
new file mode 100644
index 00000000..ddecb4c3
--- /dev/null
+++ b/apps/web/lib/database-config.ts
@@ -0,0 +1,74 @@
+import { resolve } from "node:path";
+import type { HackKitDatabaseOptions } from "@hackkit/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { LibSqlDriver } from "@mikro-orm/libsql";
+import { MySqlDriver } from "@mikro-orm/mysql";
+import { PostgreSqlDriver } from "@mikro-orm/postgresql";
+import { env } from "../env";
+
+// Next and the application's database scripts run from the application directory.
+const appDirectory = process.cwd();
+const migrations = {
+	path: resolve(
+		appDirectory,
+		"db/migrations",
+		env.databaseDialect === "libsql" ? "sqlite" : env.databaseDialect,
+	),
+	emit: "ts" as const,
+	snapshot: true,
+	snapshotName: ".snapshot",
+	snapshotOnMigrate: false,
+};
+
+function resolveDatabaseOptions(): HackKitDatabaseOptions {
+	switch (env.databaseDialect) {
+		case "sqlite":
+			if (
+				/^[a-z][a-z\d+.-]*:/i.test(env.databaseUrl) &&
+				!env.databaseUrl.startsWith("file:") &&
+				env.databaseUrl !== ":memory:"
+			) {
+				throw new Error(
+					"SQLite DATABASE_URL must be a local file path or :memory:.",
+				);
+			}
+			return {
+				driver: SqliteDriver,
+				dbName:
+					env.databaseUrl === ":memory:"
+						? ":memory:"
+						: resolve(
+								appDirectory,
+								env.databaseUrl.replace(/^file:/, ""),
+							),
+				migrations,
+			};
+		case "libsql":
+			return {
+				driver: LibSqlDriver,
+				dbName: env.databaseUrl,
+				password: env.tursoAuthToken,
+				migrations,
+			};
+		case "mysql":
+			return {
+				driver: MySqlDriver,
+				clientUrl: env.databaseUrl,
+				// MySQL DDL commits implicitly. A failed migration can leave
+				// partial schema changes even when its history entry is absent.
+				migrations: {
+					...migrations,
+					transactional: false,
+					allOrNothing: false,
+				},
+			};
+		case "postgresql":
+			return {
+				driver: PostgreSqlDriver,
+				clientUrl: env.databaseUrl,
+				migrations,
+			};
+	}
+}
+
+export const databaseOptions = resolveDatabaseOptions();
diff --git a/apps/web/lib/db.ts b/apps/web/lib/db.ts
deleted file mode 100644
index b752fa0d..00000000
--- a/apps/web/lib/db.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import { createClient } from "@libsql/client";
-import { drizzle } from "drizzle-orm/libsql";
-import { env } from "../env";
-
-let database: ReturnType<typeof drizzle> | undefined;
-
-export function getDb() {
-	if (database) return database;
-	const client = createClient({
-		url: env.databaseUrl,
-		authToken: env.tursoAuthToken,
-	});
-	database = drizzle(client);
-	return database;
-}
diff --git a/apps/web/lib/hackkit-ui-routes.ts b/apps/web/lib/hackkit-ui-routes.ts
index 8cfe37df..afca1c43 100644
--- a/apps/web/lib/hackkit-ui-routes.ts
+++ b/apps/web/lib/hackkit-ui-routes.ts
@@ -1,7 +1,4 @@
-import {
-	DEFAULT_HACKKIT_UI_ROUTES,
-	type HackKitUIRoutes,
-} from "@hackkit/ui";
+import { DEFAULT_HACKKIT_UI_ROUTES, type HackKitUIRoutes } from "@hackkit/ui";
 
 /**
  * Single place for HackKit UI route policy in this HackKit Web App.
diff --git a/apps/web/lib/onboarding.ts b/apps/web/lib/onboarding.ts
index cc83faaf..d876e88f 100644
--- a/apps/web/lib/onboarding.ts
+++ b/apps/web/lib/onboarding.ts
@@ -14,8 +14,8 @@ async function loadCompetitorOnboardingInput(currentPath: string) {
 	const hackkit = await getHackkit();
 	const runtime = await getRuntime();
 	const [userData, hacker, requireApproval] = await Promise.all([
-		hackkit.userData.getUserData(user.authId),
-		hackkit.hackers.getHacker(user.authId),
+		hackkit.userData.getUserData(user.id),
+		hackkit.hackers.getHacker(user.id),
 		runtime.getSettingValue(CoreSetting.RequireApproval),
 	]);
 	return {
@@ -48,5 +48,7 @@ export async function getCompetitorOnboardingState(currentPath: string) {
 }
 
 export async function getRequireApproval(): Promise<boolean> {
-	return Boolean(await (await getRuntime()).getSettingValue(CoreSetting.RequireApproval));
+	return Boolean(
+		await (await getRuntime()).getSettingValue(CoreSetting.RequireApproval),
+	);
 }
diff --git a/apps/web/lib/plugin-navigation.ts b/apps/web/lib/plugin-navigation.ts
new file mode 100644
index 00000000..4d32b273
--- /dev/null
+++ b/apps/web/lib/plugin-navigation.ts
@@ -0,0 +1,20 @@
+import "server-only";
+import type { PublicShellLink } from "@hackkit/ui";
+import { appConfig } from "./app-config";
+
+// Route ownership belongs to the application, including custom navigation.
+const pluginRoutes: Record<string, string> = {
+	"/teams": "teams",
+	"/invites": "teams",
+	"/discord": "discord",
+};
+
+export function getEnabledSiteLinks(links: readonly PublicShellLink[]) {
+	return links.filter((link) => {
+		const pluginId = pluginRoutes[link.href];
+		if (!pluginId) return true;
+		return appConfig.plugins.some(
+			(plugin) => plugin.id === pluginId && plugin.enabled !== false,
+		);
+	});
+}
diff --git a/apps/web/lib/public-site-config.ts b/apps/web/lib/public-site-config.ts
index f463ad38..b4f308c2 100644
--- a/apps/web/lib/public-site-config.ts
+++ b/apps/web/lib/public-site-config.ts
@@ -25,7 +25,10 @@ export type PublicSiteConfig = {
 		public: PublicShellLink[];
 		participant: PublicShellLink[];
 	};
-	landing: Omit<PublicLandingPageProps, "primaryAction" | "secondaryAction"> & {
+	landing: Omit<
+		PublicLandingPageProps,
+		"primaryAction" | "secondaryAction"
+	> & {
 		primaryAction: PublicShellLink;
 		secondaryAction: PublicShellLink;
 		signedInAction: PublicShellLink;
@@ -131,7 +134,8 @@ export const publicSiteConfig = {
 			{
 				label: "Organizer support",
 				href: "mailto:organizers@example.com",
-				description: "Questions about registration, approvals, travel, or event logistics.",
+				description:
+					"Questions about registration, approvals, travel, or event logistics.",
 			},
 			{
 				label: "Report a bug",
@@ -149,7 +153,8 @@ export const publicSiteConfig = {
 			{
 				label: "Emergency contact",
 				href: "mailto:organizers@example.com?subject=Urgent%20event%20support",
-				description: "Use for urgent safety or day-of operations issues.",
+				description:
+					"Use for urgent safety or day-of operations issues.",
 			},
 		],
 		resources: [
@@ -169,7 +174,8 @@ export const publicSiteConfig = {
 			{
 				label: "Schedule",
 				href: "/schedule",
-				description: "See public events and open detailed schedule pages.",
+				description:
+					"See public events and open detailed schedule pages.",
 			},
 			{
 				label: "Event pass",
@@ -179,7 +185,8 @@ export const publicSiteConfig = {
 			{
 				label: "Teams",
 				href: "/teams",
-				description: "Manage team participation through the existing team route.",
+				description:
+					"Manage team participation through the existing team route.",
 			},
 			{
 				label: "Invites",
@@ -189,12 +196,14 @@ export const publicSiteConfig = {
 			{
 				label: "Settings",
 				href: "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/settings",
-				description: "Update profile details and registration information.",
+				description:
+					"Update profile details and registration information.",
 			},
 			{
 				label: "Survival guide",
 				href: "/help",
-				description: "Find help contacts, logistics links, and Discord instructions.",
+				description:
+					"Find help contacts, logistics links, and Discord instructions.",
 			},
 			{
 				label: "Discord",
@@ -205,7 +214,8 @@ export const publicSiteConfig = {
 			{
 				label: "Admin console",
 				href: "/admin",
-				description: "Organizer tools are available to authorized users.",
+				description:
+					"Organizer tools are available to authorized users.",
 			},
 		],
 	},
diff --git a/apps/web/lib/runtime.ts b/apps/web/lib/runtime.ts
index cd9d12c8..7391a512 100644
--- a/apps/web/lib/runtime.ts
+++ b/apps/web/lib/runtime.ts
@@ -1,23 +1,19 @@
 import "server-only";
 
-import { betterAuthAdapter } from "@hackkit/auth-better-auth";
 import {
 	createHackkitRuntimeFromConfig,
 	setHackkitRuntime,
 } from "@hackkit/next";
-import { auth } from "./auth";
-import { getAppLogger } from "./logger";
 import { appConfig } from "./app-config";
 
-const runtimePromise = createHackkitRuntimeFromConfig({
+const host = createHackkitRuntimeFromConfig({
 	config: appConfig,
-	auth: betterAuthAdapter({ auth, logger: getAppLogger() }),
 });
 
-setHackkitRuntime(runtimePromise);
+setHackkitRuntime(host.getRuntime);
 
 export async function getRuntime() {
-	return runtimePromise;
+	return host.getRuntime();
 }
 
 export async function getCurrentUser() {
@@ -31,3 +27,7 @@ export async function getHackkit() {
 export async function getPageGuards() {
 	return (await getRuntime()).pageGuards;
 }
+
+export function getCoreRuntime() {
+	return host.core;
+}
diff --git a/apps/web/lib/upload-profile-photo.ts b/apps/web/lib/upload-profile-photo.ts
index f6ebc1bf..2c6b14b8 100644
--- a/apps/web/lib/upload-profile-photo.ts
+++ b/apps/web/lib/upload-profile-photo.ts
@@ -12,10 +12,11 @@ export async function uploadProfilePhotoFile(file: File): Promise<string> {
 		throw new Error("Could not prepare profile photo upload.");
 	}
 
-	const { uploadUrl, storedFileReference } = (await registerResponse.json()) as {
-		uploadUrl: string;
-		storedFileReference: string;
-	};
+	const { uploadUrl, storedFileReference } =
+		(await registerResponse.json()) as {
+			uploadUrl: string;
+			storedFileReference: string;
+		};
 
 	const uploadResponse = await fetch(uploadUrl, {
 		method: "PUT",
diff --git a/apps/web/middleware.ts b/apps/web/middleware.ts
index b6216101..c5e2110a 100644
--- a/apps/web/middleware.ts
+++ b/apps/web/middleware.ts
@@ -7,12 +7,7 @@ const PUBLIC_ROUTE_PATHS = new Set([
 	"/registration-closed",
 	"/suspended",
 ]);
-const PUBLIC_ROUTE_PREFIXES = [
-	"/api/",
-	"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/i/approval",
-	"/schedule",
-	"/user/",
-];
+const PUBLIC_ROUTE_PREFIXES = ["/api/", "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/i/approval", "/schedule", "/user/"];
 const PROTECTED_ROUTE_PREFIXES = [
 	"/admin",
 	"/dashboard",
@@ -62,7 +57,10 @@ export function middleware(request: NextRequest) {
 
 	if (!hasSession && isProtectedRoute(pathname) && !isPublicRoute(pathname)) {
 		const signInUrl = new URL("/sign-in", request.url);
-		signInUrl.searchParams.set("next", `${pathname}${request.nextUrl.search}`);
+		signInUrl.searchParams.set(
+			"next",
+			`${pathname}${request.nextUrl.search}`,
+		);
 		return NextResponse.redirect(signInUrl);
 	}
 
diff --git a/apps/web/next.config.mjs b/apps/web/next.config.mjs
index 11cbdcd1..62740dc9 100644
--- a/apps/web/next.config.mjs
+++ b/apps/web/next.config.mjs
@@ -1,10 +1,22 @@
 /** @type {import('next').NextConfig} */
 const nextConfig = {
+	experimental: {
+		// SQL drivers load native modules and must execute through Node.
+		serverComponentsExternalPackages: [
+			"@hackkit/core",
+			"@mikro-orm/core",
+			"@mikro-orm/sql",
+			"@mikro-orm/sqlite",
+			"@mikro-orm/libsql",
+			"@mikro-orm/mysql",
+			"@mikro-orm/postgresql",
+			"@mikro-orm/migrations",
+			"@a77ay/better-auth-mikro-orm",
+		],
+	},
 	transpilePackages: [
-		"@hackkit/core",
 		"@hackkit/ui",
 		"@hackkit/next",
-		"@hackkit/auth-better-auth",
 		"@hackkit/plugin-teams",
 		"@hackkit/plugin-discord",
 	],
diff --git a/apps/web/package.json b/apps/web/package.json
index 5e07e82d..aa3dd8bb 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -5,13 +5,11 @@
   "type": "module",
   "scripts": {
     "plugin:sync": "hackkit plugin sync",
-    "auth:schema": "auth generate --config better-auth.config.ts --output db/schema/auth.ts --yes",
-    "schema:generate": "hackkit db schema generate --output db/schema/hackkit.ts",
-    "db:generate": "drizzle-kit generate",
-    "db:migrate": "drizzle-kit migrate",
-    "db:seed": "hackkit db seed",
-    "db:reset": "bash scripts/db-reset.sh",
-    "test": "vitest run db/__tests__/database-workflow.test.ts",
+    "db:generate": "node scripts/db.mjs generate",
+    "db:migrate": "node scripts/db.mjs migrate",
+    "db:seed": "node scripts/db.mjs seed",
+    "db:reset": "node scripts/db.mjs reset",
+    "test": "vitest run db/__tests__/database-workflow.test.ts db/__tests__/migration-workflow.test.ts",
     "test:db-workflow": "bash scripts/test-db-workflow.sh",
     "sync": "pnpm plugin:sync",
     "predev": "turbo run build --filter=web^...",
@@ -19,39 +17,44 @@
     "build": "next build",
     "verify": "pnpm sync && pnpm typecheck && pnpm build",
     "start": "next start",
-    "db:studio": "drizzle-kit studio",
-    "studio": "pnpm db:studio",
-    "typecheck": "turbo run build --filter=@hackkit/cli && tsc -p tsconfig.json --noEmit"
+    "typecheck": "turbo run build --filter=@hackkit/cli && tsc -p tsconfig.json --noEmit",
+    "test:db-matrix": "vitest run db/__tests__/dialects.test.ts",
+    "test:runtime": "node scripts/test-runtime.mjs",
+    "db:status": "node scripts/db.mjs status",
+    "db:check": "node scripts/db.mjs check",
+    "db:rollback": "node scripts/db.mjs rollback"
   },
   "dependencies": {
-    "@hackkit/auth-better-auth": "workspace:*",
     "@hackkit/blob-local": "workspace:*",
     "@hackkit/blob-s3": "workspace:*",
     "@hackkit/cli": "workspace:*",
     "@hackkit/config": "workspace:*",
     "@hackkit/core": "workspace:*",
-    "@hackkit/db-drizzle": "workspace:*",
     "@hackkit/next": "workspace:*",
     "@hackkit/plugin-discord": "workspace:*",
     "@hackkit/plugin-notifications-email": "workspace:*",
     "@hackkit/plugin-teams": "workspace:*",
     "@hackkit/ui": "workspace:*",
-    "@libsql/client": "^0.14.0",
-    "better-auth": "1.6.11",
-    "drizzle-orm": "^0.45.2",
+    "better-auth": "1.7.6",
     "next": "14.2.35",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "sonner": "^1.5.0",
-    "typescript": "5.5.3"
+    "typescript": "5.9.3",
+    "@mikro-orm/sqlite": "7.2.1",
+    "@mikro-orm/libsql": "7.2.1",
+    "@mikro-orm/mysql": "7.2.1",
+    "@mikro-orm/postgresql": "7.2.1",
+    "@mikro-orm/migrations": "7.2.1",
+    "@mikro-orm/core": "7.2.1",
+    "jiti": "2.4.2",
+    "@next/env": "14.2.35"
   },
   "devDependencies": {
-    "@types/node": "20.14.11",
+    "@types/node": "22.18.6",
     "@types/react": "18.3.3",
     "@types/react-dom": "18.3.0",
     "autoprefixer": "10.4.19",
-    "auth": "1.6.11",
-    "drizzle-kit": "^0.31.4",
     "postcss": "8.4.39",
     "tailwindcss": "3.4.6",
     "tailwindcss-animate": "1.0.7",
diff --git a/apps/web/scripts/database.ts b/apps/web/scripts/database.ts
new file mode 100644
index 00000000..54e692d7
--- /dev/null
+++ b/apps/web/scripts/database.ts
@@ -0,0 +1,146 @@
+import { mkdir } from "node:fs/promises";
+import { dirname } from "node:path";
+import { resolveHackkitConfig, type HackkitConfig } from "@hackkit/config";
+import { createOrmOptions, seedRoles } from "@hackkit/core";
+import { MikroORM } from "@mikro-orm/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { createJiti } from "jiti";
+
+const jiti = createJiti(import.meta.url);
+
+export type DatabaseCommand =
+	| { command: "generate"; name?: string; blank?: boolean }
+	| { command: "status" | "check" | "seed" | "reset" }
+	| { command: "migrate"; to?: string }
+	| { command: "rollback"; to?: string };
+
+/** Runs an explicit database operation. App startup never calls this function. */
+export async function runDatabaseCommand(
+	input: HackkitConfig,
+	request: DatabaseCommand,
+) {
+	const config = resolveHackkitConfig(input);
+	if (request.command === "reset") {
+		if (
+			!["development", "test"].includes(
+				process.env.NODE_ENV ?? "development",
+			)
+		) {
+			throw new Error(
+				"db:reset is only available in development or tests.",
+			);
+		}
+		if (
+			config.database.driver !== SqliteDriver ||
+			!config.database.dbName
+		) {
+			throw new Error("db:reset requires a local SQLite database.");
+		}
+		if (
+			/^[a-z][a-z\d+.-]*:/i.test(config.database.dbName) &&
+			config.database.dbName !== ":memory:"
+		) {
+			throw new Error("db:reset requires a local SQLite path.");
+		}
+	}
+	if (
+		config.database.driver === SqliteDriver &&
+		config.database.dbName !== ":memory:" &&
+		config.database.dbName
+	) {
+		await mkdir(dirname(config.database.dbName), { recursive: true });
+	}
+	const orm = await MikroORM.init({
+		...createOrmOptions(config),
+		dynamicImportProvider: (id) => jiti.import(id),
+	});
+	try {
+		// MikroORM 7 initializes lazily. History operations must establish a
+		// connection first: native getPending can otherwise report all files
+		// as pending when a snapshot exists but the database is unreachable.
+		if (request.command !== "generate") await orm.connect();
+		const migrator = orm.migrator;
+		switch (request.command) {
+			case "generate": {
+				const migration = await migrator.create(
+					undefined,
+					request.blank,
+					false,
+					request.name,
+				);
+				return {
+					command: "generate" as const,
+					migration,
+					// SQLite table rebuilding also contains DROP TABLE. Review the
+					// complete migration; this list is a warning, not an SQL parser.
+					destructiveStatements: migration.diff.up.filter((sql) =>
+						/\bdrop\s+(?:table|column|schema)\b|\btruncate\b/i.test(
+							sql,
+						),
+					),
+				};
+			}
+			case "status":
+			case "check": {
+				// Native migrator history calls ensure its tracking table exists.
+				const executed = await migrator.getExecuted();
+				const pending = await migrator.getPending();
+				if (request.command === "status")
+					return { command: "status" as const, executed, pending };
+				// checkSchema compares entities to the committed snapshot. Separately
+				// compare the live database so a clean snapshot cannot hide drift.
+				const needsMigration = await migrator.checkSchema();
+				const schemaSql = await orm.schema.getUpdateSchemaSQL({
+					wrap: false,
+				});
+				return {
+					command: "check" as const,
+					executed,
+					pending,
+					needsMigration,
+					schemaSql,
+					ok:
+						!needsMigration &&
+						pending.length === 0 &&
+						schemaSql.trim() === "",
+				};
+			}
+			case "migrate":
+				return {
+					command: "migrate" as const,
+					migrations: await migrator.up(
+						request.to ? { to: request.to } : undefined,
+					),
+				};
+			case "rollback":
+				return {
+					command: "rollback" as const,
+					migrations: await migrator.down(
+						request.to
+							? { to: request.to === "0" ? 0 : request.to }
+							: undefined,
+					),
+				};
+			case "reset":
+				await orm.schema.drop({ dropMigrationsTable: true });
+				await migrator.up();
+				return {
+					command: "reset" as const,
+					seed: await seedRoles({
+						em: orm.em.fork(),
+						roles: config.seedRoles,
+					}),
+				};
+			case "seed":
+				return {
+					command: "seed" as const,
+					seed: await seedRoles({
+						em: orm.em.fork(),
+						roles: config.seedRoles,
+					}),
+				};
+		}
+	} finally {
+		await orm.close();
+	}
+}
diff --git a/apps/web/scripts/db-reset.sh b/apps/web/scripts/db-reset.sh
deleted file mode 100755
index bf1904dd..00000000
--- a/apps/web/scripts/db-reset.sh
+++ /dev/null
@@ -1,26 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-DATABASE_URL="${DATABASE_URL:-file:.data/web.db}"
-
-if [[ "$DATABASE_URL" != file:* ]]; then
-	echo "Refusing to reset non-local database: $DATABASE_URL" >&2
-	exit 1
-fi
-
-DATABASE_PATH="${DATABASE_URL#file:}"
-DATABASE_PATH="${DATABASE_PATH%%\?*}"
-if [[ "$DATABASE_PATH" != /* ]]; then
-	DATABASE_PATH="$ROOT/$DATABASE_PATH"
-fi
-
-rm -f "$DATABASE_PATH" "$DATABASE_PATH-wal" "$DATABASE_PATH-shm"
-mkdir -p "$(dirname "$DATABASE_PATH")"
-
-cd "$ROOT"
-
-pnpm db:migrate
-pnpm db:seed
-
-echo "Reset complete: $DATABASE_PATH"
diff --git a/apps/web/scripts/db.mjs b/apps/web/scripts/db.mjs
new file mode 100644
index 00000000..ea42a00a
--- /dev/null
+++ b/apps/web/scripts/db.mjs
@@ -0,0 +1,66 @@
+import { parseArgs } from "node:util";
+import { writeFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { createJiti } from "jiti";
+import nextEnv from "@next/env";
+import { loadHackkitConfig } from "@hackkit/config";
+
+// Match Next's environment loading before evaluating hackkit.config.ts.
+nextEnv.loadEnvConfig(
+	process.cwd(),
+	process.env.NODE_ENV !== "production",
+	console,
+	true,
+);
+const jiti = createJiti(fileURLToPath(import.meta.url));
+const { runDatabaseCommand } = await jiti.import("./database.ts");
+
+try {
+	const { values, positionals } = parseArgs({
+		allowPositionals: true,
+		options: {
+			config: { type: "string", default: "hackkit.config.ts" },
+			output: { type: "string" },
+			name: { type: "string" },
+			blank: { type: "boolean", default: false },
+			to: { type: "string" },
+		},
+	});
+	const [command] = positionals;
+	const commands = [
+		"generate",
+		"status",
+		"check",
+		"migrate",
+		"rollback",
+		"reset",
+		"seed",
+	];
+	if (positionals.length !== 1 || !commands.includes(command)) {
+		throw new Error(`Choose a database command: ${commands.join(", ")}.`);
+	}
+	if ((values.name !== undefined || values.blank) && command !== "generate") {
+		throw new Error("--name and --blank are only supported by generate.");
+	}
+	if (values.to !== undefined && !["migrate", "rollback"].includes(command)) {
+		throw new Error("--to is only supported by migrate and rollback.");
+	}
+	if (values.to !== undefined && !values.to.trim()) {
+		throw new Error("--to requires a migration name (or 0 for rollback).");
+	}
+	const config = await loadHackkitConfig(values.config);
+	const result = await runDatabaseCommand(config, { command, ...values });
+	// Native drivers can write diagnostics to stdout. A separate result file
+	// gives release jobs structured output without parsing their logs.
+	if (values.output) {
+		await writeFile(values.output, `${JSON.stringify(result, null, 2)}\n`);
+	}
+	console.log(JSON.stringify(result, null, 2));
+	if (result.command === "check" && !result.ok) process.exitCode = 1;
+} catch (error) {
+	// Print the operation's error without printing the config or connection URL.
+	console.error(
+		error instanceof Error ? error.message : "Database command failed.",
+	);
+	process.exitCode = 1;
+}
diff --git a/apps/web/scripts/test-db-workflow.sh b/apps/web/scripts/test-db-workflow.sh
index b5d4a243..e464fc62 100644
--- a/apps/web/scripts/test-db-workflow.sh
+++ b/apps/web/scripts/test-db-workflow.sh
@@ -2,22 +2,32 @@
 set -euo pipefail
 
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-TEST_DIR="$ROOT/.data/db-workflow-test"
-
-rm -rf "$TEST_DIR"
-mkdir -p "$TEST_DIR"
+TEST_DIR="$(mktemp -d "${TMPDIR:-/tmp}/hackkit-db-workflow.XXXXXX")"
+export HACKKIT_DATABASE_DIALECT=sqlite
 trap 'rm -rf "$TEST_DIR"' EXIT
 
 cd "$ROOT"
 
-auth_before="$(git hash-object db/schema/auth.ts)"
-hackkit_before="$(git hash-object db/schema/hackkit.ts)"
-
 DATABASE_URL="file:$TEST_DIR/sync-must-not-connect.db" pnpm sync
-
 test ! -e "$TEST_DIR/sync-must-not-connect.db"
-test "$auth_before" = "$(git hash-object db/schema/auth.ts)"
-test "$hackkit_before" = "$(git hash-object db/schema/hackkit.ts)"
+
+# Exercise the actual Node entry point, including check's nonzero exit code.
+DATABASE_URL="file:$TEST_DIR/selected.db" node scripts/db.mjs status >"$TEST_DIR/status.json"
+if DATABASE_URL="file:$TEST_DIR/selected.db" node scripts/db.mjs check >"$TEST_DIR/check.json"; then
+	echo "db:check accepted an unmigrated database" >&2
+	exit 1
+fi
+node --input-type=module -e '
+  import assert from "node:assert/strict";
+  import { readFileSync } from "node:fs";
+  const status = JSON.parse(readFileSync(process.argv[1], "utf8"));
+  const check = JSON.parse(readFileSync(process.argv[2], "utf8"));
+  assert.equal(status.executed.length, 0);
+  assert.equal(status.pending.length, 1);
+  assert.equal(check.ok, false);
+  assert.equal(check.needsMigration, false);
+  assert.ok(check.schemaSql.includes("core_user"));
+' "$TEST_DIR/status.json" "$TEST_DIR/check.json"
 
 if DATABASE_URL="libsql://remote.example.com" pnpm db:reset >/dev/null 2>&1; then
 	echo "db:reset accepted a remote URL" >&2
@@ -26,27 +36,19 @@ fi
 
 printf 'leave me alone\n' >"$TEST_DIR/untouched.db"
 DATABASE_URL="file:$TEST_DIR/selected.db" pnpm db:reset
+DATABASE_URL="file:$TEST_DIR/selected.db" node scripts/db.mjs check >"$TEST_DIR/checked.json"
 
 test -f "$TEST_DIR/selected.db"
 test "$(cat "$TEST_DIR/untouched.db")" = "leave me alone"
 
 node --input-type=module -e '
-	import { createClient } from "@libsql/client";
-	const client = createClient({ url: process.argv[1] });
-	const result = await client.execute({
-		sql: "SELECT name FROM sqlite_master WHERE type = ? AND name IN (?, ?)",
-		args: ["table", "core_user", "user"],
-	});
-	const roles = await client.execute({
-		sql: "SELECT id FROM core_role ORDER BY id",
-		args: [],
-	});
-	client.close();
-	if (result.rows.length !== 2) process.exit(1);
-	if (
-		JSON.stringify(roles.rows.map((row) => row.id)) !==
-		JSON.stringify(["core.owner", "core.participant"])
-	) process.exit(1);
-' "file:$TEST_DIR/selected.db"
+  import { MikroORM, SqliteDriver } from "@mikro-orm/sqlite";
+  import { coreModels, authEntities } from "@hackkit/core";
+  const orm = await MikroORM.init({driver: SqliteDriver, dbName: process.argv[1], entities: [...Object.values(coreModels), ...authEntities]});
+  try {
+    const roles = await orm.em.fork().find(coreModels.role, {}, {orderBy: {id: "asc"}});
+    if (JSON.stringify(roles.map(role => role.id)) !== JSON.stringify(["core.owner", "core.participant"])) process.exitCode = 1;
+  } finally { await orm.close(); }
+' "$TEST_DIR/selected.db"
 
 echo "Database workflow isolation checks passed."
diff --git a/apps/web/scripts/test-runtime.mjs b/apps/web/scripts/test-runtime.mjs
new file mode 100644
index 00000000..90566660
--- /dev/null
+++ b/apps/web/scripts/test-runtime.mjs
@@ -0,0 +1,136 @@
+import assert from "node:assert/strict";
+import { spawn } from "node:child_process";
+import { once } from "node:events";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { setTimeout } from "node:timers/promises";
+
+// Exercise the production build against a new disposable database on every run.
+const directory = await mkdtemp(join(tmpdir(), "hackkit-http-"));
+const port = 33017;
+const baseURL = `http://127.0.0.1:${port}`;
+const env = {
+	PATH: process.env.PATH,
+	NODE_ENV: "production",
+	NEXT_TELEMETRY_DISABLED: "1",
+	DATABASE_URL: `file:${join(directory, "web.db")}`,
+	HACKKIT_DATABASE_DIALECT: "sqlite",
+	NEXT_PUBLIC_APP_URL: baseURL,
+	BETTER_AUTH_URL: baseURL,
+	BETTER_AUTH_SECRET: "isolated-http-test-secret-with-at-least-32-characters",
+	HACKKIT_EMAIL_PROVIDER: "none",
+	HACKKIT_BLOB_ADAPTER: "s3",
+	HACKKIT_S3_BUCKET: "test",
+	HACKKIT_S3_REGION: "auto",
+	HACKKIT_S3_ENDPOINT: "https://example.invalid",
+	HACKKIT_S3_ACCESS_KEY_ID: "test",
+	HACKKIT_S3_SECRET_ACCESS_KEY: "test",
+	DISCORD_GUILD_ID: "test",
+	DISCORD_BOT_API_URL: "https://example.invalid",
+	DISCORD_INTERNAL_AUTH_KEY: "test",
+	DISCORD_PARTICIPANT_ROLE_ID: "test",
+};
+
+async function run(...args) {
+	const command = spawn(process.execPath, args, { env, stdio: "inherit" });
+	const [code] = await once(command, "exit");
+	assert.equal(code, 0, `Command failed: ${args.join(" ")}`);
+}
+
+let server;
+try {
+	const cli = join(
+		process.cwd(),
+		"node_modules/@hackkit/cli/bin/hackkit.mjs",
+	);
+	await run(cli, "db", "migrate");
+	await run(cli, "db", "seed");
+	server = spawn(
+		process.execPath,
+		[
+			fileURLToPath(import.meta.resolve("next/dist/bin/next")),
+			"start",
+			"-p",
+			String(port),
+			"-H",
+			"127.0.0.1",
+		],
+		{ env, stdio: "inherit" },
+	);
+	let ready = false;
+	for (let attempt = 0; attempt < 40; attempt++) {
+		if (server.exitCode !== null)
+			throw new Error("Next exited before becoming ready.");
+		try {
+			const response = await fetch(`${baseURL}/api/auth/get-session`);
+			ready = response.ok;
+		} catch {
+			/* Server may still be starting. */
+		}
+		if (ready) break;
+		await setTimeout(250);
+	}
+	assert.ok(ready, "Next did not become ready.");
+
+	const accounts = [];
+	for (const name of ["First", "Second"]) {
+		const response = await fetch(`${baseURL}/api/auth/sign-up/email`, {
+			method: "POST",
+			headers: { "content-type": "application/json", origin: baseURL },
+			body: JSON.stringify({
+				name: `HTTP ${name}`,
+				email: `${name.toLowerCase()}@example.com`,
+				password: "a sufficiently long password",
+			}),
+		});
+		assert.equal(response.status, 200);
+		const body = await response.json();
+		const cookie = response.headers
+			.getSetCookie()
+			.map((value) => value.split(";")[0])
+			.join("; ");
+		assert.ok(cookie.includes("better-auth.session_token="));
+		accounts.push({ id: body.user.id, cookie });
+	}
+
+	for (const account of accounts) {
+		const headers = { cookie: account.cookie };
+		const session = await fetch(`${baseURL}/api/auth/get-session`, {
+			headers,
+		}).then((response) => response.json());
+		assert.equal(session.user.id, account.id);
+		const page = await fetch(`${baseURL}/onboarding/hacktag`, {
+			headers,
+			redirect: "manual",
+		});
+		assert.equal(page.status, 200);
+		assert.ok(!(await page.text()).includes("data-next-error-message"));
+		const forbidden = await fetch(`${baseURL}/api/admin/export`, {
+			headers,
+		});
+		assert.equal(forbidden.status, 403);
+	}
+	assert.equal(
+		await fetch(`${baseURL}/api/auth/get-session`).then((response) =>
+			response.json(),
+		),
+		null,
+	);
+	assert.equal(
+		(await fetch(`${baseURL}/dashboard`, { redirect: "manual" })).status,
+		307,
+	);
+	assert.equal((await fetch(`${baseURL}/api/admin/export`)).status, 401);
+	console.log(
+		"Passed: HTTP signup, isolated sessions, onboarding rendering, permission denials, and anonymous redirects.",
+	);
+} finally {
+	if (server && server.exitCode === null) {
+		const exited = once(server, "exit");
+		server.kill("SIGTERM");
+		await exited;
+	}
+	await rm(directory, { recursive: true, force: true });
+}
diff --git a/docs/adr/0001-hackkit-core-kernel-and-database-adapter.md b/docs/adr/0001-hackkit-core-kernel-and-database-adapter.md
index df45e578..f42b8f4e 100644
--- a/docs/adr/0001-hackkit-core-kernel-and-database-adapter.md
+++ b/docs/adr/0001-hackkit-core-kernel-and-database-adapter.md
@@ -1,5 +1,7 @@
 # Define HackKit Core as a framework-independent kernel with a generic typed database adapter
 
+> Superseded: [ADR 0013](0013-mikroorm-and-core-auth.md) adopts native MikroORM entities and queries, Core-owned Better Auth, and explicit MikroORM migration commands. The historical decision below no longer governs persistence. Domain boundaries and app ownership of reviewed migrations remain.
+
 HackKit Core is the framework-independent kernel for hackathon domain behavior, not the fully built web app or runtime framework. Starter applications import HackKit packages rather than copying core source, while Core exposes module-shaped APIs around Users, User Data, Hackers, Roles, Registration, and future modules. Core accepts a high-level generic `database` adapter whose operations use typed namespaced model descriptors; Core owns its canonical model shapes, and plugins may contribute additional namespaced models, namespaced permissions, and optional API methods through a Better Auth-style `plugins` array passed to `createHackkit`. Public Core APIs enforce authorization internally using actor Auth IDs, including `core.admin` for permission bypass while respecting role hierarchy and `core.super_admin` for full hierarchy bypass.
 
 Core will be added alongside the existing apps and packages during the rewrite; existing packages and apps remain unchanged until an explicit migration step.
diff --git a/docs/adr/0002-core-storage-schema-and-adapter-factories.md b/docs/adr/0002-core-storage-schema-and-adapter-factories.md
index f7e5c7ff..7ec6dbd2 100644
--- a/docs/adr/0002-core-storage-schema-and-adapter-factories.md
+++ b/docs/adr/0002-core-storage-schema-and-adapter-factories.md
@@ -1,5 +1,7 @@
 # Use Core-owned Storage Schema and adapter factories for plugin-aware persistence
 
+> Superseded: [ADR 0013](0013-mikroorm-and-core-auth.md) adopts native MikroORM entities and queries, Core-owned Better Auth, and explicit MikroORM migration commands. The historical decision below no longer governs persistence. Domain boundaries and app ownership of reviewed migrations remain.
+
 HackKit Core owns an adapter-neutral Storage Schema DSL for persistent model descriptors. Core model descriptors combine typed model identity with storage schema, and public record types such as User, Role, and Hacker are inferred from those descriptors. Plugins contribute storage schema using the same adapter-neutral model descriptors rather than dialect-specific database schemas.
 
 HackKit Core merges its base Storage Schema with plugin-provided Storage Schema and initializes database adapter factories with the merged registry. Applications configure plugins once through `createHackkit({ plugins: [...] })`; they do not pass plugin configuration separately to each adapter. Database adapters compile or interpret the merged Storage Schema for their concrete backend. The Drizzle adapter will target SQLite/libSQL first through `@hackkit/db-drizzle/sqlite`, while preserving room for future dialect-specific entrypoints.
diff --git a/docs/adr/0007-event-pass-qr-in-hackkit-ui.md b/docs/adr/0007-event-pass-qr-in-hackkit-ui.md
index 3584aa4e..097eda17 100644
--- a/docs/adr/0007-event-pass-qr-in-hackkit-ui.md
+++ b/docs/adr/0007-event-pass-qr-in-hackkit-ui.md
@@ -8,13 +8,13 @@ Early Core implementations coupled QR validation to `users.checkIn` and `events.
 
 ## Decision
 
-- Remove QR-specific fields and validation from Core User/Event APIs.
-- Implement Event Pass QR helpers in `@hackkit/ui`.
-- Parse and validate raw QR in `@hackkit/next` mutations (`previewEventPassQr`, `checkInUser`, `recordEventScan`).
-- Keep scanner UX in HackKit UI with client-only scan state; confirm sends `rawQr` to server actions.
+-   Remove QR-specific fields and validation from Core User/Event APIs.
+-   Implement Event Pass QR helpers in `@hackkit/ui`.
+-   Parse and validate raw QR in `@hackkit/next` mutations (`previewEventPassQr`, `checkInUser`, `recordEventScan`).
+-   Keep scanner UX in HackKit UI with client-only scan state; confirm sends `rawQr` to server actions.
 
 ## Consequences
 
-- Core stays framework- and presentation-free; alternate check-in UIs can call the same Core APIs.
-- Apps configure Event Pass QR TTL when wiring `HackKitUIProvider` and mutations, not via `createHackkit`.
-- Security depends on server-side QR validation in mutations, not URL query parameters.
+-   Core stays framework- and presentation-free; alternate check-in UIs can call the same Core APIs.
+-   Apps configure Event Pass QR TTL when wiring `HackKitUIProvider` and mutations, not via `createHackkit`.
+-   Security depends on server-side QR validation in mutations, not URL query parameters.
diff --git a/docs/adr/0008-adapter-owned-schema-generation-and-migrations.md b/docs/adr/0008-adapter-owned-schema-generation-and-migrations.md
index a2991516..83eb0ee0 100644
--- a/docs/adr/0008-adapter-owned-schema-generation-and-migrations.md
+++ b/docs/adr/0008-adapter-owned-schema-generation-and-migrations.md
@@ -1,5 +1,7 @@
 # Let database adapters generate native schema and applications own migrations
 
+> Superseded: [ADR 0013](0013-mikroorm-and-core-auth.md) adopts native MikroORM entities and queries, Core-owned Better Auth, and explicit MikroORM migration commands. The historical decision below no longer governs persistence. Domain boundaries and app ownership of reviewed migrations remain.
+
 HackKit Core owns an adapter-neutral Storage Schema, but it does not own an ORM schema format or a migration engine. Concrete database adapters compile merged Core and plugin storage into their ecosystem's native schema source. The application commits that generated source and uses its native database tooling to generate, review, and apply migrations.
 
 The ownership chain is:
diff --git a/docs/adr/0010-hackkit-logger.md b/docs/adr/0010-hackkit-logger.md
index c1f2e4c9..f5f8350f 100644
--- a/docs/adr/0010-hackkit-logger.md
+++ b/docs/adr/0010-hackkit-logger.md
@@ -1,32 +1,32 @@
 # HackKit Logger (Better Auth–style, pluggable)
 
-HackKit exposes a replaceable **HackKit Logger** at `createHackkit` and in `hackkit.config.ts`, modeled after Better Auth’s `logger` option: minimum **Log Level**, optional `disabled`, and a custom `log(level, message, ...args)` implementation. Significant **HackKit Core** domain APIs emit structured operational lines at `info`/`debug`; this is not a persisted audit table or the legacy SQL `error_log`.
+HackKit exposes a replaceable **HackKit Logger** at `initializeHackkit` and in `hackkit.config.ts`, modeled after Better Auth’s `logger` option: minimum **Log Level**, optional `disabled`, and a custom `log(level, message, ...args)` implementation. Significant **HackKit Core** domain APIs emit structured operational lines at `info`/`debug`; this is not a persisted audit table or the legacy SQL `error_log`.
 
 ## Context
 
-- Legacy **apps/web** persisted errors in an `error_log` table via `logError`, separate from framework diagnostics.
-- **HackKit Core** had no logging contract; Better Auth already supports its own `logger` on `betterAuth({ ... })`.
-- Operators need visibility into domain actions (registration, approval, check-in) without storing PII in the database or coupling Core to a specific vendor (Datadog, Sentry, stdout).
+-   Legacy **apps/web** persisted errors in an `error_log` table via `logError`, separate from framework diagnostics.
+-   **HackKit Core** had no logging contract; Better Auth already supports its own `logger` on `betterAuth({ ... })`.
+-   Operators need visibility into domain actions (registration, approval, check-in) without storing PII in the database or coupling Core to a specific vendor (Datadog, Sentry, stdout).
 
 ## Decision
 
-- Define a **HackKit Logger** type in **HackKit Core** with levels `debug` | `info` | `warn` | `error`, `disabled`, and optional custom `log`.
-- Ship a default console implementation when the app omits `logger`.
-- Default minimum **Log Level**: `info` when `NODE_ENV` is development, `warn` in production, overridable in config.
-- **HackKit Core** logs significant domain API calls (e.g. **Hacker Registration**, **Organiser Approval**, **Hackathon Check-in**) with **Log Context**: action name, outcome, **Auth ID**s, stable record ids, and **HackKit** error code/message on failure — never emails, names, or form payloads.
-- **HackKit CLI** commands run from a **HackKit Web App** directory read the same `logger` from `hackkit.config.ts`, falling back to the environment-based default when omitted.
-- **@hackkit/auth-better-auth** bridges the app’s **HackKit Logger** into Better Auth’s `logger.log` so one custom implementation in config can cover auth and Core output.
+-   Define a **HackKit Logger** type in **HackKit Core** with levels `debug` | `info` | `warn` | `error`, `disabled`, and optional custom `log`.
+-   Ship a default console implementation when the app omits `logger`.
+-   Default minimum **Log Level**: `info` when `NODE_ENV` is development, `warn` in production, overridable in config.
+-   **HackKit Core** logs significant domain API calls (e.g. **Hacker Registration**, **Organiser Approval**, **Hackathon Check-in**) with **Log Context**: action name, outcome, **Auth ID**s, stable record ids, and **HackKit** error code/message on failure — never emails, names, or form payloads.
+-   **HackKit CLI** commands run from a **HackKit Web App** directory read the same `logger` from `hackkit.config.ts`, falling back to the environment-based default when omitted.
+-   **HackKit Core** bridges the app’s **HackKit Logger** into Better Auth’s `logger.log` so one custom implementation in config can cover auth and Core output.
 
 ## Alternatives considered
 
-- **Persisted error/audit tables** — Rejected for this milestone; different retention, query, and compliance model than framework logging.
-- **Stdout-only, no contract** — Rejected; apps could not forward to hosted logging without forking Core.
-- **Independent Better Auth logger only** — Rejected; duplicate config and divergent formats in typical apps.
-- **Verbose `debug` payloads (form fields)** — Rejected; PII risk and weak redaction story across custom loggers.
+-   **Persisted error/audit tables** — Rejected for this milestone; different retention, query, and compliance model than framework logging.
+-   **Stdout-only, no contract** — Rejected; apps could not forward to hosted logging without forking Core.
+-   **Independent Better Auth logger only** — Rejected; duplicate config and divergent formats in typical apps.
+-   **Verbose `debug` payloads (form fields)** — Rejected; PII risk and weak redaction story across custom loggers.
 
 ## Consequences
 
-- No SQL `error_log` parity in v1; organisers who need searchable error history may add a custom logger that writes to their store.
-- Core gains a small amount of logging overhead on hot paths; keep messages cheap and level-gated.
-- Custom loggers must treat **Log Context** as potentially sensitive even without full payloads (Auth IDs are still identifiers).
-- Better Auth internal messages and HackKit domain messages share one pipeline when the bridge is used; apps that need separation can pass different implementations to Core vs the auth adapter factory.
+-   No SQL `error_log` parity in v1; organisers who need searchable error history may add a custom logger that writes to their store.
+-   Core gains a small amount of logging overhead on hot paths; keep messages cheap and level-gated.
+-   Custom loggers must treat **Log Context** as potentially sensitive even without full payloads (Auth IDs are still identifiers).
+-   Better Auth internal messages and HackKit domain messages share one pipeline when the bridge is used; apps that need separation can pass different implementations to Core vs `config.auth.logger`.
diff --git a/docs/adr/0011-blob-storage-and-stored-file-references.md b/docs/adr/0011-blob-storage-and-stored-file-references.md
index 82e2a86e..ab1d8dc3 100644
--- a/docs/adr/0011-blob-storage-and-stored-file-references.md
+++ b/docs/adr/0011-blob-storage-and-stored-file-references.md
@@ -4,29 +4,29 @@ Files (e.g. resumes on **Hacker Registration**) are stored outside **HackKit Cor
 
 ## Context
 
-- Legacy **apps/web** used R2 presigned uploads and app routes (`/api/upload/resume/...`) that return app-relative view URLs stored on hacker rows.
-- **HackKit Core** already has optional `resumeUrl` on **Hacker**; there was no adapter boundary, and resume “missing” used a legacy sentinel URL constant.
-- **Competitor Onboarding** this milestone includes resume upload in **HackKit UI** with web defaulting to local storage for contributors without cloud credentials.
+-   Legacy **apps/web** used R2 presigned uploads and app routes (`/api/upload/resume/...`) that return app-relative view URLs stored on hacker rows.
+-   **HackKit Core** already has optional `resumeUrl` on **Hacker**; there was no adapter boundary, and resume “missing” used a legacy sentinel URL constant.
+-   **Competitor Onboarding** this milestone includes resume upload in **HackKit UI** with web defaulting to local storage for contributors without cloud credentials.
 
 ## Decision
 
-- Define **Blob Storage Adapter** in **HackKit Core**; implement `@hackkit/blob-local` and `@hackkit/blob-s3` (or equivalent names) as separate packages.
-- **HackKit Web Apps** select an implementation in `hackkit.config.ts`; web defaults to local.
-- After upload, the app passes a **Stored File Reference** (app-relative URL) into Core APIs; Core does not talk to blob backends directly.
-- Resume is optional: omit `resumeUrl` when the user skips upload; no sentinel “no resume provided” string in Core records.
-- **HackKit UI** **Hacker Registration** form accepts upload via app-provided handlers; resulting URL is submitted with `registerHacker`.
+-   Define **Blob Storage Adapter** in **HackKit Core**; implement `@hackkit/blob-local` and `@hackkit/blob-s3` (or equivalent names) as separate packages.
+-   **HackKit Web Apps** select an implementation in `hackkit.config.ts`; web defaults to local.
+-   After upload, the app passes a **Stored File Reference** (app-relative URL) into Core APIs; Core does not talk to blob backends directly.
+-   Resume is optional: omit `resumeUrl` when the user skips upload; no sentinel “no resume provided” string in Core records.
+-   **HackKit UI** **Hacker Registration** form accepts upload via app-provided handlers; resulting URL is submitted with `registerHacker`.
 
 ## Alternatives considered
 
-- **Direct public CDN URLs in Core** — Rejected; host/bucket changes invalidate rows and leak infrastructure into the domain.
-- **Opaque storage keys only in Core** — Rejected for v1; every read path would need adapter resolution in UI and exports; more wiring before onboarding ships.
-- **Core-owned file model / attachment entity** — Rejected; glossary keeps blobs at the adapter boundary.
-- **Single backend hard-coded in Core** — Rejected; prevents local dev without cloud keys.
-- **Legacy sentinel URL for “no resume”** — Rejected; optional field is sufficient for v1 reporting (`resumeUrl` present vs absent).
+-   **Direct public CDN URLs in Core** — Rejected; host/bucket changes invalidate rows and leak infrastructure into the domain.
+-   **Opaque storage keys only in Core** — Rejected for v1; every read path would need adapter resolution in UI and exports; more wiring before onboarding ships.
+-   **Core-owned file model / attachment entity** — Rejected; glossary keeps blobs at the adapter boundary.
+-   **Single backend hard-coded in Core** — Rejected; prevents local dev without cloud keys.
+-   **Legacy sentinel URL for “no resume”** — Rejected; optional field is sufficient for v1 reporting (`resumeUrl` present vs absent).
 
 ## Consequences
 
-- Each **HackKit Web App** must implement routes that serve or proxy files for **Stored File References** (local read path vs S3 redirect/proxy).
-- Switching from local to S3 does not require migrating Core rows if URL shape stays app-relative and keys remain stable in the query/path convention.
-- Upload security (auth, content type, size limits) stays in the Web App and adapter packages, not in Core validation of `registerHackerSchema` alone.
-- Plugins or future file types reuse the same adapter contract; avoid ad hoc upload routes per feature without extending the adapter interface deliberately.
+-   Each **HackKit Web App** must implement routes that serve or proxy files for **Stored File References** (local read path vs S3 redirect/proxy).
+-   Switching from local to S3 does not require migrating Core rows if URL shape stays app-relative and keys remain stable in the query/path convention.
+-   Upload security (auth, content type, size limits) stays in the Web App and adapter packages, not in Core validation of `registerHackerSchema` alone.
+-   Plugins or future file types reuse the same adapter contract; avoid ad hoc upload routes per feature without extending the adapter interface deliberately.
diff --git a/docs/adr/0013-mikroorm-and-core-auth.md b/docs/adr/0013-mikroorm-and-core-auth.md
new file mode 100644
index 00000000..5b6f3311
--- /dev/null
+++ b/docs/adr/0013-mikroorm-and-core-auth.md
@@ -0,0 +1,51 @@
+# MikroORM as the sole ORM, with Better Auth in Core
+
+Status: accepted. Supersedes the persistence and authentication boundaries in ADRs 0001, 0002, 0004, and 0008.
+
+## Decision
+
+Core and server plugins use native MikroORM `defineEntity` definitions and `EntityManager` queries. PostgreSQL, MySQL, SQLite, and libSQL are supported. The generic DatabaseAdapter, adapter factories, custom schema language, schema compiler, and Drizzle packages have been removed. Framework independence, domain operations, authorization, plugin registration, and app ownership of migrations remain.
+
+`initializeHackkit` collects Core entities, Better Auth entities, installed plugin entities, including disabled plugins, and app entities before initializing the ORM. Application migration scripts use `createOrmOptions` with this same collection. Plugin table names start with the plugin ID converted to snake_case plus an underscore. Duplicate entity names and table names fail initialization.
+
+Core's `src/runtime.ts` owns HackKit initialization, shared authentication, logging, and execution scopes. `src/mikro/options.ts` owns native ORM options and driver types. Both remain available through the `@hackkit/core` package entrypoint.
+
+One ORM owns shared connections. Each request, action, job, or CLI operation gets a fresh EntityManager. `runtime.createScope(actorAuthId)` binds domain and plugin APIs; `runtime.run(callback, actorAuthId)` also provides MikroORM RequestContext. Transactions use a fresh identity map and clear the parent map on completion. Domain responses are plain DTOs; managed entities and authentication secrets stay on the server. Browser code imports `@hackkit/core/client`.
+
+## Authentication
+
+Core constructs Better Auth with `@a77ay/better-auth-mikro-orm`. Better Auth still declares its own unused Drizzle adapter as an upstream dependency; HackKit does not import it, and `drizzle-orm` is absent from the resolved dependency graph. This community MikroORM adapter is pinned alongside Better Auth and MikroORM and covered by real database tests. Apps provide secrets, providers, trusted origins, email behavior, and optional auth plugins. Next owns request headers, cookies, redirects, and auth route handlers.
+
+`HackKitUser` is the canonical native entity in `core_user`. It stores the Better Auth identity fields and HackKit profile, role, approval, and check-in fields in one row. Better Auth maps its user model to `core_user` and its `image` field to `profilePhotoUrl`. The primary key is `id`; Core's inferred user DTO, public profiles, and admin exports expose this same property through native serialization. Sessions, accounts, and all domain/plugin user foreign keys reference this row.
+
+Consumers of the former user DTO must replace `user.authId` with `user.id`. The admin CSV identifier column is now `id`. Hacker records and the `registerHacker` input use `userId`, which references the same user primary key. The hacker entity retains its mapping to the committed `auth_id` database column. Other operation inputs such as `authId`, `actorAuthId`, and `targetAuthId` still accept the user ID. These contract changes require no database migration.
+
+The single `name` field is a display name supplied during signup or by a social provider. Profile settings edit that same field. HackKit does not split names or store duplicate first/last names or photos. Domain fields have safe initial values: no role, no approval or check-in, empty skills, and nullable optional profile fields. User Data and Hacker registration remain separate domain records.
+
+Core owns the auth user model and field mapping. Auth options and plugins cannot expose HackKit domain fields through additional user fields, including aliases that map to those properties. Public signup/update payloads cannot assign role, approval, or check-in state. Those changes use authorized Core operations. Auth and Core profile edits read back from the same row without synchronization hooks or an extra identity query.
+
+Auth fields and plugin tables must have native entity metadata before startup. Core checks the Better Auth schema requirements and rejects undeclared fields or tables. Additional auth models belong in the shared registry and need reviewed migrations.
+
+## Consistency and side effects
+
+Multi-step domain changes run in transactions. A portable operation-lock row serializes capacity and membership decisions before reads. Unique constraints provide additional protection. These locks trade some write concurrency for consistent behavior across supported SQL drivers.
+
+Profile updates and HackTag claims share a lock key for the target user. PostgreSQL and MySQL can update unrelated profiles independently. The HackTag unique constraint arbitrates competing claims from different users. SQLite and libSQL retain their database-level single-writer limitation.
+
+Notification intents persist with the domain change. Workers claim pending intents with an atomic conditional update before contacting providers. Discord verification commits its linked account and consumed code before external role synchronization. External delivery is not part of a database transaction; provider failures are recorded by existing attempt tracking. An interrupted worker can leave a processing intent requiring operational recovery.
+
+## Migrations and releases
+
+Apps commit native MikroORM migrations and snapshots for PostgreSQL, MySQL, and SQLite; libSQL shares SQLite migrations. The application’s `db:generate` utility creates a reviewable migration. `db:migrate` explicitly applies it, and `db:seed` explicitly inserts missing configured roles. These scripts use the native migrator without changing the CLI package. Startup and plugin sync do neither.
+
+For an entity change, generate and review each dialect's migration. A registered plugin with `enabled: false` skips runtime setup while retaining schema, settings, and permissions. Plugin removal may propose dropping tables; review retention requirements before applying that migration. This is a fresh-database redesign. The initial migration definitions now create the unified user schema for every dialect. There is no conversion of existing data or user accounts. Existing databases using the split user schema must stay untouched; use a separate fresh database for this implementation.
+
+The [migration guide](../guides/database-migrations.md) specifies staged upgrades, static SQL transformations, plugin retention, snapshot checks, and MySQL partial-DDL recovery. Package maintainers publish tested transformation SQL and upgrade notes; applications incorporate those steps into one ordered history.
+
+## Validation
+
+The app database matrix applies committed migrations and tests real SQLite, local libSQL, PostgreSQL, MySQL, and HTTP libSQL. It checks schema agreement, signup/session/profile behavior, native JSON/date/boolean/null values, rollback, concurrent registration capacity, teams, uniqueness, and foreign-key cleanup. Package tests cover domain authorization, request isolation, notification claims, and membership conflicts. CI requires external service URLs so those cases cannot silently skip.
+
+Use Node.js 22.17 or newer and TypeScript 5.9.3. Production validation must also cover the deployment's credentials, TLS, OAuth providers, and external email/Discord services.
+
+Packages built with `tsup` use extensionless relative imports in TypeScript source, with `module: ESNext`, `moduleResolution: Bundler`, and `noEmit: true`. `tsup` emits JavaScript and bundled declarations; native Node loads these built package entrypoints. Generated imports between output chunks retain the extensions Node requires. The UI package still uses `tsc` and is consumed through the application bundler.
diff --git a/docs/guides/database-migrations.md b/docs/guides/database-migrations.md
new file mode 100644
index 00000000..d5cabaa5
--- /dev/null
+++ b/docs/guides/database-migrations.md
@@ -0,0 +1,97 @@
+# Database migrations
+
+The application owns one ordered migration history for Core, Better Auth, installed plugins, and application entities. Core supplies native entity definitions and a shared registry. The reference app supplies runnable scripts and database-specific configuration. Package authors supply reviewed transformation SQL and upgrade instructions when their schema changes require them.
+
+The scripts live in `apps/web/scripts/database.ts`, with `scripts/db.mjs` as the Node entry point. They use MikroORM's native migrator and its `mikro_orm_migrations` history table. They do not call the HackKit CLI. Plugin route/action synchronization continues to use the existing CLI.
+
+## Commands
+
+Run from the repository root after installing dependencies and building workspace packages:
+
+| Command                                                             | Behavior                                                                                                                            |
+| ------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
+| `pnpm --filter web db:generate --name describe_change`              | Generates a migration and updates the target snapshot. Outputs the SQL proposal and potentially destructive statements.             |
+| `pnpm --filter web db:generate --name backfill --blank`             | Creates a migration for authored SQL.                                                                                               |
+| `pnpm --filter web db:status`                                       | Lists applied and pending migrations.                                                                                               |
+| `pnpm --filter web db:check`                                        | Checks metadata against the snapshot, pending history, and the live schema. Exits with status 1 when any check differs.             |
+| `pnpm --filter web db:migrate`                                      | Applies all pending migrations.                                                                                                     |
+| `pnpm --filter web db:migrate --to Migration20261006120000_expand`  | Applies up to and including the named migration.                                                                                    |
+| `pnpm --filter web db:rollback`                                     | Runs the latest applied migration's `down()` method.                                                                                |
+| `pnpm --filter web db:rollback --to Migration20261006120000_expand` | Reverts later migrations, leaving the named migration applied. `--to 0` reverts all.                                                |
+| `pnpm --filter web db:seed`                                         | Inserts missing configured role IDs. Existing roles and assignments remain unchanged.                                               |
+| `pnpm --filter web db:reset`                                        | In development/tests, drops registered tables and migration history in the selected local SQLite database, then migrates and seeds. |
+
+Every command accepts `--config path/to/hackkit.config.ts` and optional `--output path/to/result.json`. The output file contains the command result separately from driver diagnostics; a failed `check` still writes its result and exits with status 1. The entry point loads `.env` files with Next's environment precedence before loading the config. Explicit shell environment variables take precedence. Configuration paths and relative database paths are resolved from the application directory.
+
+The selected dialect determines the migration directory. PostgreSQL, MySQL, and SQLite have separate histories in `apps/web/db/migrations`; libSQL uses the SQLite history. Generate and test each supported history when changing a shared entity. A generated migration for one dialect is not a replacement for the other dialects' histories.
+
+`status` and `check` use native migration history APIs. These APIs may create the tracking table if it does not exist. They do not apply application migrations or seed data. A database connection failure is an error, not a successful status check. Generation can use a committed snapshot without connecting; without a snapshot, MikroORM needs a database for its starting schema.
+
+`check` compares schema and migration names, not application data or migration checksums. A clean result cannot prove that a backfill produced the intended values. Historical migration sources must stay immutable after application.
+
+## Change an entity
+
+1. Change Core, plugin, or application entities. Keep every installed entity in the shared registry.
+2. Select the dialect and a disposable development database. Run `db:generate --name describe_change`.
+3. Review the complete migration, including generated `down()` and snapshot changes. Inspect dropped tables/columns and SQLite table rebuilds. The destructive-statement output is a review aid, not a complete SQL analysis.
+4. Add required data transformations as authored SQL. Schema generation cannot infer renames or the meaning of existing values.
+5. Apply the history to a fresh database. Separately apply it to the previous version's schema with representative existing data.
+6. Verify IDs, foreign keys, transformed data, auth sessions, schema agreement, and zero pending migrations. Run `db:check` against the completed target schema.
+7. Commit the reviewed migration sources and snapshots together.
+
+Snapshots describe the generated target schema. The reference app sets `snapshotOnMigrate: false`: applying or rolling back migrations does not rewrite them. After a rollback, reapply the existing migration instead of generating it again. During a staged upgrade, the live schema can deliberately differ from the final snapshot; run the final `check` after the last stage.
+
+## Transform existing data
+
+Use an explicit sequence when adding a required field or replacing existing fields:
+
+1. **Expand:** generate a migration that adds the new field as nullable while retaining the old fields.
+2. **Backfill:** create a blank migration and author SQL that copies/transforms existing data. Validate nulls, empty values, Unicode, and relationships.
+3. **Contract:** after compatible code is deployed and the transformation is verified, generate the final constraints and removal of obsolete fields.
+
+A staged release applies through the expansion/backfill boundary with `--to`. Deploy code that can use the expanded schema, then apply contraction when the old code no longer needs the legacy fields. A single maintenance-window release can apply the full reviewed chain when downtime and the compatibility plan permit it.
+
+Historical migrations should use `this.addSql()` or `this.execute()` with static SQL. Avoid importing current entities or calling current domain APIs in migration files: those definitions change after the migration was authored. Package upgrade guidance must state the source version, target version, SQL ordering, dialect coverage, and recovery behavior. See [the package upgrade contract](package-schema-upgrades.md).
+
+## Disable a plugin and retain its data
+
+Keep the plugin registered and set `enabled: false`:
+
+```ts
+plugins: [
+  { ...teamsPlugin(), enabled: false }, // 1
+  discordPlugin(() => ({              // 2
+    guildId: env.discordGuildId,
+    roleSyncProvider: createDiscordRoleSyncProvider(),
+  })),
+],
+```
+
+1. Core keeps the Teams entity definitions, settings, and permissions in the registry. It skips the plugin's setup function. Accessing `hackkit.plugins.teams` throws a structured `INVALID_OPERATION` error. Check `hackkit.isPluginEnabled("teams")` before exposing optional functionality.
+2. Provider options are evaluated once when the enabled plugin first sets up its API. Entity discovery and migration commands do not initialize providers. Discord and email plugin factories accept either existing options objects or lazy options functions.
+
+Runtime and migrations collect disabled plugin entities identically. Disabling a plugin therefore does not propose table drops. Re-enabling it uses the retained data. Keeping a disabled plugin installed also keeps its schema current when its package is upgraded; disabling behavior does not freeze old entity definitions.
+
+The built-in Teams/Discord pages return 404 when disabled, and their actions return structured failures. The reference app hides their navigation links. Custom routes, jobs, and UI should use the same enabled check. Do not cache a plugin API across config changes; runtime scopes use the config from application startup.
+
+Removing the plugin from `plugins` is an uninstall proposal. Generation may propose dropping its tables. If retention is required while removing its executable package, keep stable native definitions of those tables through the application's `entities` option. Otherwise, review and explicitly apply a destructive uninstall migration. Disabling and uninstalling are separate configuration choices.
+
+The CLI package is unchanged. Its current sync command can still materialize wrappers for disabled plugins. The runtime guards prevent those wrappers from invoking disabled APIs. Future CLI integration can hide disabled route/action wrappers while continuing to collect their entities; that work must preserve this contract.
+
+## Deployment and failure recovery
+
+Apply migrations from one explicit Node release job with the application's selected configuration and credentials. Do not run them during request handling, app startup, or builds. Workers applications can use a separate Node migration job; these scripts do not establish Workers runtime compatibility or hosted Turso readiness.
+
+SQLite, PostgreSQL, and libSQL use native transaction settings. The reference MySQL configuration sets `transactional: false` and `allOrNothing: false` because MySQL DDL commits implicitly. A failure can leave partial DDL without an applied history entry. Inspect the failed statement, existing schema, and any committed data transformations before retrying. Do not assume that a missing history entry means that nothing changed.
+
+A `down()` method is a schema reversal, not a backup. Dropping a column can lose values permanently, and generated reversal SQL can fail to restore a required field on populated tables. Review and test rollback only when it is a supported recovery path. Otherwise, document restoration or a forward repair before release.
+
+Reset rejects production and all non-SQLite drivers, including local libSQL. It drops the registered application tables and tracking table; unrelated, unregistered tables are not part of the reset contract. It never deletes another database file. Use it only for disposable development data.
+
+## Validation
+
+`pnpm --filter web test` exercises the app scripts against SQLite/local libSQL. It checks existing-data expansion/backfill/contraction, staged migration, plugin upgrade, rollback/reapply, live drift, disabled-schema retention, destructive uninstall proposals, fresh replay, and reset/seed behavior.
+
+`pnpm --filter web test:db-matrix` runs the same upgrade flow after auth/domain validation on each configured target. CI requires PostgreSQL, MySQL, and HTTP libSQL URLs; missing local targets are reported as skipped. Test URLs must name empty, disposable databases. The native libSQL client can hang when repeatedly creating and destroying ORM instances in one Node process. The HTTP upgrade test uses one Node process per command, matching the utility scripts’ release-job lifecycle. Do not run a sequence of these commands inside a long-lived application process. Hosted Turso authentication/TLS and deployment-specific runtime behavior need separate validation.
+
+Primary reference: [MikroORM 7.2 migrations](https://mikro-orm.io/docs/migrations).
diff --git a/docs/guides/next-integration.md b/docs/guides/next-integration.md
index c3216e02..77ec85ed 100644
--- a/docs/guides/next-integration.md
+++ b/docs/guides/next-integration.md
@@ -1,91 +1,40 @@
-# Next.js integration path
+# Next.js integration
 
-HackKit Web Apps integrate with Core and HackKit UI through **`@hackkit/next`**. After runtime-owned page guards and the collapsed Core action bridge, there is one coherent path for:
+Use `@hackkit/next` to connect HackKit Core, Better Auth, and HackKit UI. The [package README](../../packages/next/README.md) describes the API; the [reference app](../../apps/web/README.md) contains setup and database commands.
 
-1. Runtime setup
-2. Page guards
-3. Core mutations / server actions
-4. HackKit UI provider wiring
+## Ownership
 
-Package README: [`packages/next/README.md`](../../packages/next/README.md). Reference implementation: [`apps/web`](../../apps/web).
+| Concern                            | Owner               | App integration                                                |
+| ---------------------------------- | ------------------- | -------------------------------------------------------------- |
+| Connections, entities, Better Auth | Core                | Supply `database`, `auth`, plugins, and app entities in config |
+| Request session and EntityManager  | Next runtime        | Register `host.getRuntime` as a function                       |
+| Auth HTTP and cookies              | Next                | Route GET/POST to Core's auth handler                          |
+| Guards and mutations               | Request runtime     | Resolve `getRuntime()` in layouts and actions                  |
+| Core UI actions                    | `hackKitUIActions`  | Pass to `HackKitUIProvider`                                    |
+| Plugin routes/actions              | CLI sync            | Import generated modules                                       |
+| Migrations and seed data           | App release process | Explicit CLI commands                                          |
 
-## Why one path
+## Request lifecycle
 
-Earlier apps could rebuild page guards locally and duplicate the full Core action surface in both server actions and UI provider maps. That made every new mutation a multi-file app change and let Core, Next, and UI drift apart.
+The app creates one host with `createHackkitRuntimeFromConfig({ config })`. Its Core promise owns shared connections and auth. `setHackkitRuntime(host.getRuntime)` registers a factory. Each request resolves its session, forks an EntityManager, and binds domain and plugin APIs to the authenticated actor. Settings are read through that scope. No request state is retained in a module singleton.
 
-The simplified path keeps construction inside `@hackkit/next`:
+Auth signup creates the Better Auth identity and HackKit profile in one transaction. Session reads use the existing profile, so user edits survive later sign-ins. Domain methods return plain DTOs; authentication records and managed entities stay on the server.
 
-| Concern        | Own it in               | App does                       |
-| -------------- | ----------------------- | ------------------------------ |
-| Runtime        | `createHackkitRuntime*` | Call once, `setHackkitRuntime` |
-| Page guards    | `runtime.pageGuards`    | `getPageGuards()` in layouts   |
-| Mutations      | `runtime.mutations`     | Nothing for Core actions       |
-| UI actions     | `hackKitUIActions`      | Pass into `HackKitUIProvider`  |
-| Plugin actions | Generated by CLI sync   | Import generated module        |
+For background jobs, use Core's `runtime.run(callback, actorAuthId)` or create an explicit scope. Close the Core ORM when the process ends. Browser components import `@hackkit/core/client` for schemas, constants, and types.
 
-## Wiring checklist
+## Page integration
 
-### Runtime
+| Area             | Guard                                      | Mutation examples                              |
+| ---------------- | ------------------------------------------ | ---------------------------------------------- |
+| Onboarding       | `requireOnboardingAccess`                  | Claim tag, complete User Data, register Hacker |
+| Participant      | `requireParticipantAccess`                 | Profile, RSVP, teams                           |
+| Pending approval | `requireApprovalPendingAccess`             | Read approval status                           |
+| Admin            | `requireNotBanned` and `requirePermission` | Administration, scans, settings                |
 
-`apps/web/lib/runtime.ts` is the composition root:
+Use the runtime's guards and mutations. Keep the UI provider map in `@hackkit/next`. Plugin actions use their package's `/actions` entrypoint and the same registered runtime. Route maps passed from server components must contain serializable values; custom builders belong in a client navigation adapter.
 
--   `createHackkitRuntimeFromConfig({ config, auth, afterCurrentUser? })`
--   `config.database` is an explicit `DatabaseAdapterFactory` (for example `createDrizzleLibsqlAdapter(getDb)`)
--   `setHackkitRuntime(runtimePromise)` so `"use server"` actions can resolve mutations
--   Thin accessors: `getRuntime`, `getCurrentUser`, `getHackkit`, `getPageGuards`
+## Verification
 
-Use `afterCurrentUser` for app-specific work that must run for both `getCurrentUser` and guards (for example owner allowlist provisioning).
+Package tests cover action-map parity, redirects, session isolation, and profile preservation. The app matrix validates committed migrations and auth/domain behavior across supported drivers. Run the package tests, `pnpm --filter web typecheck`, and `pnpm --filter web build` after building the web dependency graph.
 
-### Provider
-
-`apps/web/app/providers.tsx`:
-
-```tsx
-<HackKitUIProvider actions={hackKitUIActions} />
-```
-
-Import `hackKitUIActions` from `@hackkit/next`. Do not rebuild the map in the app.
-
-Omit `routes` (or pass only serializable string overrides) from the Server Component provider. Admin route builders are created inside the client provider defaults. Custom builders belong on a client `navigation` adapter. Server helpers such as onboarding step construction may still use `hackKitUIRoutes` / `DEFAULT_HACKKIT_UI_ROUTES` outside the provider.
-
-### Layouts and pages
-
-| Area                                                 | Guard / data                                                          | UI actions                                           |
-| ---------------------------------------------------- | --------------------------------------------------------------------- | ---------------------------------------------------- |
-| Onboarding                                           | `requireOnboardingAccess` (+ registration-open where needed)          | `claimHackTag`, `completeUserData`, `registerHacker` |
-| Participant (dashboard, pass, settings, RSVP, teams) | `requireParticipantAccess`                                            | profile, RSVP, Event Pass consumers                  |
-| Approval pending                                     | `requireApprovalPendingAccess`                                        | —                                                    |
-| Admin                                                | `requireNotBanned` + `requirePermission(Admin)` (+ finer permissions) | admin console, scanners, settings                    |
-
-Plugin pages (Teams, Discord, invites) use the registered runtime and generated plugin actions; they are not part of `hackKitUIActions`.
-
-### Do not
-
--   Call `createPageGuards` in the app
--   Call `createHackKitMutations` in the app
--   Hand-maintain a local Core action export list for the provider
--   Duplicate mutation wiring when adding a Core UI action — extend `@hackkit/next` instead
-
-## Drift protection
-
-`@hackkit/next` tests assert that:
-
--   `hackKitUIActions` keys match `HackKitUIActions`
--   `createHackKitMutations` returns the same key set
--   Named exports in `actions.ts` match that key set
--   Page guards redirect / not-found for incomplete onboarding, unapproved users, bans, and closed registration
-
-Compile-time: `hackKitUIActions satisfies HackKitUIActions`.
-
-```bash
-pnpm --filter @hackkit/next test
-pnpm --filter @hackkit/next typecheck
-pnpm --filter web typecheck
-pnpm --filter web build
-```
-
-## Related ADRs
-
--   [0005 — Next.js-first UI package](../adr/0005-nextjs-first-ui-package.md)
--   [0007 — Event Pass QR in HackKit UI](../adr/0007-event-pass-qr-in-hackkit-ui.md)
--   [0012 — Typed hackathon settings registry](../adr/0012-typed-hackathon-settings-registry.md)
+See [ADR 0013](../adr/0013-mikroorm-and-core-auth.md) for registry, transaction, authentication, and migration decisions.
diff --git a/docs/guides/package-schema-upgrades.md b/docs/guides/package-schema-upgrades.md
new file mode 100644
index 00000000..5d63ca25
--- /dev/null
+++ b/docs/guides/package-schema-upgrades.md
@@ -0,0 +1,31 @@
+# Publish a Core or plugin schema upgrade
+
+Applications compose Core, auth, plugin, and app tables into one migration history. Core and plugins publish native entity definitions. When an entity change needs a data transformation, package maintainers must also publish an upgrade note and tested static SQL for each supported dialect.
+
+Store that guidance beside the package's release documentation. Keep the SQL reviewable and identify its order relative to generated schema changes. Do not ship an independent migrator, package history table, or automatic upgrade coordinator.
+
+## Required upgrade note
+
+Use this checklist for each schema-changing release:
+
+-   **Versions:** exact supported source versions and target version. State whether intermediate versions must be installed first.
+-   **Entities:** added/removed/changed tables, fields, constraints, and foreign-key relationships.
+-   **Expansion:** schema changes needed before the transformation, including temporary nullable fields or defaults.
+-   **Transformation:** static SQL with expected input/output values, handling of nulls, empty values, and invalid legacy data. State whether rerunning is safe.
+-   **Contraction:** final constraints and removals. State when old code must stop running.
+-   **Application integration:** tell developers where to insert each step in their own history. Describe dependencies on other Core/plugin/app tables. Include the `db:migrate --to` boundaries where applicable.
+-   **Verification:** expected schema and data assertions. Record passed versions for PostgreSQL, MySQL, SQLite, and libSQL separately; explicitly list skipped or unvalidated targets.
+-   **Recovery:** supported `down()` behavior, irreversible data loss, and partial-DDL handling. MySQL must have an explicit recovery plan for failed DDL.
+-   **Disabled plugins:** state whether the release changes retained schema. `enabled: false` retains entities and still participates in package schema upgrades.
+
+Use the package's frozen historical SQL in test fixtures. Apply the upgrade to the previous schema with existing Core users, plugin foreign keys, and application-owned references. Also replay the complete consuming application's history into an empty database using only current metadata.
+
+## Application integration
+
+The application developer installs the new package, generates the expansion against its complete registry, inserts/adapts the package's authored transformation SQL, then generates contraction. The application commits every step and the final dialect snapshot together. Package SQL is an input to that review; it is not automatically applied when the package is installed.
+
+If an application customizes affected fields, relations, or naming, it must adapt and test the SQL before release. The package note should call out those assumptions. A clean schema diff does not verify transformed data.
+
+The reference app's upgrade tests demonstrate this workflow with synthetic application fields and a plugin linked to real `core_user` records. They prove the migration runner's composition and ordering; each actual package release still needs tests for its specific transformation.
+
+See [database migrations](database-migrations.md) for commands, snapshots, plugin retention, and deployment behavior.
diff --git a/package.json b/package.json
index fdc8f5e9..ecff63ec 100644
--- a/package.json
+++ b/package.json
@@ -6,16 +6,17 @@
     "dev": "turbo run dev",
     "lint": "turbo run lint",
     "preinstall": "npx only-allow pnpm",
-    "schema:generate": "pnpm --filter=web schema:generate",
     "db:generate": "pnpm --filter=web db:generate",
     "db:migrate": "pnpm --filter=web db:migrate",
     "db:seed": "pnpm --filter=web db:seed",
     "db:reset": "pnpm --filter=web db:reset",
-    "db:studio": "pnpm --filter=web db:studio",
     "deploy-discord:dev": "pnpm --filter=bot deploy:dev",
     "deploy-discord:prod": "pnpm --filter=bot deploy:prod",
     "format": "prettier --write .",
-    "format-check": "prettier --check ."
+    "format-check": "prettier --check .",
+    "db:status": "pnpm --filter=web db:status",
+    "db:check": "pnpm --filter=web db:check",
+    "db:rollback": "pnpm --filter=web db:rollback"
   },
   "devDependencies": {
     "@turbo/gen": "^2.0.9",
@@ -28,7 +29,9 @@
   "packageManager": "pnpm@8.3.1+sha512.d264f6640bf4f09de7cfcc547568515bcf0613cf485a03e8ff16616fa69c4172b6f9a0a2925ee44fb060df565c9c9a8eaf061749e77af318cb77f6684a7051f3",
   "name": "hackkit",
   "dependencies": {
-    "@libsql/client": "^0.14.0",
     "prettier-plugin-tailwindcss": "^0.6.5"
+  },
+  "engines": {
+    "node": ">=22.17.0"
   }
 }
diff --git a/packages/auth-better-auth/.gitignore b/packages/auth-better-auth/.gitignore
deleted file mode 100644
index 1521c8b7..00000000
--- a/packages/auth-better-auth/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-dist
diff --git a/packages/auth-better-auth/package.json b/packages/auth-better-auth/package.json
deleted file mode 100644
index 5a19ff79..00000000
--- a/packages/auth-better-auth/package.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "name": "@hackkit/auth-better-auth",
-  "version": "0.0.0",
-  "description": "Better Auth adapter for HackKit",
-  "type": "module",
-  "main": "./dist/index.js",
-  "module": "./dist/index.mjs",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./session": {
-      "types": "./dist/session.d.ts",
-      "import": "./dist/session.js"
-    }
-  },
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "tsup src/index.ts src/session.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts src/session.ts --format cjs,esm --dts --watch",
-    "typecheck": "tsc -p tsconfig.json --noEmit"
-  },
-  "dependencies": {
-    "@hackkit/core": "workspace:*",
-    "server-only": "^0.0.1"
-  },
-  "peerDependencies": {
-    "better-auth": ">=1.6",
-    "next": ">=14"
-  },
-  "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3"
-  },
-  "license": "MIT",
-  "private": true
-}
diff --git a/packages/auth-better-auth/src/index.ts b/packages/auth-better-auth/src/index.ts
deleted file mode 100644
index 25b65fb7..00000000
--- a/packages/auth-better-auth/src/index.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import type {
-	AuthAdapter,
-	AuthSession,
-	HackKitLogger,
-	LogLevel,
-} from "@hackkit/core";
-import { headers } from "next/headers";
-
-type BetterAuthInstance = {
-	api: {
-		getSession: (input: {
-			headers: Headers;
-		}) => Promise<AuthSession | null>;
-	};
-};
-
-export type BetterAuthAdapterOptions = {
-	auth: BetterAuthInstance;
-	logger?: HackKitLogger;
-};
-
-export function toBetterAuthLogger(logger: HackKitLogger) {
-	return {
-		disabled: logger.disabled,
-		level: logger.level,
-		log: (level: LogLevel, message: string, ...args: unknown[]) => {
-			logger.log(level, message, ...args);
-		},
-	};
-}
-
-export function betterAuthAdapter(
-	options: BetterAuthAdapterOptions,
-): AuthAdapter {
-	const { auth } = options;
-
-	return {
-		async getSession() {
-			return auth.api.getSession({
-				headers: await headers(),
-			});
-		},
-
-		toAuthId(session) {
-			return session.user.id;
-		},
-
-		getIdentity(session) {
-			const [firstName = session.user.name, ...lastNameParts] =
-				session.user.name.trim().split(/\s+/);
-
-			return {
-				email: session.user.email,
-				firstName,
-				lastName: lastNameParts.join(" ") || "User",
-				profilePhotoUrl: session.user.image ?? undefined,
-			};
-		},
-	};
-}
diff --git a/packages/auth-better-auth/src/session.ts b/packages/auth-better-auth/src/session.ts
deleted file mode 100644
index c316cdf9..00000000
--- a/packages/auth-better-auth/src/session.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import "server-only";
-
-import { headers } from "next/headers";
-import type { AuthSession } from "@hackkit/core";
-
-type BetterAuthInstance = {
-	api: {
-		getSession: (input: {
-			headers: Headers;
-		}) => Promise<AuthSession | null>;
-	};
-};
-
-export async function getAuthSession(auth: BetterAuthInstance) {
-	return auth.api.getSession({
-		headers: await headers(),
-	});
-}
diff --git a/packages/auth-better-auth/tsconfig.json b/packages/auth-better-auth/tsconfig.json
deleted file mode 100644
index e237f6af..00000000
--- a/packages/auth-better-auth/tsconfig.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "extends": "../tsconfig/base.json",
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ES2022",
-    "moduleResolution": "Bundler",
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
-    "noEmit": false
-  },
-  "include": ["src/**/*.ts"],
-  "exclude": ["node_modules", "dist"]
-}
diff --git a/packages/blob-local/package.json b/packages/blob-local/package.json
index 05b20d1f..52a1f350 100644
--- a/packages/blob-local/package.json
+++ b/packages/blob-local/package.json
@@ -23,8 +23,9 @@
     "@hackkit/core": "workspace:*"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3"
+    "@types/node": "22.18.6",
+    "typescript": "5.9.3",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/blob-local/tsconfig.json b/packages/blob-local/tsconfig.json
index 19dd02d8..26604cf6 100644
--- a/packages/blob-local/tsconfig.json
+++ b/packages/blob-local/tsconfig.json
@@ -6,6 +6,7 @@
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
+    "noEmit": true,
     "module": "ESNext",
     "moduleResolution": "Bundler",
     "target": "ES2022",
diff --git a/packages/blob-s3/package.json b/packages/blob-s3/package.json
index 8a81fa9e..4f8be7f1 100644
--- a/packages/blob-s3/package.json
+++ b/packages/blob-s3/package.json
@@ -25,8 +25,9 @@
     "@hackkit/core": "workspace:*"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3"
+    "@types/node": "22.18.6",
+    "typescript": "5.9.3",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/blob-s3/tsconfig.json b/packages/blob-s3/tsconfig.json
index 19dd02d8..26604cf6 100644
--- a/packages/blob-s3/tsconfig.json
+++ b/packages/blob-s3/tsconfig.json
@@ -6,6 +6,7 @@
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
+    "noEmit": true,
     "module": "ESNext",
     "moduleResolution": "Bundler",
     "target": "ES2022",
diff --git a/packages/cli/bin/hackkit.mjs b/packages/cli/bin/hackkit.mjs
new file mode 100755
index 00000000..8fb12721
--- /dev/null
+++ b/packages/cli/bin/hackkit.mjs
@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "../dist/cli.js";
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 13b6e8f9..32f448f8 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -4,7 +4,7 @@
   "description": "HackKit CLI",
   "type": "module",
   "bin": {
-    "hackkit": "./dist/cli.js"
+    "hackkit": "./bin/hackkit.mjs"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -19,25 +19,31 @@
     }
   },
   "files": [
+    "bin",
     "dist"
   ],
   "scripts": {
     "build": "tsup src/index.ts src/cli.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts src/cli.ts --format cjs,esm --dts --watch",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run"
+    "test": "vitest run",
+    "dev": "tsup src/index.ts src/cli.ts --format cjs,esm --dts --watch"
   },
   "dependencies": {
     "@hackkit/config": "workspace:*",
     "@hackkit/core": "workspace:*",
     "commander": "^12.1.0",
     "dotenv": "^16.6.1",
-    "jiti": "^2.4.2"
+    "jiti": "^2.4.2",
+    "@mikro-orm/core": "7.2.1",
+    "@mikro-orm/migrations": "7.2.1",
+    "prettier": "^3.3.3"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "@types/node": "22.18.6",
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "@mikro-orm/sqlite": "7.2.1",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/cli/src/__tests__/cli-config.test.ts b/packages/cli/src/__tests__/cli-config.test.ts
index c8b830da..a0e74ee4 100644
--- a/packages/cli/src/__tests__/cli-config.test.ts
+++ b/packages/cli/src/__tests__/cli-config.test.ts
@@ -25,7 +25,8 @@ describe("CLI config loading", () => {
 		await writeFile(
 			join(projectRoot, "hackkit.config.ts"),
 			`export default {
-				database: { create() { throw new Error("unused"); } },
+                auth: {},
+				database: { driver: class UnusedDriver {} },
 				loadedEnvValue: process.env.${testEnvKey},
 			};`,
 		);
@@ -36,7 +37,8 @@ describe("CLI config loading", () => {
 		});
 
 		expect(
-			(config as typeof config & { loadedEnvValue?: string }).loadedEnvValue,
+			(config as typeof config & { loadedEnvValue?: string })
+				.loadedEnvValue,
 		).toBe("from-app-env");
 	});
 });
diff --git a/packages/cli/src/__tests__/db-migrations.test.ts b/packages/cli/src/__tests__/db-migrations.test.ts
new file mode 100644
index 00000000..cd5682e3
--- /dev/null
+++ b/packages/cli/src/__tests__/db-migrations.test.ts
@@ -0,0 +1,72 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { afterEach, expect, it } from "vitest";
+import { MikroORM, defineEntity, p } from "@mikro-orm/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { createOrmOptions, coreModels } from "@hackkit/core";
+import type { HackkitConfig } from "@hackkit/config";
+import { runDbMigrationGenerate, runDbMigrate } from "../db-migrations";
+import { runDbSeed } from "../db-seed";
+
+const directories: string[] = [];
+afterEach(async () => {
+	await Promise.all(
+		directories
+			.splice(0)
+			.map((path) => rm(path, { recursive: true, force: true })),
+	);
+});
+
+it("generates, applies, and seeds native core, plugin, auth, and app entities", async () => {
+	const projectRoot = await mkdtemp(join(process.cwd(), ".migration-test-"));
+	directories.push(projectRoot);
+	const pluginEntity = defineEntity({
+		name: "SampleEntry",
+		tableName: "sample_entry",
+		properties: { id: p.string().primary(), label: p.string() },
+	});
+	const appEntity = defineEntity({
+		name: "AppNote",
+		tableName: "app_note",
+		properties: { id: p.string().primary(), body: p.text() },
+	});
+	const config = {
+		database: {
+			driver: SqliteDriver,
+			dbName: join(projectRoot, "test.db"),
+			migrations: { path: join(projectRoot, "migrations"), emit: "ts" },
+		},
+		auth: { secret: "test-secret-that-is-at-least-32-characters" },
+		plugins: [{ id: "sample", entities: [pluginEntity] }],
+		entities: [appEntity],
+		seedRoles: [
+			{
+				id: "core.owner",
+				name: "Owner",
+				position: 0,
+				permissions: ["core.superAdmin"],
+			},
+		],
+		logger: { disabled: true },
+	} satisfies HackkitConfig;
+	const generated = await runDbMigrationGenerate(config, {
+		projectRoot,
+		name: "initial",
+	});
+	expect(generated.diff.up.join("\n")).toContain("core_user");
+	expect(generated.diff.up.join("\n")).toContain("sample_entry");
+	expect(generated.diff.up.join("\n")).toContain("app_note");
+	await runDbMigrate(config);
+	expect(await runDbMigrate(config)).toHaveLength(0);
+	expect((await runDbSeed(config)).insertedRoleIds).toEqual(["core.owner"]);
+	expect((await runDbSeed(config)).skippedRoleIds).toEqual(["core.owner"]);
+	const orm = await MikroORM.init(createOrmOptions(config));
+	try {
+		expect(await orm.schema.getUpdateSchemaSQL()).toBe("");
+		expect(await orm.em.fork().count(coreModels.role, {})).toBe(1);
+		expect(await orm.em.fork().count(pluginEntity, {})).toBe(0);
+		expect(await orm.em.fork().count(appEntity, {})).toBe(0);
+	} finally {
+		await orm.close();
+	}
+});
diff --git a/packages/cli/src/__tests__/db-schema.test.ts b/packages/cli/src/__tests__/db-schema.test.ts
deleted file mode 100644
index 86ca71fa..00000000
--- a/packages/cli/src/__tests__/db-schema.test.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import { mkdtemp, readFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { defineModel, field, type DatabaseAdapterFactory } from "@hackkit/core";
-import { describe, expect, it } from "vitest";
-import { runDbSchemaGenerate } from "../db-schema";
-
-function createConfig(database: DatabaseAdapterFactory) {
-	const entry = defineModel("sample.entry", {
-		fields: { id: field.string().primaryKey() },
-	});
-	return {
-		database,
-		plugins: [{ id: "sample", models: { entry } }],
-		seedRoles: [],
-	};
-}
-
-describe("hackkit db schema generate", () => {
-	it("writes the adapter schema to the default app-owned path", async () => {
-		const projectRoot = await mkdtemp(join(tmpdir(), "hackkit-schema-"));
-		const database: DatabaseAdapterFactory = {
-			create: () => ({}) as never,
-			schema: {
-				id: "test-schema",
-				generateSchemaFiles: () => [
-					{
-						path: "hackkit.ts",
-						content: "export const generated = true;\n",
-					},
-				],
-			},
-		};
-
-		const result = await runDbSchemaGenerate(createConfig(database), {
-			projectRoot,
-		});
-
-		expect(result.outputPath).toBe(
-			join(projectRoot, "db/schema/hackkit.ts"),
-		);
-		await expect(readFile(result.outputPath, "utf8")).resolves.toBe(
-			"export const generated = true;\n",
-		);
-	});
-
-	it("supports an explicit output path", async () => {
-		const projectRoot = await mkdtemp(join(tmpdir(), "hackkit-schema-"));
-		const database: DatabaseAdapterFactory = {
-			create: () => ({}) as never,
-			schema: {
-				id: "test-schema",
-				generateSchemaFiles: () => [
-					{ path: "hackkit.ts", content: "// schema\n" },
-				],
-			},
-		};
-
-		const result = await runDbSchemaGenerate(createConfig(database), {
-			projectRoot,
-			output: "custom/generated.ts",
-		});
-
-		expect(result.outputPath).toBe(
-			join(projectRoot, "custom/generated.ts"),
-		);
-		await expect(readFile(result.outputPath, "utf8")).resolves.toBe(
-			"// schema\n",
-		);
-	});
-
-	it("fails when the configured database cannot generate schema", async () => {
-		const projectRoot = await mkdtemp(join(tmpdir(), "hackkit-schema-"));
-		const database: DatabaseAdapterFactory = {
-			create: () => ({}) as never,
-		};
-
-		await expect(
-			runDbSchemaGenerate(createConfig(database), { projectRoot }),
-		).rejects.toThrow(
-			"Configured database adapter does not support native schema generation.",
-		);
-	});
-});
diff --git a/packages/cli/src/__tests__/db-seed.test.ts b/packages/cli/src/__tests__/db-seed.test.ts
deleted file mode 100644
index 5eea6b7b..00000000
--- a/packages/cli/src/__tests__/db-seed.test.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import {
-	CorePermission,
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-	type DatabaseAdapterFactory,
-} from "@hackkit/core";
-import { describe, expect, it } from "vitest";
-import { runDbSeed } from "../db-seed";
-
-describe("hackkit db seed", () => {
-	it("adds configured roles once and reports later runs as skipped", async () => {
-		const registry = createPluginRegistry();
-		const databaseAdapter = createInMemoryDatabaseAdapterFromStorage(
-			registry.storage,
-			() => new Date("2026-07-16T12:00:00.000Z"),
-			() => "generated-id",
-		);
-		const database: DatabaseAdapterFactory = {
-			create: () => databaseAdapter,
-		};
-		const config = {
-			database,
-			seedRoles: [
-				{
-					id: "core.participant",
-					name: "Participant",
-					position: 10,
-					permissions: [],
-				},
-				{
-					id: "core.owner",
-					name: "Owner",
-					position: 0,
-					permissions: [CorePermission.SuperAdmin],
-				},
-			],
-		};
-
-		await expect(runDbSeed(config)).resolves.toEqual({
-			insertedRoleIds: ["core.participant", "core.owner"],
-			skippedRoleIds: [],
-		});
-		await expect(runDbSeed(config)).resolves.toEqual({
-			insertedRoleIds: [],
-			skippedRoleIds: ["core.participant", "core.owner"],
-		});
-
-		const hackkit = createHackkit({ database: databaseAdapter });
-		await expect(hackkit.roles.listRoles()).resolves.toMatchObject([
-			{ id: "core.owner", name: "Owner" },
-			{ id: "core.participant", name: "Participant" },
-		]);
-	});
-});
diff --git a/packages/cli/src/__tests__/plugin-actions-scope.test.ts b/packages/cli/src/__tests__/plugin-actions-scope.test.ts
new file mode 100644
index 00000000..cf248232
--- /dev/null
+++ b/packages/cli/src/__tests__/plugin-actions-scope.test.ts
@@ -0,0 +1,38 @@
+import ts from "typescript";
+import { expect, it, vi } from "vitest";
+import { renderPluginActionsFile } from "../plugin-sync";
+
+it("resolves each generated action's actor when called, without capturing a module-level request", async () => {
+	const source = await renderPluginActionsFile([
+		{
+			id: "example",
+			packageName: "@example/plugin",
+			actionFactory: "createExampleActions",
+			actionNames: ["submit"],
+		},
+	]);
+	const getRuntime = vi
+		.fn()
+		.mockResolvedValueOnce({ actor: "first" })
+		.mockResolvedValueOnce({ actor: "second" });
+	const imports: Record<string, object> = {
+		"@/lib/runtime": { getRuntime },
+		"@example/plugin/actions": {
+			createExampleActions: (runtime: { actor: string }) => ({
+				submit: async () => runtime.actor,
+			}),
+		},
+	};
+	const output = ts.transpileModule(source, {
+		compilerOptions: { module: ts.ModuleKind.CommonJS },
+	}).outputText;
+	const actions: Record<string, () => Promise<unknown>> = {};
+	new Function("require", "exports", output)(
+		(name: string) => imports[name],
+		actions,
+	);
+	expect(getRuntime).not.toHaveBeenCalled();
+	expect(await actions.submit()).toBe("first");
+	expect(await actions.submit()).toBe("second");
+	expect(getRuntime).toHaveBeenCalledTimes(2);
+});
diff --git a/packages/cli/src/__tests__/plugin-schema.test.ts b/packages/cli/src/__tests__/plugin-schema.test.ts
index 0d57e516..33423db5 100644
--- a/packages/cli/src/__tests__/plugin-schema.test.ts
+++ b/packages/cli/src/__tests__/plugin-schema.test.ts
@@ -1,3 +1,4 @@
+import { SqliteDriver } from "@mikro-orm/sqlite";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import type { HackkitConfig } from "@hackkit/config";
@@ -5,7 +6,6 @@ import type { HackKitPlugin } from "@hackkit/core";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 const mocks = vi.hoisted(() => ({
-	generateSchema: vi.fn(),
 	loadConfig: vi.fn(),
 	syncPlugins: vi.fn().mockResolvedValue({
 		routesWritten: 0,
@@ -14,9 +14,6 @@ const mocks = vi.hoisted(() => ({
 	}),
 }));
 
-vi.mock("../db-schema", () => ({
-	runDbSchemaGenerate: mocks.generateSchema,
-}));
 vi.mock("../cli-config", () => ({ loadConfig: mocks.loadConfig }));
 vi.mock("../plugin-sync", () => ({ runPluginSync: mocks.syncPlugins }));
 
@@ -30,11 +27,8 @@ const teamsPlugin: HackKitPlugin = {
 	id: "teams",
 	packageName: "@hackkit/plugin-teams",
 };
-const database = {
-	create() {
-		throw new Error("not used by command tests");
-	},
-};
+const database = { driver: SqliteDriver, dbName: ":memory:" };
+const auth = { secret: "test-secret-that-is-at-least-32-characters" };
 const directories: string[] = [];
 
 async function createProject(
@@ -71,26 +65,24 @@ afterEach(async () => {
 });
 
 describe("plugin schema orchestration", () => {
-	it("regenerates HackKit schema after plugin add", async () => {
+	it("adds plugin configuration and syncs routes", async () => {
 		const projectRoot = await createProject(
 			"export default { plugins: [] };\n",
 			{ "@hackkit/plugin-teams": "workspace:*" },
 		);
 		const refreshedConfig: HackkitConfig = {
 			database,
+			auth,
 			plugins: [teamsPlugin],
 		};
 		mocks.loadConfig.mockResolvedValue(refreshedConfig);
 
 		await runPluginAdd(
-			{ projectRoot, config: { database, plugins: [] } },
+			{ projectRoot, config: { database, auth, plugins: [] } },
 			"teams",
 		);
 
 		expect(mocks.syncPlugins).toHaveBeenCalledOnce();
-		expect(mocks.generateSchema).toHaveBeenCalledWith(refreshedConfig, {
-			projectRoot,
-		});
 		const configSource = await readFile(
 			join(projectRoot, "hackkit.config.ts"),
 			"utf8",
@@ -99,23 +91,20 @@ describe("plugin schema orchestration", () => {
 		expect(configSource).toContain('from "@hackkit/plugin-teams"');
 	});
 
-	it("regenerates HackKit schema after plugin removal", async () => {
+	it("removes plugin configuration and syncs routes", async () => {
 		const projectRoot = await createProject(
 			'import { teamsPlugin } from "@hackkit/plugin-teams";\nexport default { plugins: [teamsPlugin()] };\n',
 			{ "@hackkit/plugin-teams": "workspace:*" },
 		);
 		const config: HackkitConfig = {
 			database,
+			auth,
 			plugins: [teamsPlugin],
 		};
 
 		await runPluginRemove({ projectRoot, config }, "teams");
 
 		expect(mocks.syncPlugins).toHaveBeenCalledOnce();
-		expect(mocks.generateSchema).toHaveBeenCalledWith(
-			expect.objectContaining({ database, plugins: [] }),
-			{ projectRoot },
-		);
 		const configSource = await readFile(
 			join(projectRoot, "hackkit.config.ts"),
 			"utf8",
@@ -127,10 +116,9 @@ describe("plugin schema orchestration", () => {
 	it("does not generate schema during plugin sync", async () => {
 		await runPluginSyncAll({
 			projectRoot: process.cwd(),
-			config: { database, plugins: [teamsPlugin] },
+			config: { database, auth, plugins: [teamsPlugin] },
 		});
 
 		expect(mocks.syncPlugins).toHaveBeenCalledOnce();
-		expect(mocks.generateSchema).not.toHaveBeenCalled();
 	});
 });
diff --git a/packages/cli/src/cli-config.ts b/packages/cli/src/cli-config.ts
index 18c64473..f0039e31 100644
--- a/packages/cli/src/cli-config.ts
+++ b/packages/cli/src/cli-config.ts
@@ -9,9 +9,7 @@ export async function loadConfig(
 	const cwd = options.cwd ?? process.cwd();
 	const nodeEnv = process.env.NODE_ENV ?? "development";
 	const localFiles =
-		nodeEnv === "test"
-			? []
-			: [`.env.${nodeEnv}.local`, ".env.local"];
+		nodeEnv === "test" ? [] : [`.env.${nodeEnv}.local`, ".env.local"];
 	loadEnv({
 		path: [
 			...localFiles.map((file) => join(cwd, file)),
diff --git a/packages/cli/src/cli.ts b/packages/cli/src/cli.ts
index b70026b5..b4678858 100644
--- a/packages/cli/src/cli.ts
+++ b/packages/cli/src/cli.ts
@@ -27,24 +27,32 @@ db.command("seed")
 		await runDbSeed(config);
 	});
 
-db.command("schema")
-	.description("Manage the native HackKit database schema")
-	.command("generate")
-	.description("Generate the configured adapter's native HackKit schema")
+db.command("generate")
+	.description("Generate an app-owned MikroORM migration for review")
 	.option("-c, --config <path>", "path to HackKit config")
-	.option("-o, --output <path>", "schema output path")
-	.action(async (commandOptions: { config?: string; output?: string }) => {
-		const globalOptions = program.opts<{ config: string }>();
+	.option("-n, --name <name>", "migration name")
+	.action(async (options: { config?: string; name?: string }) => {
 		const config = await loadConfig(
-			commandOptions.config ?? globalOptions.config,
+			options.config ?? program.opts<{ config: string }>().config,
 		);
-		const { runDbSchemaGenerate } = await import("./db-schema");
-		await runDbSchemaGenerate(config, {
+		const { runDbMigrationGenerate } = await import("./db-migrations");
+		await runDbMigrationGenerate(config, {
 			projectRoot: process.cwd(),
-			output: commandOptions.output,
+			name: options.name,
 		});
 	});
 
+db.command("migrate")
+	.description("Apply reviewed MikroORM migrations")
+	.option("-c, --config <path>", "path to HackKit config")
+	.action(async (options: { config?: string }) => {
+		const config = await loadConfig(
+			options.config ?? program.opts<{ config: string }>().config,
+		);
+		const { runDbMigrate } = await import("./db-migrations");
+		await runDbMigrate(config);
+	});
+
 const plugins = program
 	.command("plugin")
 	.description("Manage HackKit plugins in this web app");
diff --git a/packages/cli/src/db-migrations.ts b/packages/cli/src/db-migrations.ts
new file mode 100644
index 00000000..9c398c0d
--- /dev/null
+++ b/packages/cli/src/db-migrations.ts
@@ -0,0 +1,44 @@
+import { resolve } from "node:path";
+import type { HackkitConfig } from "./config";
+import { createConfigLogger } from "./logger";
+import { withOrm } from "./orm";
+
+export type DbMigrationGenerateOptions = { projectRoot: string; name?: string };
+
+/** Write a migration for review. Applying it is a separate explicit command. */
+export async function runDbMigrationGenerate(
+	config: HackkitConfig,
+	options: DbMigrationGenerateOptions,
+) {
+	const path = config.database.migrations?.path;
+	if (!path)
+		throw new Error(
+			"Configure database.migrations.path in your app before generating migrations.",
+		);
+	return withOrm(config, async (orm) => {
+		const result = await orm.migrator.create(
+			resolve(options.projectRoot, path),
+			false,
+			false,
+			options.name,
+		);
+		createConfigLogger(config).log(
+			"info",
+			result.fileName
+				? `Generated ${result.fileName}. Review its SQL before running hackkit db migrate.`
+				: "The database schema has no changes.",
+		);
+		return result;
+	});
+}
+
+export async function runDbMigrate(config: HackkitConfig) {
+	return withOrm(config, async (orm) => {
+		const migrations = await orm.migrator.up();
+		createConfigLogger(config).log(
+			"info",
+			`Applied ${migrations.length} migration(s).`,
+		);
+		return migrations;
+	});
+}
diff --git a/packages/cli/src/db-schema.ts b/packages/cli/src/db-schema.ts
deleted file mode 100644
index 9110f43c..00000000
--- a/packages/cli/src/db-schema.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import { mkdir, writeFile } from "node:fs/promises";
-import { dirname, resolve } from "node:path";
-import { createPluginRegistry } from "@hackkit/core";
-import type { HackkitConfig } from "./config";
-import { createConfigLogger } from "./logger";
-
-export type DbSchemaGenerateOptions = {
-	projectRoot: string;
-	output?: string;
-};
-
-export type DbSchemaGenerateResult = {
-	outputPath: string;
-	adapterId: string;
-};
-
-export async function runDbSchemaGenerate(
-	config: HackkitConfig,
-	options: DbSchemaGenerateOptions,
-): Promise<DbSchemaGenerateResult> {
-	const schemaAdapter = config.database.schema;
-	if (!schemaAdapter) {
-		throw new Error(
-			"Configured database adapter does not support native schema generation.",
-		);
-	}
-
-	const registry = createPluginRegistry(config.plugins ?? []);
-	const generatedFiles = await schemaAdapter.generateSchemaFiles({
-		storage: registry.storage,
-	});
-	if (generatedFiles.length !== 1) {
-		throw new Error(
-			`Database schema adapter '${schemaAdapter.id}' must generate exactly one schema file.`,
-		);
-	}
-
-	const [generatedFile] = generatedFiles;
-	const outputPath = resolve(
-		options.projectRoot,
-		options.output ?? `db/schema/${generatedFile.path}`,
-	);
-	await mkdir(dirname(outputPath), { recursive: true });
-	await writeFile(outputPath, generatedFile.content, "utf8");
-
-	createConfigLogger(config).log(
-		"info",
-		`Generated HackKit schema at ${outputPath}.`,
-	);
-	return { outputPath, adapterId: schemaAdapter.id };
-}
diff --git a/packages/cli/src/db-seed.ts b/packages/cli/src/db-seed.ts
index 3c86f25d..c1cf67c0 100644
--- a/packages/cli/src/db-seed.ts
+++ b/packages/cli/src/db-seed.ts
@@ -1,3 +1,4 @@
+import { withOrm } from "./orm";
 import { seedRoles } from "@hackkit/core";
 import type { SeedRolesResult } from "@hackkit/core";
 import type { HackkitConfig } from "./config";
@@ -6,11 +7,15 @@ import { createConfigLogger } from "./logger";
 export type DbSeedResult = SeedRolesResult;
 
 export async function runDbSeed(config: HackkitConfig): Promise<DbSeedResult> {
-	const result = await seedRoles({
-		database: config.database,
-		plugins: config.plugins,
-		roles: config.seedRoles ?? [],
-	});
+	const result = await withOrm(config, (orm) =>
+		orm.em.transactional((em) =>
+			seedRoles({
+				em,
+				roles: config.seedRoles ?? [],
+			}),
+		),
+	);
+
 	const logger = createConfigLogger(config);
 
 	for (const roleId of result.insertedRoleIds) {
diff --git a/packages/cli/src/index.ts b/packages/cli/src/index.ts
index f0b19507..6a2843c1 100644
--- a/packages/cli/src/index.ts
+++ b/packages/cli/src/index.ts
@@ -8,11 +8,8 @@ export type {
 } from "./config";
 export { runDbSeed } from "./db-seed";
 export type { DbSeedResult } from "./db-seed";
-export { runDbSchemaGenerate } from "./db-schema";
-export type {
-	DbSchemaGenerateOptions,
-	DbSchemaGenerateResult,
-} from "./db-schema";
+export { runDbMigrationGenerate, runDbMigrate } from "./db-migrations";
+export type { DbMigrationGenerateOptions } from "./db-migrations";
 export {
 	HACKKIT_LOCKFILE,
 	createEmptyLockfile,
diff --git a/packages/cli/src/orm.ts b/packages/cli/src/orm.ts
new file mode 100644
index 00000000..411c62f2
--- /dev/null
+++ b/packages/cli/src/orm.ts
@@ -0,0 +1,22 @@
+import { MikroORM } from "@mikro-orm/core";
+import { createOrmOptions, type HackKitDriver } from "@hackkit/core";
+import { createJiti } from "jiti";
+import type { HackkitConfig } from "./config";
+
+const jiti = createJiti(import.meta.url);
+
+/** CLI commands own their connections and always release them. */
+export async function withOrm<T>(
+	config: HackkitConfig,
+	operation: (orm: MikroORM<HackKitDriver>) => Promise<T>,
+): Promise<T> {
+	const orm = await MikroORM.init({
+		...createOrmOptions(config),
+		dynamicImportProvider: (id) => jiti.import(id),
+	});
+	try {
+		return await operation(orm);
+	} finally {
+		await orm.close();
+	}
+}
diff --git a/packages/cli/src/plugin-commands.ts b/packages/cli/src/plugin-commands.ts
index 87525080..d9e84e57 100644
--- a/packages/cli/src/plugin-commands.ts
+++ b/packages/cli/src/plugin-commands.ts
@@ -2,7 +2,6 @@ import { readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { execSync } from "node:child_process";
 import type { HackkitConfig } from "./config";
-import { runDbSchemaGenerate } from "./db-schema";
 import { createConfigLogger } from "./logger";
 import { PLUGIN_PACKAGE_BY_ID, loadPluginFactory } from "./plugin-manifest";
 import { runPluginSync } from "./plugin-sync";
@@ -113,14 +112,17 @@ export async function runPluginAdd(
 	);
 
 	const { loadConfig } = await import("./cli-config");
-	const refreshedConfig = await loadConfig("hackkit.config.ts");
+	const refreshedConfig = await loadConfig("hackkit.config.ts", {
+		cwd: context.projectRoot,
+	});
 	await runPluginSyncAll({
 		projectRoot: context.projectRoot,
 		config: refreshedConfig,
 	});
-	await runDbSchemaGenerate(refreshedConfig, {
-		projectRoot: context.projectRoot,
-	});
+	createConfigLogger(context.config).log(
+		"info",
+		"Plugin configuration updated. Generate and review a database migration with hackkit db generate.",
+	);
 }
 
 export async function runPluginRemove(
@@ -157,9 +159,10 @@ export async function runPluginRemove(
 		projectRoot: context.projectRoot,
 		plugins: nextConfig.plugins ?? [],
 	});
-	await runDbSchemaGenerate(nextConfig, {
-		projectRoot: context.projectRoot,
-	});
+	createConfigLogger(context.config).log(
+		"info",
+		"Plugin configuration updated. Generate and review a database migration with hackkit db generate.",
+	);
 }
 
 export async function runPluginSyncAll(
diff --git a/packages/cli/src/plugin-sync.ts b/packages/cli/src/plugin-sync.ts
index a9c7526b..919b7f64 100644
--- a/packages/cli/src/plugin-sync.ts
+++ b/packages/cli/src/plugin-sync.ts
@@ -1,4 +1,11 @@
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { format } from "prettier";
+import {
+	existsSync,
+	mkdirSync,
+	readFileSync,
+	rmSync,
+	writeFileSync,
+} from "node:fs";
 import { dirname, join } from "node:path";
 import type { HackKitPlugin } from "@hackkit/core";
 import {
@@ -70,14 +77,14 @@ function renderRouteStub(
 	return lines.join("\n");
 }
 
-function renderPluginActionsFile(
+export async function renderPluginActionsFile(
 	plugins: readonly {
 		id: string;
 		packageName: string;
 		actionFactory?: string;
 		actionNames?: readonly string[];
 	}[],
-): string {
+): Promise<string> {
 	const lines = [
 		'"use server";',
 		"",
@@ -89,7 +96,7 @@ function renderPluginActionsFile(
 	for (const plugin of plugins) {
 		if (!plugin.actionFactory || !plugin.actionNames?.length) continue;
 		lines.push(
-			`import { ${plugin.actionFactory} } from "${plugin.packageName}";`,
+			`import { ${plugin.actionFactory} } from "${plugin.packageName}/actions";`,
 		);
 	}
 
@@ -97,17 +104,14 @@ function renderPluginActionsFile(
 
 	for (const plugin of plugins) {
 		if (!plugin.actionFactory || !plugin.actionNames?.length) continue;
-		const factoryVar = `${plugin.id}ActionsPromise`;
-		lines.push(
-			`const ${factoryVar} = getRuntime().then((runtime) =>`,
-			`	${plugin.actionFactory}(runtime),`,
-			`);`,
-			"",
-		);
 		for (const actionName of plugin.actionNames) {
 			lines.push(
-				`export async function ${actionName}(...args: Parameters<Awaited<ReturnType<typeof ${plugin.actionFactory}>>["${actionName}"]>) {`,
-				`	const actions = await ${factoryVar};`,
+				`export async function ${actionName}(`,
+				`\t...args: Parameters<`,
+				`\t\tAwaited<ReturnType<typeof ${plugin.actionFactory}>>["${actionName}"]`,
+				`\t>`,
+				`) {`,
+				`	const actions = await ${plugin.actionFactory}(await getRuntime());`,
 				`	return actions.${actionName}(...args);`,
 				`}`,
 				"",
@@ -115,7 +119,11 @@ function renderPluginActionsFile(
 		}
 	}
 
-	return lines.join("\n");
+	return format(lines.join("\n"), {
+		parser: "typescript",
+		useTabs: true,
+		tabWidth: 4,
+	});
 }
 
 function collectRouteClaims(
@@ -171,7 +179,10 @@ export async function runPluginSync(
 			id: resolved.plugin.id,
 			package: resolved.packageName,
 			version: resolved.version,
-			routes: resolved.routes.map(({ host, source }) => ({ host, source })),
+			routes: resolved.routes.map(({ host, source }) => ({
+				host,
+				source,
+			})),
 			actions: [...(resolved.plugin.actionNames ?? [])],
 		})),
 	};
@@ -188,10 +199,7 @@ export async function runPluginSync(
 		for (const route of resolved.routes) {
 			const hostPath = join(projectRoot, route.host);
 			nextStubPaths.add(normalizeAppPath(route.host));
-			writeGeneratedFile(
-				hostPath,
-				renderRouteStub(lockPlugin, route),
-			);
+			writeGeneratedFile(hostPath, renderRouteStub(lockPlugin, route));
 			routesWritten += 1;
 		}
 	}
@@ -211,7 +219,7 @@ export async function runPluginSync(
 	}
 
 	const actionsPath = join(projectRoot, "app/hackkit-plugin-actions.ts");
-	const actionsContent = renderPluginActionsFile(
+	const actionsContent = await renderPluginActionsFile(
 		resolvedPlugins.map((resolved) => ({
 			id: resolved.plugin.id,
 			packageName: resolved.packageName,
diff --git a/packages/cli/src/protected-paths.ts b/packages/cli/src/protected-paths.ts
index c4ceb235..ad98123d 100644
--- a/packages/cli/src/protected-paths.ts
+++ b/packages/cli/src/protected-paths.ts
@@ -33,7 +33,9 @@ function matchesProtectedPrefix(
 	if (protectedPath.endsWith("/")) {
 		return hostPath.startsWith(protectedPath);
 	}
-	return hostPath === protectedPath || hostPath.startsWith(`${protectedPath}/`);
+	return (
+		hostPath === protectedPath || hostPath.startsWith(`${protectedPath}/`)
+	);
 }
 
 export function isProtectedPath(
diff --git a/packages/cli/tsconfig.json b/packages/cli/tsconfig.json
index e237f6af..79afa63a 100644
--- a/packages/cli/tsconfig.json
+++ b/packages/cli/tsconfig.json
@@ -2,14 +2,14 @@
   "extends": "../tsconfig/base.json",
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ES2022",
+    "module": "ESNext",
     "moduleResolution": "Bundler",
     "outDir": "./dist",
     "rootDir": "./src",
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false
+    "noEmit": true
   },
   "include": ["src/**/*.ts"],
   "exclude": ["node_modules", "dist"]
diff --git a/packages/cli/tsdown.config.ts b/packages/cli/tsdown.config.ts
deleted file mode 100644
index 7353cf7f..00000000
--- a/packages/cli/tsdown.config.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-import { defineConfig } from "tsdown";
-
-export default defineConfig({
-	entry: ["src/cli.ts", "src/index.ts"],
-	format: "esm",
-	dts: true,
-	sourcemap: true,
-	clean: true,
-	target: "es2022",
-	platform: "node",
-	fixedExtension: false,
-	deps: {
-		alwaysBundle: ["@hackkit/core"],
-		onlyBundle: false,
-	},
-});
diff --git a/packages/config/package.json b/packages/config/package.json
index f23a80d7..a659bf1f 100644
--- a/packages/config/package.json
+++ b/packages/config/package.json
@@ -27,9 +27,11 @@
     "jiti": "^2.4.2"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "@types/node": "22.18.6",
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "@mikro-orm/sqlite": "7.2.1",
+    "tsup": "^8.5.1"
   },
   "license": "MIT"
 }
diff --git a/packages/config/src/__tests__/config.test.ts b/packages/config/src/__tests__/config.test.ts
index a0bbf55f..98ba3e18 100644
--- a/packages/config/src/__tests__/config.test.ts
+++ b/packages/config/src/__tests__/config.test.ts
@@ -1,3 +1,4 @@
+import { SqliteDriver } from "@mikro-orm/sqlite";
 import { describe, expect, it } from "vitest";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -9,10 +10,11 @@ import {
 
 describe("HackKit config", () => {
 	it("normalizes optional collection fields", () => {
-		const database = { create: () => ({}) as never };
+		const database = { driver: SqliteDriver, dbName: ":memory:" };
 		const config = resolveHackkitConfig(
 			defineHackkitConfig({
 				database,
+				auth: { secret: "test-secret-that-is-at-least-32-characters" },
 			}),
 		);
 
diff --git a/packages/config/src/index.ts b/packages/config/src/index.ts
index 8d9635b3..a1727883 100644
--- a/packages/config/src/index.ts
+++ b/packages/config/src/index.ts
@@ -1,5 +1,7 @@
 import type {
-	DatabaseAdapterFactory,
+	HackKitDatabaseOptions,
+	HackKitAuthOptions,
+	InitializeHackkitOptions,
 	EventTypesInput,
 	HackKitLoggerOptions,
 	GroupsInput,
@@ -47,7 +49,9 @@ export type HackerRegistrationOptions = {
 
 export type HackkitConfig = {
 	plugins?: readonly HackKitPlugin[];
-	database: DatabaseAdapterFactory;
+	database: HackKitDatabaseOptions;
+	auth: HackKitAuthOptions;
+	entities?: InitializeHackkitOptions["entities"];
 	userDataOptions?: UserDataOptionsInput;
 	hackerRegistrationOptions?: HackerRegistrationOptions;
 	eventTypes?: EventTypesInput;
@@ -75,9 +79,13 @@ export function defineHackkitConfig<const TConfig extends HackkitConfig>(
 export function resolveHackkitConfig(
 	config: HackkitConfig,
 ): NormalizedHackkitConfig {
-	if (!config?.database) {
-		throw new Error("HackKit config must include a database adapter.");
+	if (!config?.database?.driver) {
+		throw new Error(
+			"HackKit config must include native MikroORM database options and a driver.",
+		);
 	}
+	if (!config.auth)
+		throw new Error("HackKit config must include Better Auth options.");
 	return {
 		...config,
 		plugins: config.plugins ?? [],
diff --git a/packages/config/tsconfig.json b/packages/config/tsconfig.json
index 16e73196..55a2d42e 100644
--- a/packages/config/tsconfig.json
+++ b/packages/config/tsconfig.json
@@ -2,14 +2,14 @@
   "extends": "../tsconfig/base.json",
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ES2022",
+    "module": "ESNext",
     "moduleResolution": "Bundler",
     "rootDir": "src",
     "outDir": "dist",
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false
+    "noEmit": true
   },
   "include": ["src/**/*.ts"],
   "exclude": ["dist", "node_modules"]
diff --git a/packages/core/package.json b/packages/core/package.json
index 49d43149..3db7ef78 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -9,24 +9,40 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing.d.ts",
+      "import": "./dist/testing.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
     }
   },
   "files": [
     "dist"
   ],
   "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
+    "build": "tsup",
+    "dev": "tsup --watch",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run"
   },
   "dependencies": {
+    "@a77ay/better-auth-mikro-orm": "0.1.1",
+    "@mikro-orm/core": "7.2.1",
+    "@mikro-orm/libsql": "7.2.1",
+    "@mikro-orm/migrations": "7.2.1",
+    "@mikro-orm/mysql": "7.2.1",
+    "@mikro-orm/postgresql": "7.2.1",
+    "@mikro-orm/sqlite": "7.2.1",
+    "better-auth": "1.7.6",
     "zod": "^3.25.67"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/core/src/__tests__/admin-console.test.ts b/packages/core/src/__tests__/admin-console.test.ts
index 7c28476a..7cd68288 100644
--- a/packages/core/src/__tests__/admin-console.test.ts
+++ b/packages/core/src/__tests__/admin-console.test.ts
@@ -1,33 +1,15 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
 import { describe, expect, it } from "vitest";
-import { createInMemoryDatabaseAdapterFromStorage } from "../adapters/db/memory";
-import { createHackkit } from "../hackkit";
 import { CorePermission } from "../permissions";
-import { createPluginRegistry } from "../plugins";
 import { seedTestOwner } from "./seed-test-owner";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(
-		createHackkit({
-			database: db,
-			clock: now,
-			id,
-		}),
-		{ database: db },
-	);
-}
-
 describe("admin console reads", () => {
 	it("hydrates admin user records and exports flattened rows", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		const ownerRole = await seedTestOwner(hackkit);
 		const hackerRole = await hackkit.roles.createRole({
 			actorAuthId: "owner-auth",
@@ -37,11 +19,10 @@ describe("admin console reads", () => {
 			permissions: [CorePermission.HackersRegister],
 		});
 
-		await hackkit.users.ensureUser({
+		await createTestUser(hackkit, {
 			authId: "participant-auth",
 			email: "participant@example.com",
-			firstName: "Pat",
-			lastName: "Participant",
+			name: "Pat Participant",
 		});
 		await hackkit.userData.completeUserData({
 			authId: "participant-auth",
@@ -65,7 +46,7 @@ describe("admin console reads", () => {
 			hackTag: "Pat",
 		});
 		await hackkit.hackers.registerHacker({
-			authId: "participant-auth",
+			userId: "participant-auth",
 			university: "Hack University",
 			major: "Computer Science",
 			levelOfStudy: "Undergraduate",
@@ -82,7 +63,7 @@ describe("admin console reads", () => {
 			actorAuthId: "owner-auth",
 			hackTag: "PAT",
 		});
-		expect(byTag?.user.authId).toBe("participant-auth");
+		expect(byTag?.user.id).toBe("participant-auth");
 		expect(byTag?.role?.name).toBe("Hacker");
 		expect(byTag?.hacker?.university).toBe("Hack University");
 
@@ -98,7 +79,7 @@ describe("admin console reads", () => {
 			actorAuthId: "owner-auth",
 		});
 		const participantRow = rows.find(
-			(row) => row.authId === "participant-auth",
+			(row) => row.id === "participant-auth",
 		);
 		expect(participantRow).toMatchObject({
 			email: "participant@example.com",
diff --git a/packages/core/src/__tests__/check-in.test.ts b/packages/core/src/__tests__/check-in.test.ts
index 9c21e4c6..00521199 100644
--- a/packages/core/src/__tests__/check-in.test.ts
+++ b/packages/core/src/__tests__/check-in.test.ts
@@ -1,39 +1,20 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
 import { describe, expect, it } from "vitest";
-import { createPluginRegistry } from "../plugins";
-import { createInMemoryDatabaseAdapterFromStorage } from "../adapters/db/memory";
-import { createHackkit } from "../hackkit";
 import { CorePermission } from "../permissions";
 import { seedTestOwner } from "./seed-test-owner";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(
-		createHackkit({
-			database: db,
-			clock: now,
-			id,
-		}),
-		{ database: db },
-	);
-}
-
 describe("hackkit access control and check-in", () => {
 	it("records hackathon check-in once", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "volunteer-auth");
-		await hackkit.users.ensureUser({
+		await createTestUser(hackkit, {
 			authId: "participant-auth",
 			email: "p@example.com",
-			firstName: "Pat",
-			lastName: "Participant",
+			name: "Pat Participant",
 		});
 
 		const checkedIn = await hackkit.users.checkIn({
@@ -51,13 +32,12 @@ describe("hackkit access control and check-in", () => {
 	});
 
 	it("records event scans as separate rows", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "volunteer-auth");
-		await hackkit.users.ensureUser({
+		await createTestUser(hackkit, {
 			authId: "participant-auth",
 			email: "p@example.com",
-			firstName: "Pat",
-			lastName: "Participant",
+			name: "Pat Participant",
 		});
 
 		const event = await hackkit.events.createEvent({
@@ -88,12 +68,11 @@ describe("hackkit access control and check-in", () => {
 	});
 
 	it("enforces permissions through accessControl", async () => {
-		const hackkit = createTestHackkit();
-		await hackkit.users.ensureUser({
+		const hackkit = await createTestHackkit();
+		await createTestUser(hackkit, {
 			authId: "no-role-auth",
 			email: "n@example.com",
-			firstName: "No",
-			lastName: "Role",
+			name: "No Role",
 		});
 
 		await expect(
diff --git a/packages/core/src/__tests__/groups.test.ts b/packages/core/src/__tests__/groups.test.ts
index 8200ee8e..140ce8e2 100644
--- a/packages/core/src/__tests__/groups.test.ts
+++ b/packages/core/src/__tests__/groups.test.ts
@@ -1,44 +1,21 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
 import { describe, expect, it } from "vitest";
-import { createInMemoryDatabaseAdapterFromStorage } from "../adapters/db/memory";
-import { createHackkit } from "../hackkit";
-import { createPluginRegistry } from "../plugins";
 import { CoreSetting } from "../settings";
 import { seedTestOwner } from "./seed-test-owner";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(
-		createHackkit({
-			database: db,
-			clock: now,
-			id,
-			groups: [
-				{ id: "alpha", label: "Alpha", discordRoleName: "Alpha Role" },
-				{ id: "beta", label: "Beta", discordRoleName: "Beta Role" },
-			],
-		}),
-		{ database: db },
-	);
-}
-
 async function seedHacker(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	authId: string,
 	group?: string,
 ) {
-	await hackkit.users.ensureUser({
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: "Test",
-		lastName: "Hacker",
+		name: "Test Hacker",
 	});
 	await hackkit.userData.completeUserData({
 		authId,
@@ -53,7 +30,7 @@ async function seedHacker(
 		isEmailable: true,
 	});
 	await hackkit.hackers.registerHacker({
-		authId,
+		userId: authId,
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "Undergraduate",
@@ -65,7 +42,12 @@ async function seedHacker(
 
 describe("groups", () => {
 	it("assigns approved hackers across enabled groups without overwriting existing groups", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit({
+			groups: [
+				{ id: "alpha", label: "Alpha", discordRoleName: "Alpha Role" },
+				{ id: "beta", label: "Beta", discordRoleName: "Beta Role" },
+			],
+		});
 		await seedTestOwner(hackkit);
 		await hackkit.settings.setMany({
 			actorAuthId: "owner-auth",
diff --git a/packages/core/src/__tests__/notifications.test.ts b/packages/core/src/__tests__/notifications.test.ts
index 9275cf53..0d4ce16e 100644
--- a/packages/core/src/__tests__/notifications.test.ts
+++ b/packages/core/src/__tests__/notifications.test.ts
@@ -1,28 +1,19 @@
-import { describe, expect, it } from "vitest";
 import {
-	CoreNotificationKind,
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-	type NotificationChannel,
-} from "../index";
-
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return createHackkit({ database: db, clock: now, id });
-}
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
+import { describe, expect, it } from "vitest";
+import { CoreNotificationKind, type NotificationChannel } from "../index";
 
 describe("notifications", () => {
 	it("queues typed core intents and reuses idempotent requests", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
+		await createTestUser(hackkit, {
+			authId: "hacker-auth",
+			email: "hacker@example.com",
+			name: "Test Hacker",
+		});
 
 		const intent = await hackkit.notifications.queueIntent({
 			kind: CoreNotificationKind.UserApproved,
@@ -51,7 +42,12 @@ describe("notifications", () => {
 	});
 
 	it("records one delivery attempt per channel and updates intent status", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
+		await createTestUser(hackkit, {
+			authId: "hacker-auth",
+			email: "hacker@example.com",
+			name: "Test Hacker",
+		});
 		const intent = await hackkit.notifications.queueIntent({
 			kind: "sample.custom",
 			payload: { authId: "hacker-auth" },
@@ -80,7 +76,9 @@ describe("notifications", () => {
 			status: "delivered",
 			externalId: "message-1",
 		});
-		await expect(hackkit.notifications.getIntent(intent.id)).resolves.toMatchObject({
+		await expect(
+			hackkit.notifications.getIntent(intent.id),
+		).resolves.toMatchObject({
 			status: "delivered",
 		});
 		await expect(
@@ -88,3 +86,39 @@ describe("notifications", () => {
 		).resolves.toHaveLength(1);
 	});
 });
+
+it("claims each pending intent once across concurrent delivery workers", async () => {
+	const hackkit = await createTestHackkit();
+	const intent = await hackkit.notifications.queueIntent({
+		kind: "test.delivery",
+		payload: {},
+	});
+	let sends = 0;
+	const channels = [
+		{
+			id: "test",
+			async deliver() {
+				sends++;
+				return { status: "delivered" as const };
+			},
+		},
+	];
+	const results = await Promise.all(
+		[1, 2].map(() =>
+			hackkit.runtime
+				.createScope()
+				.hackkit.notifications.deliverPending({ channels }),
+		),
+	);
+	expect(sends).toBe(1);
+	expect(
+		results.reduce((sum, result) => sum + result.intentsProcessed, 0),
+	).toBe(1);
+	const fresh = hackkit.runtime.createScope().hackkit;
+	expect(
+		await fresh.notifications.listDeliveryAttempts(intent.id),
+	).toHaveLength(1);
+	expect(await fresh.notifications.getIntent(intent.id)).toMatchObject({
+		status: "delivered",
+	});
+});
diff --git a/packages/core/src/__tests__/public-profile.test.ts b/packages/core/src/__tests__/public-profile.test.ts
index 921f6109..09847050 100644
--- a/packages/core/src/__tests__/public-profile.test.ts
+++ b/packages/core/src/__tests__/public-profile.test.ts
@@ -1,26 +1,15 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
 import { describe, expect, it } from "vitest";
-import { createInMemoryDatabaseAdapterFromStorage } from "../adapters/db/memory";
-import { createHackkit } from "../hackkit";
-import { createPluginRegistry } from "../plugins";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	const id = () => "id";
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return createHackkit({ database: db, clock: now, id });
-}
-
-async function seedUser(hackkit: ReturnType<typeof createHackkit>) {
-	await hackkit.users.ensureUser({
+async function seedUser(hackkit: TestHackkit) {
+	await createTestUser(hackkit, {
 		authId: "hacker-auth",
 		email: "hacker@example.com",
-		firstName: "Hack",
-		lastName: "Er",
+		name: "Hack Er",
 	});
 	await hackkit.userData.completeUserData({
 		authId: "hacker-auth",
@@ -35,7 +24,7 @@ async function seedUser(hackkit: ReturnType<typeof createHackkit>) {
 		isEmailable: true,
 	});
 	await hackkit.hackers.registerHacker({
-		authId: "hacker-auth",
+		userId: "hacker-auth",
 		university: "Test U",
 		major: "Computer Science",
 		levelOfStudy: "Senior",
@@ -47,7 +36,7 @@ async function seedUser(hackkit: ReturnType<typeof createHackkit>) {
 
 describe("public profiles", () => {
 	it("returns Core-owned profile fields by HackTag when searchable", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedUser(hackkit);
 
 		await hackkit.users.updateProfile({
@@ -61,8 +50,10 @@ describe("public profiles", () => {
 			isProfileSearchable: true,
 		});
 
-		const profile = await hackkit.users.getPublicProfileByHackTag("hackerone");
+		const profile =
+			await hackkit.users.getPublicProfileByHackTag("hackerone");
 
+		expect(profile?.user.id).toBe("hacker-auth");
 		expect(profile?.user.hackTag).toBe("hackerone");
 		expect(profile?.user.skills).toEqual(["typescript", "design"]);
 		expect(profile?.user.bio).toBe("I like building useful things.");
@@ -70,7 +61,7 @@ describe("public profiles", () => {
 	});
 
 	it("hides public profiles when searchability is disabled", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedUser(hackkit);
 		await hackkit.users.updateProfile({
 			authId: "hacker-auth",
diff --git a/packages/core/src/__tests__/register-hacker.test.ts b/packages/core/src/__tests__/register-hacker.test.ts
index 9c1ed726..f9d1b5cf 100644
--- a/packages/core/src/__tests__/register-hacker.test.ts
+++ b/packages/core/src/__tests__/register-hacker.test.ts
@@ -1,38 +1,15 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
 import { describe, expect, it } from "vitest";
-import { createPluginRegistry } from "../plugins";
-import { createInMemoryDatabaseAdapterFromStorage } from "../adapters/db/memory";
-import { createHackkit } from "../hackkit";
 import { CorePermission } from "../permissions";
 import { CoreSetting } from "../settings";
 import { seedTestOwner } from "./seed-test-owner";
 
-function createTestHackkit(
-	options: {
-		defaultCompetitorRoleId?: string;
-	} = {},
-) {
-	const registry = createPluginRegistry();
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(
-		createHackkit({
-			database: db,
-			clock: now,
-			id,
-			defaultCompetitorRoleId: options.defaultCompetitorRoleId,
-		}),
-		{ database: db },
-	);
-}
-
 async function seedParticipantRole(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	roleId = "core.participant",
 ) {
 	return hackkit.roles.createRole({
@@ -45,14 +22,14 @@ async function seedParticipantRole(
 }
 
 async function setRequireApproval(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	requireApproval: boolean,
 ) {
 	await setSetting(hackkit, CoreSetting.RequireApproval, requireApproval);
 }
 
 async function setSetting(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	key: CoreSetting,
 	value: boolean | number,
 ) {
@@ -64,15 +41,14 @@ async function setSetting(
 }
 
 async function seedUserWithData(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	authId = "hacker-auth",
 	hackTag = "hacker1",
 ) {
-	await hackkit.users.ensureUser({
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: "Hack",
-		lastName: "Er",
+		name: "Hack Er",
 	});
 	await hackkit.users.claimHackTag({
 		authId,
@@ -92,12 +68,9 @@ async function seedUserWithData(
 	});
 }
 
-async function registerHacker(
-	hackkit: ReturnType<typeof createHackkit>,
-	authId = "hacker-auth",
-) {
+async function registerHacker(hackkit: TestHackkit, authId = "hacker-auth") {
 	return hackkit.hackers.registerHacker({
-		authId,
+		userId: authId,
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "undergraduate",
@@ -108,7 +81,7 @@ async function registerHacker(
 
 describe("registerHacker onboarding side effects", () => {
 	it("assigns default role and auto-approves when requireApproval is false", async () => {
-		const hackkit = createTestHackkit({
+		const hackkit = await createTestHackkit({
 			defaultCompetitorRoleId: "core.participant",
 		});
 		await seedTestOwner(hackkit, "admin-auth");
@@ -116,7 +89,7 @@ describe("registerHacker onboarding side effects", () => {
 		await seedUserWithData(hackkit);
 
 		await hackkit.hackers.registerHacker({
-			authId: "hacker-auth",
+			userId: "hacker-auth",
 			university: "Test U",
 			major: "CS",
 			levelOfStudy: "undergraduate",
@@ -127,10 +100,13 @@ describe("registerHacker onboarding side effects", () => {
 		const user = await hackkit.users.getUser("hacker-auth");
 		expect(user?.roleId).toBe("core.participant");
 		expect(user?.isApproved).toBe(true);
+		expect((await hackkit.hackers.getHacker("hacker-auth"))?.userId).toBe(
+			user?.id,
+		);
 	});
 
 	it("persists app-relative stored file references as resumeUrl", async () => {
-		const hackkit = createTestHackkit({
+		const hackkit = await createTestHackkit({
 			defaultCompetitorRoleId: "core.participant",
 		});
 		await seedTestOwner(hackkit, "admin-auth");
@@ -139,7 +115,7 @@ describe("registerHacker onboarding side effects", () => {
 
 		const resumeUrl = "/api/files/view?key=resumes%2Fabc.pdf";
 		await hackkit.hackers.registerHacker({
-			authId: "hacker-auth",
+			userId: "hacker-auth",
 			university: "Test U",
 			major: "CS",
 			levelOfStudy: "undergraduate",
@@ -153,7 +129,7 @@ describe("registerHacker onboarding side effects", () => {
 	});
 
 	it("assigns default role but leaves user unapproved when requireApproval is true", async () => {
-		const hackkit = createTestHackkit({
+		const hackkit = await createTestHackkit({
 			defaultCompetitorRoleId: "core.participant",
 		});
 		await seedTestOwner(hackkit, "admin-auth");
@@ -162,7 +138,7 @@ describe("registerHacker onboarding side effects", () => {
 		await seedUserWithData(hackkit);
 
 		await hackkit.hackers.registerHacker({
-			authId: "hacker-auth",
+			userId: "hacker-auth",
 			university: "Test U",
 			major: "CS",
 			levelOfStudy: "undergraduate",
@@ -176,7 +152,7 @@ describe("registerHacker onboarding side effects", () => {
 	});
 
 	it("blocks first-time Hacker Registration when registration is closed but allows updates", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await seedUserWithData(hackkit);
 
@@ -189,7 +165,7 @@ describe("registerHacker onboarding side effects", () => {
 		await registerHacker(hackkit);
 		await setSetting(hackkit, CoreSetting.RegistrationOpen, false);
 		await hackkit.hackers.registerHacker({
-			authId: "hacker-auth",
+			userId: "hacker-auth",
 			university: "Updated U",
 			major: "CS",
 			levelOfStudy: "undergraduate",
@@ -202,7 +178,7 @@ describe("registerHacker onboarding side effects", () => {
 	});
 
 	it("blocks new Hacker Registration after maximum registrations is reached", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await setSetting(hackkit, CoreSetting.MaximumRegistrations, 1);
 		await seedUserWithData(hackkit, "first-auth", "first");
@@ -217,7 +193,7 @@ describe("registerHacker onboarding side effects", () => {
 	});
 
 	it("blocks auto-approval when Hackathon Capacity is reached", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await setSetting(hackkit, CoreSetting.HackathonCapacity, 1);
 		await seedUserWithData(hackkit, "first-auth", "first");
@@ -232,7 +208,7 @@ describe("registerHacker onboarding side effects", () => {
 	});
 
 	it("blocks manual Organiser Approval when Hackathon Capacity is reached", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await setRequireApproval(hackkit, true);
 		await setSetting(hackkit, CoreSetting.HackathonCapacity, 1);
diff --git a/packages/core/src/__tests__/resume-url-schema.test.ts b/packages/core/src/__tests__/resume-url-schema.test.ts
index 1b9ca5e1..998acac4 100644
--- a/packages/core/src/__tests__/resume-url-schema.test.ts
+++ b/packages/core/src/__tests__/resume-url-schema.test.ts
@@ -2,7 +2,7 @@ import { describe, expect, it } from "vitest";
 import { registerHackerSchema } from "../schemas";
 
 const base = {
-	authId: "hacker-auth",
+	userId: "hacker-auth",
 	university: "Test U",
 	major: "CS",
 	levelOfStudy: "undergraduate",
diff --git a/packages/core/src/__tests__/rsvp.test.ts b/packages/core/src/__tests__/rsvp.test.ts
index 28ccbd9c..c1c14ec2 100644
--- a/packages/core/src/__tests__/rsvp.test.ts
+++ b/packages/core/src/__tests__/rsvp.test.ts
@@ -1,34 +1,14 @@
-import { describe, expect, it } from "vitest";
 import {
-	CoreNotificationKind,
-	CoreSetting,
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-} from "../index";
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "../testing";
+import { describe, expect, it } from "vitest";
+import { CoreNotificationKind, CoreSetting } from "../index";
 import { seedTestOwner } from "./seed-test-owner";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	let timestamp = 0;
-	const now = () =>
-		new Date(
-			`2026-05-24T12:00:${String(timestamp++).padStart(2, "0")}.000Z`,
-		);
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(createHackkit({ database: db, clock: now, id }), {
-		database: db,
-	});
-}
-
 async function setSetting(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit,
 	key: CoreSetting,
 	value: boolean | number,
 ) {
@@ -39,15 +19,11 @@ async function setSetting(
 	});
 }
 
-async function seedApprovedHacker(
-	hackkit: ReturnType<typeof createHackkit>,
-	authId: string,
-) {
-	await hackkit.users.ensureUser({
+async function seedApprovedHacker(hackkit: TestHackkit, authId: string) {
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: authId,
-		lastName: "Hacker",
+		name: `${authId} Hacker`,
 	});
 	await hackkit.userData.completeUserData({
 		authId,
@@ -62,7 +38,7 @@ async function seedApprovedHacker(
 		isEmailable: true,
 	});
 	await hackkit.hackers.registerHacker({
-		authId,
+		userId: authId,
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "undergraduate",
@@ -73,7 +49,7 @@ async function seedApprovedHacker(
 
 describe("RSVP", () => {
 	it("requires RSVPs to be open and limited to approved hackers", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await seedApprovedHacker(hackkit, "hacker-auth");
 
@@ -82,11 +58,10 @@ describe("RSVP", () => {
 		).rejects.toMatchObject({ code: "INVALID_OPERATION" });
 
 		await setSetting(hackkit, CoreSetting.RsvpOpen, true);
-		await hackkit.users.ensureUser({
+		await createTestUser(hackkit, {
 			authId: "unregistered-auth",
 			email: "unregistered@example.com",
-			firstName: "Unregistered",
-			lastName: "User",
+			name: "Unregistered User",
 		});
 		await expect(
 			hackkit.rsvp.confirm({ authId: "unregistered-auth" }),
@@ -100,7 +75,7 @@ describe("RSVP", () => {
 	});
 
 	it("places over-limit hackers on an ordered waitlist and queues intents", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await setSetting(hackkit, CoreSetting.RsvpOpen, true);
 		await setSetting(hackkit, CoreSetting.RsvpLimit, 1);
@@ -138,7 +113,7 @@ describe("RSVP", () => {
 	});
 
 	it("lets admins cancel and promote waitlisted RSVPs", async () => {
-		const hackkit = createTestHackkit();
+		const hackkit = await createTestHackkit();
 		await seedTestOwner(hackkit, "admin-auth");
 		await setSetting(hackkit, CoreSetting.RsvpOpen, true);
 		await setSetting(hackkit, CoreSetting.RsvpLimit, 1);
diff --git a/packages/core/src/__tests__/seed-test-owner.ts b/packages/core/src/__tests__/seed-test-owner.ts
index c47152e1..be06071e 100644
--- a/packages/core/src/__tests__/seed-test-owner.ts
+++ b/packages/core/src/__tests__/seed-test-owner.ts
@@ -1,19 +1,16 @@
-import type { DatabaseAdapter } from "../database";
-import type { HackKit } from "../hackkit";
+import { createTestUser, type TestHackkit } from "../testing";
 import { coreModels } from "../models";
 import { CorePermission } from "../permissions";
 import { seedRoles } from "../seed";
 
-export type TestHackkit = HackKit & {
-	database: DatabaseAdapter;
-};
+export type { TestHackkit } from "../testing";
 
 export async function seedTestOwner(
 	hackkit: TestHackkit,
 	authId = "owner-auth",
 ) {
 	await seedRoles({
-		database: hackkit.database,
+		em: hackkit.em,
 		roles: [
 			{
 				id: "core.owner",
@@ -23,16 +20,15 @@ export async function seedTestOwner(
 			},
 		],
 	});
-	await hackkit.users.ensureUser({
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: "Test",
-		lastName: "Owner",
+		name: "Test Owner",
 	});
-	await hackkit.database.update(
-		coreModels.user,
-		{ authId },
-		{ roleId: "core.owner", updatedAt: new Date() },
-	);
+	const owner = await hackkit.em.findOneOrFail(coreModels.user, {
+		id: authId,
+	});
+	owner.roleId = "core.owner";
+	await hackkit.em.flush();
 	return (await hackkit.roles.getRole("core.owner"))!;
 }
diff --git a/packages/core/src/adapters/auth.ts b/packages/core/src/adapters/auth.ts
deleted file mode 100644
index e1d73929..00000000
--- a/packages/core/src/adapters/auth.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { AuthId } from "../types";
-
-export type AuthSession = {
-	user: {
-		id: string;
-		email: string;
-		name: string;
-		image?: string | null;
-	};
-};
-
-export type AuthIdentity = {
-	email: string;
-	firstName: string;
-	lastName: string;
-	profilePhotoUrl?: string;
-};
-
-export type AuthAdapter = {
-	getSession(): Promise<AuthSession | null>;
-	toAuthId(session: AuthSession): AuthId;
-	getIdentity(session: AuthSession): AuthIdentity;
-};
diff --git a/packages/core/src/adapters/db/memory.ts b/packages/core/src/adapters/db/memory.ts
deleted file mode 100644
index 300f040a..00000000
--- a/packages/core/src/adapters/db/memory.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import type {
-	DatabaseAdapter,
-	DatabaseAdapterFactory,
-	DatabaseAdapterFactoryContext,
-	FindManyOptions,
-	InferInsert,
-	InferSelect,
-	Model,
-	StorageRegistry,
-} from "../../database";
-
-type Row = Record<string, unknown>;
-
-function applyDefaults<TModel extends Model>(
-	model: TModel,
-	value: InferInsert<TModel>,
-	context: DatabaseAdapterFactoryContext,
-): InferSelect<TModel> {
-	const row: Record<string, unknown> = { ...value };
-
-	for (const [name, field] of Object.entries(model.schema.fields)) {
-		if (row[name] !== undefined) continue;
-
-		const defaultValue = field.defaultValue;
-		if (!defaultValue) continue;
-
-		switch (defaultValue.kind) {
-			case "static":
-				row[name] = defaultValue.value;
-				break;
-			case "now":
-				row[name] = context.now();
-				break;
-			case "id":
-				row[name] = context.id();
-				break;
-		}
-	}
-
-	return row as InferSelect<TModel>;
-}
-
-function matchesWhere(row: Row, where: Record<string, unknown>): boolean {
-	return Object.entries(where).every(([key, value]) => row[key] === value);
-}
-
-function createMemoryAdapter(
-	context: DatabaseAdapterFactoryContext,
-): DatabaseAdapter {
-	const tables = new Map<string, Row[]>();
-
-	function getTable(modelKey: string): Row[] {
-		const existing = tables.get(modelKey);
-		if (existing) return existing;
-		const created: Row[] = [];
-		tables.set(modelKey, created);
-		return created;
-	}
-
-	return {
-		async insert(model, value) {
-			const row = applyDefaults(model, value, context);
-			getTable(model.key).push({ ...row });
-			return row as InferSelect<typeof model>;
-		},
-
-		async findOne(model, where) {
-			const [row] = await this.findMany(model, { where, limit: 1 });
-			return row ?? null;
-		},
-
-		async findMany(model, options) {
-			let rows = [...getTable(model.key)];
-			if (options?.where) {
-				rows = rows.filter((row) =>
-					matchesWhere(row, options.where as Record<string, unknown>),
-				);
-			}
-			if (options?.orderBy) {
-				const { field, direction } = options.orderBy;
-				const fieldName = field as string;
-				rows.sort((left, right) => {
-					const leftValue = left[fieldName];
-					const rightValue = right[fieldName];
-					if (leftValue === rightValue) return 0;
-					if (leftValue == null && rightValue == null) return 0;
-					if (leftValue == null) return 1;
-					if (rightValue == null) return -1;
-					const comparison =
-						leftValue < rightValue ? -1 : leftValue > rightValue ? 1 : 0;
-					return direction === "desc" ? -comparison : comparison;
-				});
-			}
-			if (options?.limit !== undefined) {
-				rows = rows.slice(0, options.limit);
-			}
-			return rows as InferSelect<typeof model>[];
-		},
-
-		async update(model, where, patch) {
-			const rows = getTable(model.key);
-			const updated: InferSelect<typeof model>[] = [];
-			for (const row of rows) {
-				if (!matchesWhere(row, where as Record<string, unknown>)) continue;
-				Object.assign(row, patch);
-				updated.push({ ...row } as InferSelect<typeof model>);
-			}
-			return updated;
-		},
-
-		async delete(model, where) {
-			const rows = getTable(model.key);
-			const remaining = rows.filter(
-				(row) => !matchesWhere(row, where as Record<string, unknown>),
-			);
-			const deletedCount = rows.length - remaining.length;
-			tables.set(model.key, remaining);
-			return deletedCount;
-		},
-	};
-}
-
-export function createInMemoryDatabaseAdapter(): DatabaseAdapterFactory {
-	return {
-		create(context) {
-			return createMemoryAdapter(context);
-		},
-	};
-}
-
-export function createInMemoryDatabaseAdapterFromStorage(
-	storage: StorageRegistry,
-	now: () => Date = () => new Date(),
-	id: () => string = () => crypto.randomUUID(),
-): DatabaseAdapter {
-	return createInMemoryDatabaseAdapter().create({ storage, now, id });
-}
diff --git a/packages/core/src/adapters/logger.ts b/packages/core/src/adapters/logger.ts
index 9a230bd2..60322c3b 100644
--- a/packages/core/src/adapters/logger.ts
+++ b/packages/core/src/adapters/logger.ts
@@ -75,7 +75,9 @@ export function createDefaultLogger(
 	};
 }
 
-export function createLogger(options: HackKitLoggerOptions = {}): HackKitLogger {
+export function createLogger(
+	options: HackKitLoggerOptions = {},
+): HackKitLogger {
 	return createDefaultLogger(options);
 }
 
diff --git a/packages/core/src/client.ts b/packages/core/src/client.ts
new file mode 100644
index 00000000..0342b89e
--- /dev/null
+++ b/packages/core/src/client.ts
@@ -0,0 +1,11 @@
+/** Browser-safe validation, constants, and domain DTO types. No ORM initialization. */
+export { HackKitError, hackKitErrorCodes } from "./errors";
+export type { HackKitErrorCode } from "./errors";
+export { CorePermission, hasPermission, hasSuperAdmin } from "./permissions";
+export * from "./schemas";
+export * from "./settings";
+export * from "./user-data-options";
+export * from "./event-types";
+export * from "./groups";
+export type * from "./types";
+export type { RsvpSummary } from "./functions/rsvp";
diff --git a/packages/core/src/database.ts b/packages/core/src/database.ts
deleted file mode 100644
index df4a47c1..00000000
--- a/packages/core/src/database.ts
+++ /dev/null
@@ -1,308 +0,0 @@
-export type ModelKey = `${string}.${string}`;
-export type FieldKind =
-	| "string"
-	| "integer"
-	| "number"
-	| "boolean"
-	| "date"
-	| "json"
-	| "enum";
-export type StorageDefault<TValue> =
-	| { kind: "static"; value: TValue }
-	| { kind: "now" }
-	| { kind: "id" };
-
-export type ReferenceAction = "cascade" | "restrict" | "setNull" | "noAction";
-
-export type FieldReference<TKey extends ModelKey = ModelKey> = {
-	model: TKey;
-	field: string;
-	onDelete?: ReferenceAction;
-	onUpdate?: ReferenceAction;
-};
-
-export type FieldDefinition<
-	TValue,
-	TOptional extends boolean = false,
-	THasDefault extends boolean = false,
-> = {
-	kind: FieldKind;
-	isOptional: TOptional;
-	isPrimaryKey?: boolean;
-	isUnique?: boolean;
-	defaultValue?: StorageDefault<TValue>;
-	reference?: FieldReference;
-	enumValues?: readonly string[];
-	readonly __value?: TValue;
-	readonly __hasDefault?: THasDefault;
-};
-
-export type AnyField = FieldDefinition<unknown, boolean, boolean>;
-
-export type FieldBuilder<
-	TValue,
-	TOptional extends boolean = false,
-	THasDefault extends boolean = false,
-> = FieldDefinition<TValue, TOptional, THasDefault> & {
-	optional(): FieldBuilder<TValue, true, THasDefault>;
-	primaryKey(): FieldBuilder<TValue, TOptional, THasDefault>;
-	unique(): FieldBuilder<TValue, TOptional, THasDefault>;
-	default(value: TValue): FieldBuilder<TValue, TOptional, true>;
-	defaultNow(): TValue extends Date
-		? FieldBuilder<TValue, TOptional, true>
-		: never;
-	defaultId(): TValue extends string
-		? FieldBuilder<TValue, TOptional, true>
-		: never;
-	references<TKey extends ModelKey>(
-		model: TKey,
-		field: string,
-		options?: { onDelete?: ReferenceAction; onUpdate?: ReferenceAction },
-	): FieldBuilder<TValue, TOptional, THasDefault>;
-};
-
-function createField<
-	TValue,
-	TOptional extends boolean = false,
-	THasDefault extends boolean = false,
->(
-	definition: Omit<
-		FieldDefinition<TValue, TOptional, THasDefault>,
-		"__value" | "__hasDefault"
-	>,
-): FieldBuilder<TValue, TOptional, THasDefault> {
-	const withDefinition = <
-		TNextValue,
-		TNextOptional extends boolean,
-		TNextHasDefault extends boolean,
-	>(
-		next: Omit<
-			FieldDefinition<TNextValue, TNextOptional, TNextHasDefault>,
-			"__value" | "__hasDefault"
-		>,
-	) => createField<TNextValue, TNextOptional, TNextHasDefault>(next);
-
-	return {
-		...definition,
-		optional() {
-			return withDefinition<TValue, true, THasDefault>({
-				...definition,
-				isOptional: true,
-			});
-		},
-		primaryKey() {
-			return withDefinition<TValue, TOptional, THasDefault>({
-				...definition,
-				isPrimaryKey: true,
-			});
-		},
-		unique() {
-			return withDefinition<TValue, TOptional, THasDefault>({
-				...definition,
-				isUnique: true,
-			});
-		},
-		default(value: TValue) {
-			return withDefinition<TValue, TOptional, true>({
-				...definition,
-				defaultValue: { kind: "static", value },
-			});
-		},
-		defaultNow() {
-			return withDefinition<TValue, TOptional, true>({
-				...definition,
-				defaultValue: { kind: "now" },
-			}) as never;
-		},
-		defaultId() {
-			return withDefinition<TValue, TOptional, true>({
-				...definition,
-				defaultValue: { kind: "id" },
-			}) as never;
-		},
-		references(modelKey, field, options) {
-			return withDefinition<TValue, TOptional, THasDefault>({
-				...definition,
-				reference: { model: modelKey, field, ...options },
-			});
-		},
-	};
-}
-
-export const field = {
-	string: () => createField<string>({ kind: "string", isOptional: false }),
-	integer: () => createField<number>({ kind: "integer", isOptional: false }),
-	number: () => createField<number>({ kind: "number", isOptional: false }),
-	boolean: () => createField<boolean>({ kind: "boolean", isOptional: false }),
-	date: () => createField<Date>({ kind: "date", isOptional: false }),
-	json: <TValue>() =>
-		createField<TValue>({ kind: "json", isOptional: false }),
-	enum: <const TValues extends readonly [string, ...string[]]>(
-		values: TValues,
-	) =>
-		createField<TValues[number]>({
-			kind: "enum",
-			isOptional: false,
-			enumValues: values,
-		}),
-} as const;
-
-export type FieldValue<TField extends AnyField> =
-	TField extends FieldDefinition<infer TValue, boolean, boolean>
-		? TValue
-		: never;
-export type FieldIsOptional<TField extends AnyField> =
-	TField extends FieldDefinition<unknown, infer TOptional, boolean>
-		? TOptional
-		: never;
-export type FieldHasDefault<TField extends AnyField> =
-	TField extends FieldDefinition<unknown, boolean, infer THasDefault>
-		? THasDefault
-		: never;
-
-export type FieldMap = Record<string, AnyField>;
-
-export type ModelDefinition<TFields extends FieldMap = FieldMap> = {
-	fields: TFields;
-	unique?: readonly (readonly (keyof TFields & string)[])[];
-	indexes?: readonly (readonly (keyof TFields & string)[])[];
-};
-
-export type Model<
-	TDefinition extends ModelDefinition = ModelDefinition,
-	TKey extends ModelKey = ModelKey,
-> = {
-	readonly key: TKey;
-	readonly schema: TDefinition;
-};
-
-export type PersistentModel = Model<ModelDefinition, ModelKey>;
-
-export function defineModel<
-	const TKey extends ModelKey,
-	const TDefinition extends ModelDefinition,
->(key: TKey, schema: TDefinition): Model<TDefinition, TKey> {
-	return { key, schema };
-}
-
-export const model = defineModel;
-
-type OptionalSelectKeys<TFields extends FieldMap> = {
-	[K in keyof TFields]: FieldIsOptional<TFields[K]> extends true ? K : never;
-}[keyof TFields];
-
-type RequiredSelectKeys<TFields extends FieldMap> = Exclude<
-	keyof TFields,
-	OptionalSelectKeys<TFields>
->;
-
-type OptionalInsertKeys<TFields extends FieldMap> = {
-	[K in keyof TFields]: FieldIsOptional<TFields[K]> extends true
-		? K
-		: FieldHasDefault<TFields[K]> extends true
-			? K
-			: never;
-}[keyof TFields];
-
-type RequiredInsertKeys<TFields extends FieldMap> = Exclude<
-	keyof TFields,
-	OptionalInsertKeys<TFields>
->;
-
-export type InferSelect<TModel extends Model> =
-	TModel extends Model<infer TDefinition, ModelKey>
-		? {
-				[K in RequiredSelectKeys<TDefinition["fields"]>]: FieldValue<
-					TDefinition["fields"][K]
-				>;
-			} & {
-				[K in OptionalSelectKeys<TDefinition["fields"]>]?: FieldValue<
-					TDefinition["fields"][K]
-				>;
-			}
-		: never;
-
-export type InferInsert<TModel extends Model> =
-	TModel extends Model<infer TDefinition, ModelKey>
-		? {
-				[K in RequiredInsertKeys<TDefinition["fields"]>]: FieldValue<
-					TDefinition["fields"][K]
-				>;
-			} & {
-				[K in OptionalInsertKeys<TDefinition["fields"]>]?: FieldValue<
-					TDefinition["fields"][K]
-				>;
-			}
-		: never;
-
-export type Where<TModel extends Model> = Partial<InferSelect<TModel>>;
-
-export type OrderBy<TModel extends Model> = {
-	field: keyof InferSelect<TModel>;
-	direction?: "asc" | "desc";
-};
-
-export type FindManyOptions<TModel extends Model> = {
-	where?: Where<TModel>;
-	orderBy?: OrderBy<TModel>;
-	limit?: number;
-};
-
-export type StorageRegistry = {
-	models: Record<string, PersistentModel>;
-};
-
-export type DatabaseAdapterFactoryContext = {
-	storage: StorageRegistry;
-	now: () => Date;
-	id: () => string;
-};
-
-export type GeneratedSchemaFile = {
-	path: string;
-	content: string;
-};
-
-export type DatabaseSchemaAdapter = {
-	id: string;
-	generateSchemaFiles(input: {
-		storage: StorageRegistry;
-	}): GeneratedSchemaFile[] | Promise<GeneratedSchemaFile[]>;
-};
-
-export type DatabaseAdapter = {
-	insert<TModel extends Model>(
-		model: TModel,
-		value: InferInsert<TModel>,
-	): Promise<InferSelect<TModel>>;
-	findOne<TModel extends Model>(
-		model: TModel,
-		where: Where<TModel>,
-	): Promise<InferSelect<TModel> | null>;
-	findMany<TModel extends Model>(
-		model: TModel,
-		options?: FindManyOptions<TModel>,
-	): Promise<InferSelect<TModel>[]>;
-	update<TModel extends Model>(
-		model: TModel,
-		where: Where<TModel>,
-		patch: Partial<InferSelect<TModel>>,
-	): Promise<InferSelect<TModel>[]>;
-	delete<TModel extends Model>(
-		model: TModel,
-		where: Where<TModel>,
-	): Promise<number>;
-};
-
-export type DatabaseAdapterFactory = {
-	create(context: DatabaseAdapterFactoryContext): DatabaseAdapter;
-	schema?: DatabaseSchemaAdapter;
-};
-
-export type DatabaseAdapterInput = DatabaseAdapter | DatabaseAdapterFactory;
-
-export function isDatabaseAdapterFactory(
-	input: DatabaseAdapterInput,
-): input is DatabaseAdapterFactory {
-	return typeof (input as DatabaseAdapterFactory).create === "function";
-}
diff --git a/packages/core/src/domain-log.ts b/packages/core/src/domain-log.ts
index ace5e4b0..6abc1f82 100644
--- a/packages/core/src/domain-log.ts
+++ b/packages/core/src/domain-log.ts
@@ -1,5 +1,9 @@
 import { HackKitError } from "./errors";
-import type { DomainLogContext, HackKitLogger, LogLevel } from "./adapters/logger";
+import type {
+	DomainLogContext,
+	HackKitLogger,
+	LogLevel,
+} from "./adapters/logger";
 import { logDomain } from "./adapters/logger";
 
 export async function withDomainLog<T>(
diff --git a/packages/core/src/event-types.ts b/packages/core/src/event-types.ts
index 23bc94f4..54f081f8 100644
--- a/packages/core/src/event-types.ts
+++ b/packages/core/src/event-types.ts
@@ -27,7 +27,9 @@ const eventTypeOptionSchema = z.object({
 
 const eventTypesSchema = z.array(eventTypeOptionSchema).min(1);
 
-function assertUniqueEventTypeValues(options: readonly EventTypeOption[]): void {
+function assertUniqueEventTypeValues(
+	options: readonly EventTypeOption[],
+): void {
 	const seen = new Set<string>();
 	for (const option of options) {
 		if (seen.has(option.value)) {
diff --git a/packages/core/src/functions/admin.ts b/packages/core/src/functions/admin.ts
index ab36e9d9..cdca9f64 100644
--- a/packages/core/src/functions/admin.ts
+++ b/packages/core/src/functions/admin.ts
@@ -1,3 +1,5 @@
+import { serialize } from "@mikro-orm/core";
+import { readUser } from "../mikro/user";
 import type { HackkitRuntimeContext } from "../hackkit-context";
 import { coreModels } from "../models";
 import { CorePermission } from "../permissions";
@@ -11,45 +13,64 @@ import type {
 
 export type AdminApiContext = Pick<
 	HackkitRuntimeContext,
-	"db" | "requirePermission" | "getUserOrThrow"
+	"em" | "requirePermission" | "getUserOrThrow"
 >;
 
 function toDateKey(date: Date): string {
 	return date.toISOString().slice(0, 10);
 }
 
-function toIsoString(date?: Date): string {
+function toIsoString(date?: Date | null): string {
 	return date ? date.toISOString() : "";
 }
 
 export function createAdminApi(context: AdminApiContext) {
-	const { db, requirePermission, getUserOrThrow } = context;
+	const { em, requirePermission, getUserOrThrow } = context;
 
 	async function listRolesForAdmin(actorAuthId: AuthId): Promise<Role[]> {
 		await requirePermission(actorAuthId, CorePermission.RolesView);
-		return db.findMany(coreModels.role, {
-			orderBy: { field: "position", direction: "asc" },
-		});
+		return serialize(
+			await em.find(
+				coreModels.role,
+				{},
+				{ orderBy: { position: "asc" } },
+			),
+		);
 	}
 
-	async function hydrateUser(user: AdminUserRecord["user"]): Promise<AdminUserRecord> {
+	async function hydrateUser(
+		user: AdminUserRecord["user"],
+	): Promise<AdminUserRecord> {
 		const [userData, hacker, rsvp, role, ban] = await Promise.all([
-			db.findOne(coreModels.userData, { authId: user.authId }),
-			db.findOne(coreModels.hacker, { authId: user.authId }),
-			db.findOne(coreModels.rsvp, { authId: user.authId }),
-			user.roleId ? db.findOne(coreModels.role, { id: user.roleId }) : null,
-			db.findOne(coreModels.userBan, { authId: user.authId }),
+			em.findOne(coreModels.userData, { authId: user.id }),
+			em.findOne(coreModels.hacker, { userId: user.id }),
+			em.findOne(coreModels.rsvp, { authId: user.id }),
+			user.roleId
+				? em.findOne(coreModels.role, { id: user.roleId })
+				: null,
+			em.findOne(coreModels.userBan, { authId: user.id }),
 		]);
 
-		return { user, userData, hacker, rsvp, role, ban };
+		return {
+			user,
+			userData: userData ? serialize(userData) : null,
+			hacker: hacker ? serialize(hacker) : null,
+			rsvp: rsvp ? serialize(rsvp) : null,
+			role: role ? serialize(role) : null,
+			ban: ban ? serialize(ban) : null,
+		};
 	}
 
-	async function listUsers(input: { actorAuthId: AuthId }): Promise<AdminUserRecord[]> {
+	async function listUsers(input: {
+		actorAuthId: AuthId;
+	}): Promise<AdminUserRecord[]> {
 		await requirePermission(input.actorAuthId, CorePermission.UsersView);
-		const users = await db.findMany(coreModels.user, {
-			orderBy: { field: "createdAt", direction: "desc" },
-		});
-		return Promise.all(users.map(hydrateUser));
+		const users = await em.find(
+			coreModels.user,
+			{},
+			{ orderBy: { createdAt: "desc" } },
+		);
+		return Promise.all(serialize(users).map(hydrateUser));
 	}
 
 	async function getUser(input: {
@@ -57,7 +78,7 @@ export function createAdminApi(context: AdminApiContext) {
 		targetAuthId: AuthId;
 	}): Promise<AdminUserRecord | null> {
 		await requirePermission(input.actorAuthId, CorePermission.UsersView);
-		const user = await db.findOne(coreModels.user, { authId: input.targetAuthId });
+		const user = await readUser(em, { id: input.targetAuthId });
 		return user ? hydrateUser(user) : null;
 	}
 
@@ -66,13 +87,15 @@ export function createAdminApi(context: AdminApiContext) {
 		hackTag: string;
 	}): Promise<AdminUserRecord | null> {
 		await requirePermission(input.actorAuthId, CorePermission.UsersView);
-		const user = await db.findOne(coreModels.user, {
+		const user = await readUser(em, {
 			hackTag: input.hackTag.toLowerCase(),
 		});
 		return user ? hydrateUser(user) : null;
 	}
 
-	async function getOverview(input: { actorAuthId: AuthId }): Promise<AdminOverview> {
+	async function getOverview(input: {
+		actorAuthId: AuthId;
+	}): Promise<AdminOverview> {
 		await requirePermission(input.actorAuthId, CorePermission.Admin);
 		const records = await listUsers({ actorAuthId: input.actorAuthId });
 		const today = new Date();
@@ -93,12 +116,14 @@ export function createAdminApi(context: AdminApiContext) {
 		return {
 			totalUsers: records.length,
 			totalHackers: records.filter((record) => record.hacker).length,
-			approvedUsers: records.filter((record) => record.user.isApproved).length,
+			approvedUsers: records.filter((record) => record.user.isApproved)
+				.length,
 			pendingApprovalUsers: records.filter(
 				(record) => !record.user.isApproved && !record.ban,
 			).length,
 			bannedUsers: records.filter((record) => record.ban).length,
-			checkedInUsers: records.filter((record) => record.user.checkedInAt).length,
+			checkedInUsers: records.filter((record) => record.user.checkedInAt)
+				.length,
 			confirmedRsvps: records.filter(
 				(record) => record.rsvp?.status === "confirmed",
 			).length,
@@ -115,10 +140,9 @@ export function createAdminApi(context: AdminApiContext) {
 	}): Promise<AdminUserExportRow[]> {
 		const records = await listUsers({ actorAuthId: input.actorAuthId });
 		return records.map(({ user, userData, hacker, rsvp, role, ban }) => ({
-			authId: user.authId,
+			id: user.id,
 			email: user.email,
-			firstName: user.firstName,
-			lastName: user.lastName,
+			name: user.name,
 			hackTag: user.hackTag ?? "",
 			role: role?.name ?? "",
 			isApproved: user.isApproved,
diff --git a/packages/core/src/functions/events.ts b/packages/core/src/functions/events.ts
index 93a1b5c8..538de3b5 100644
--- a/packages/core/src/functions/events.ts
+++ b/packages/core/src/functions/events.ts
@@ -1,3 +1,4 @@
+import { serialize } from "@mikro-orm/core";
 import type { HackkitRuntimeContext } from "../hackkit-context";
 import { eventTypeValueSchema } from "../event-types";
 import { HackKitError, parseInput } from "../errors";
@@ -16,7 +17,7 @@ import type { AuthId, Event, EventScan } from "../types";
 
 export type EventsApiContext = Pick<
 	HackkitRuntimeContext,
-	| "db"
+	| "em"
 	| "now"
 	| "id"
 	| "logger"
@@ -52,28 +53,28 @@ export function createEventsApi(context: EventsApiContext) {
 		eventTypeValueSchema(context.eventTypes),
 	);
 
-	const { db, now, id, logger, getUserOrThrow, requirePermission } = context;
+	const { em, now, id, logger, getUserOrThrow, requirePermission } = context;
 
 	async function getEventOrThrow(eventId: string): Promise<Event> {
-		const event = await db.findOne(coreModels.event, { id: eventId });
+		const event = await em.findOne(coreModels.event, { id: eventId });
 		if (!event) throw new HackKitError("NOT_FOUND", "Event not found.");
-		return event;
+		return serialize(event);
 	}
 
 	return {
 		options: context.eventTypes,
 
-		async listEvents(input?: {
-			actorAuthId?: AuthId;
-		}): Promise<Event[]> {
-			const events = await db.findMany(coreModels.event, {
-				orderBy: { field: "startTime", direction: "asc" },
-			});
+		async listEvents(input?: { actorAuthId?: AuthId }): Promise<Event[]> {
+			const events = await em.find(
+				coreModels.event,
+				{},
+				{ orderBy: { startTime: "asc" } },
+			);
 			const includeHidden = await canViewHiddenEvents(
 				context,
 				input?.actorAuthId,
 			);
-			return filterVisibleEvents(events, includeHidden);
+			return serialize(filterVisibleEvents(events, includeHidden));
 		},
 
 		async getEvent(input: unknown): Promise<Event | null> {
@@ -99,19 +100,23 @@ export function createEventsApi(context: EventsApiContext) {
 						CorePermission.EventsCreate,
 					);
 					const timestamp = now();
-					return db.insert(coreModels.event, {
-						id: id(),
-						title: parsed.title,
-						description: parsed.description,
-						startTime: parsed.startTime,
-						endTime: parsed.endTime,
-						location: parsed.location,
-						type: parsed.type,
-						host: parsed.host,
-						hidden: parsed.hidden,
-						createdAt: timestamp,
-						updatedAt: timestamp,
-					});
+					{
+						const created = em.create(coreModels.event, {
+							id: id(),
+							title: parsed.title,
+							description: parsed.description,
+							startTime: parsed.startTime,
+							endTime: parsed.endTime,
+							location: parsed.location,
+							type: parsed.type,
+							host: parsed.host,
+							hidden: parsed.hidden,
+							createdAt: timestamp,
+							updatedAt: timestamp,
+						});
+						await em.flush();
+						return serialize(created);
+					}
 				},
 			);
 		},
@@ -131,24 +136,30 @@ export function createEventsApi(context: EventsApiContext) {
 						CorePermission.EventsUpdate,
 					);
 					await getEventOrThrow(parsed.eventId);
-					const [updated] = await db.update(
-						coreModels.event,
-						{ id: parsed.eventId },
-						{
-							title: parsed.title,
-							description: parsed.description,
-							startTime: parsed.startTime,
-							endTime: parsed.endTime,
-							location: parsed.location,
-							type: parsed.type,
-							host: parsed.host ?? undefined,
-							hidden: parsed.hidden,
-							updatedAt: now(),
-						},
-					);
+					const updated = await em.findOne(coreModels.event, {
+						id: parsed.eventId,
+					});
+					if (updated) {
+						em.assign(
+							updated,
+							{
+								title: parsed.title,
+								description: parsed.description,
+								startTime: parsed.startTime,
+								endTime: parsed.endTime,
+								location: parsed.location,
+								type: parsed.type,
+								host: parsed.host ?? undefined,
+								hidden: parsed.hidden,
+								updatedAt: now(),
+							},
+							{ ignoreUndefined: true },
+						);
+						await em.flush();
+					}
 					if (!updated)
 						throw new HackKitError("NOT_FOUND", "Event not found.");
-					return updated;
+					return serialize(updated);
 				},
 			);
 		},
@@ -167,7 +178,7 @@ export function createEventsApi(context: EventsApiContext) {
 						parsed.actorAuthId,
 						CorePermission.EventsDelete,
 					);
-					const deleted = await db.delete(coreModels.event, {
+					const deleted = await em.nativeDelete(coreModels.event, {
 						id: parsed.eventId,
 					});
 					if (deleted === 0)
@@ -183,15 +194,18 @@ export function createEventsApi(context: EventsApiContext) {
 				CorePermission.EventsScan,
 			);
 			await getEventOrThrow(parsed.eventId);
-			return db.findMany(coreModels.eventScan, {
-				where: {
-					eventId: parsed.eventId,
-					...(parsed.targetAuthId
-						? { authId: parsed.targetAuthId }
-						: {}),
-				},
-				orderBy: { field: "scannedAt", direction: "desc" },
-			});
+			return serialize(
+				await em.find(
+					coreModels.eventScan,
+					{
+						eventId: parsed.eventId,
+						...(parsed.targetAuthId
+							? { authId: parsed.targetAuthId }
+							: {}),
+					},
+					{ orderBy: { scannedAt: "desc" } },
+				),
+			);
 		},
 
 		async recordEventScan(input: unknown): Promise<{
@@ -216,25 +230,27 @@ export function createEventsApi(context: EventsApiContext) {
 					await getUserOrThrow(parsed.targetAuthId);
 					await getEventOrThrow(parsed.eventId);
 
-					const priorScans = await db.findMany(coreModels.eventScan, {
-						where: {
+					const priorScans = await em.find(
+						coreModels.eventScan,
+						{
 							eventId: parsed.eventId,
 							authId: parsed.targetAuthId,
 						},
-						orderBy: { field: "scannedAt", direction: "desc" },
-					});
+						{ orderBy: { scannedAt: "desc" } },
+					);
 
-					const scan = await db.insert(coreModels.eventScan, {
+					const scan = em.create(coreModels.eventScan, {
 						id: id(),
 						eventId: parsed.eventId,
 						authId: parsed.targetAuthId,
 						scannedByAuthId: parsed.actorAuthId,
 						scannedAt: now(),
 					});
+					await em.flush();
 
 					return {
-						scan,
-						priorScans,
+						scan: serialize(scan),
+						priorScans: serialize(priorScans),
 						hadPriorScans: priorScans.length > 0,
 					};
 				},
diff --git a/packages/core/src/functions/groups.ts b/packages/core/src/functions/groups.ts
index 75878850..893bc6ed 100644
--- a/packages/core/src/functions/groups.ts
+++ b/packages/core/src/functions/groups.ts
@@ -1,3 +1,5 @@
+import { serialize } from "@mikro-orm/core";
+import { withOperationLock } from "../mikro/operation";
 import { HackKitError } from "../errors";
 import type { HackkitRuntimeContext } from "../hackkit-context";
 import { coreModels } from "../models";
@@ -5,7 +7,10 @@ import type { AuthId, Hacker } from "../types";
 import type { HackkitGroup } from "../groups";
 import { getEnabledGroups } from "../groups";
 
-export type GroupsApiContext = Pick<HackkitRuntimeContext, "db" | "now" | "groups">;
+export type GroupsApiContext = Pick<
+	HackkitRuntimeContext,
+	"em" | "now" | "groups"
+>;
 
 function countAssignments(
 	hackers: readonly Hacker[],
@@ -20,7 +25,7 @@ function countAssignments(
 }
 
 export function createGroupsApi(context: GroupsApiContext) {
-	const { db, now, groups } = context;
+	const { em, now, groups } = context;
 
 	async function assignGroupToHacker(
 		authId: AuthId,
@@ -30,15 +35,19 @@ export function createGroupsApi(context: GroupsApiContext) {
 		if (!group) {
 			throw new HackKitError("NOT_FOUND", "Group not found.");
 		}
-		const [updated] = await db.update(
-			coreModels.hacker,
-			{ authId },
-			{ group: group.id, updatedAt: now() },
-		);
+		const updated = await em.findOne(coreModels.hacker, { userId: authId });
+		if (updated) {
+			em.assign(
+				updated,
+				{ group: group.id, updatedAt: now() },
+				{ ignoreUndefined: true },
+			);
+			await em.flush();
+		}
 		if (!updated) {
 			throw new HackKitError("NOT_FOUND", "Hacker not found.");
 		}
-		return updated;
+		return serialize(updated);
 	}
 
 	return {
@@ -47,7 +56,9 @@ export function createGroupsApi(context: GroupsApiContext) {
 		},
 
 		async getGroupForAuthId(authId: AuthId): Promise<HackkitGroup | null> {
-			const hacker = await db.findOne(coreModels.hacker, { authId });
+			const hacker = await em.findOne(coreModels.hacker, {
+				userId: authId,
+			});
 			if (!hacker?.group) return null;
 			return groups.find((group) => group.id === hacker.group) ?? null;
 		},
@@ -56,30 +67,41 @@ export function createGroupsApi(context: GroupsApiContext) {
 			authId: AuthId;
 			groupId: string;
 		}): Promise<Hacker> {
-			return assignGroupToHacker(input.authId, input.groupId);
+			return withOperationLock(em, "groups", async () => {
+				return assignGroupToHacker(input.authId, input.groupId);
+			});
 		},
 
 		async assignNextGroup(authId: AuthId): Promise<Hacker | null> {
-			const hacker = await db.findOne(coreModels.hacker, { authId });
-			if (!hacker) return null;
-			if (hacker.group) return hacker;
+			return withOperationLock(em, "groups", async () => {
+				const hacker = await em.findOne(coreModels.hacker, {
+					userId: authId,
+				});
+				if (!hacker) return null;
+				if (hacker.group) return serialize(hacker);
 
-			const enabledGroups = getEnabledGroups(groups);
-			if (enabledGroups.length === 0) return hacker;
+				const enabledGroups = getEnabledGroups(groups);
+				if (enabledGroups.length === 0) return serialize(hacker);
 
-			const hackers = await db.findMany(coreModels.hacker);
-			const counts = countAssignments(hackers, enabledGroups);
-			const [nextGroup] = [...enabledGroups].sort((left, right) => {
-				const countDelta =
-					(counts.get(left.id) ?? 0) - (counts.get(right.id) ?? 0);
-				if (countDelta !== 0) return countDelta;
-				return (
-					enabledGroups.findIndex((group) => group.id === left.id) -
-					enabledGroups.findIndex((group) => group.id === right.id)
-				);
+				const hackers = await em.find(coreModels.hacker, {});
+				const counts = countAssignments(hackers, enabledGroups);
+				const [nextGroup] = [...enabledGroups].sort((left, right) => {
+					const countDelta =
+						(counts.get(left.id) ?? 0) -
+						(counts.get(right.id) ?? 0);
+					if (countDelta !== 0) return countDelta;
+					return (
+						enabledGroups.findIndex(
+							(group) => group.id === left.id,
+						) -
+						enabledGroups.findIndex(
+							(group) => group.id === right.id,
+						)
+					);
+				});
+				if (!nextGroup) return serialize(hacker);
+				return assignGroupToHacker(authId, nextGroup.id);
 			});
-			if (!nextGroup) return hacker;
-			return assignGroupToHacker(authId, nextGroup.id);
 		},
 	};
 }
diff --git a/packages/core/src/functions/registration-policy.ts b/packages/core/src/functions/registration-policy.ts
index 5683fe84..70bec6a5 100644
--- a/packages/core/src/functions/registration-policy.ts
+++ b/packages/core/src/functions/registration-policy.ts
@@ -1,11 +1,11 @@
-import type { DatabaseAdapter } from "../database";
+import type { EntityManager } from "@mikro-orm/core";
 import { HackKitError } from "../errors";
 import { coreModels } from "../models";
 import { CoreSetting, type SettingValue } from "../settings";
 import type { AuthId, Hacker } from "../types";
 
 type RegistrationPolicyContext = {
-	db: DatabaseAdapter;
+	em: EntityManager;
 	getSettingValue: (key: CoreSetting) => Promise<SettingValue>;
 };
 
@@ -20,40 +20,52 @@ function isLimitReached(limit: number, count: number): boolean {
 export function createCompetitorRegistrationPolicy(
 	context: RegistrationPolicyContext,
 ) {
-	const { db, getSettingValue } = context;
+	const { em, getSettingValue } = context;
 
 	async function countHackers(where?: Partial<Hacker>): Promise<number> {
-		return (await db.findMany(coreModels.hacker, where ? { where } : undefined)).length;
+		return await em.count(coreModels.hacker, where ?? {});
 	}
 
 	async function countApprovedHackers(): Promise<number> {
-		const approvedUsers = await db.findMany(coreModels.user, {
-			where: { isApproved: true },
+		const approvedUsers = await em.find(coreModels.user, {
+			isApproved: true,
 		});
-		const approvedAuthIds = new Set(approvedUsers.map((user) => user.authId));
-		return (await db.findMany(coreModels.hacker)).filter((hacker) =>
-			approvedAuthIds.has(hacker.authId),
+		const approvedUserIds = new Set(approvedUsers.map((user) => user.id));
+		return (await em.find(coreModels.hacker, {})).filter((hacker) =>
+			approvedUserIds.has(hacker.userId),
 		).length;
 	}
 
 	async function assertCapacityAvailable(): Promise<void> {
-		const hackathonCapacity = await getSettingValue(CoreSetting.HackathonCapacity);
+		const hackathonCapacity = await getSettingValue(
+			CoreSetting.HackathonCapacity,
+		);
 		if (
 			typeof hackathonCapacity === "number" &&
 			isLimitReached(hackathonCapacity, await countApprovedHackers())
 		) {
-			throw new HackKitError("INVALID_OPERATION", "Hackathon capacity has been reached.");
+			throw new HackKitError(
+				"INVALID_OPERATION",
+				"Hackathon capacity has been reached.",
+			);
 		}
 	}
 
 	return {
 		async assertCanRegisterNewHacker(): Promise<RegisterNewHackerPolicyResult> {
-			const registrationOpen = await getSettingValue(CoreSetting.RegistrationOpen);
+			const registrationOpen = await getSettingValue(
+				CoreSetting.RegistrationOpen,
+			);
 			if (!registrationOpen) {
-				throw new HackKitError("INVALID_OPERATION", "Hacker registration is closed.");
+				throw new HackKitError(
+					"INVALID_OPERATION",
+					"Hacker registration is closed.",
+				);
 			}
 
-			const maximumRegistrations = await getSettingValue(CoreSetting.MaximumRegistrations);
+			const maximumRegistrations = await getSettingValue(
+				CoreSetting.MaximumRegistrations,
+			);
 			if (
 				typeof maximumRegistrations === "number" &&
 				isLimitReached(maximumRegistrations, await countHackers())
@@ -75,7 +87,9 @@ export function createCompetitorRegistrationPolicy(
 		},
 
 		async assertCanApproveUser(authId: AuthId): Promise<void> {
-			const hacker = await db.findOne(coreModels.hacker, { authId });
+			const hacker = await em.findOne(coreModels.hacker, {
+				userId: authId,
+			});
 			if (!hacker) return;
 			await assertCapacityAvailable();
 		},
diff --git a/packages/core/src/functions/rsvp.ts b/packages/core/src/functions/rsvp.ts
index 502a6f5b..61e1ae6f 100644
--- a/packages/core/src/functions/rsvp.ts
+++ b/packages/core/src/functions/rsvp.ts
@@ -1,3 +1,5 @@
+import { serialize } from "@mikro-orm/core";
+import { withOperationLock } from "../mikro/operation";
 import type { HackkitRuntimeContext } from "../hackkit-context";
 import { CoreNotificationKind } from "../notifications";
 import { HackKitError, parseInput } from "../errors";
@@ -24,7 +26,7 @@ export type RsvpSummary = {
 
 export type RsvpApiContext = Pick<
 	HackkitRuntimeContext,
-	| "db"
+	| "em"
 	| "now"
 	| "logger"
 	| "getUserOrThrow"
@@ -54,13 +56,15 @@ function sortWaitlist(rsvps: readonly Rsvp[]): Rsvp[] {
 	});
 }
 
-const clearNumber = null as unknown as number;
-const clearString = null as unknown as string;
-const clearDate = null as unknown as Date;
-
 export function createRsvpApi(context: RsvpApiContext) {
-	const { db, now, logger, getUserOrThrow, getSettingValue, requirePermission } =
-		context;
+	const {
+		em,
+		now,
+		logger,
+		getUserOrThrow,
+		getSettingValue,
+		requirePermission,
+	} = context;
 
 	async function getSettings() {
 		const [isOpen, limit, waitlistEnabled] = await Promise.all([
@@ -76,14 +80,21 @@ export function createRsvpApi(context: RsvpApiContext) {
 	}
 
 	async function listAll(): Promise<Rsvp[]> {
-		return db.findMany(coreModels.rsvp, {
-			orderBy: { field: "createdAt", direction: "asc" },
-		});
+		return serialize(
+			await em.find(
+				coreModels.rsvp,
+				{},
+				{ orderBy: { createdAt: "asc" } },
+			),
+		);
 	}
 
 	async function nextWaitlistPosition(): Promise<number> {
 		const waitlist = sortWaitlist(await listAll());
-		return Math.max(0, ...waitlist.map((rsvp) => rsvp.waitlistPosition ?? 0)) + 1;
+		return (
+			Math.max(0, ...waitlist.map((rsvp) => rsvp.waitlistPosition ?? 0)) +
+			1
+		);
 	}
 
 	async function assertApprovedHacker(authId: AuthId): Promise<void> {
@@ -94,7 +105,7 @@ export function createRsvpApi(context: RsvpApiContext) {
 				"Only approved hackers can RSVP.",
 			);
 		}
-		const hacker = await db.findOne(coreModels.hacker, { authId });
+		const hacker = await em.findOne(coreModels.hacker, { userId: authId });
 		if (!hacker) {
 			throw new HackKitError(
 				"INVALID_OPERATION",
@@ -135,11 +146,18 @@ export function createRsvpApi(context: RsvpApiContext) {
 		for (const [index, rsvp] of waitlist.entries()) {
 			const position = index + 1;
 			if (rsvp.waitlistPosition === position) continue;
-			await db.update(
-				coreModels.rsvp,
-				{ authId: rsvp.authId },
-				{ waitlistPosition: position, updatedAt: now() },
-			);
+			{
+				const updatedRows = await em.find(coreModels.rsvp, {
+					authId: rsvp.authId,
+				});
+				for (const row of updatedRows)
+					em.assign(
+						row,
+						{ waitlistPosition: position, updatedAt: now() },
+						{ ignoreUndefined: true },
+					);
+				await em.flush();
+			}
 		}
 	}
 
@@ -147,7 +165,7 @@ export function createRsvpApi(context: RsvpApiContext) {
 		authId: AuthId,
 		patch: Partial<Rsvp>,
 	): Promise<Rsvp> {
-		const existing = await db.findOne(coreModels.rsvp, { authId });
+		const existing = await em.findOne(coreModels.rsvp, { authId });
 		const timestamp = now();
 		const value = {
 			...patch,
@@ -155,15 +173,23 @@ export function createRsvpApi(context: RsvpApiContext) {
 			updatedAt: timestamp,
 		};
 		if (!existing) {
-			return db.insert(coreModels.rsvp, {
-				status: "confirmed",
-				createdAt: timestamp,
-				...value,
-			});
+			{
+				const created = em.create(coreModels.rsvp, {
+					status: "confirmed",
+					createdAt: timestamp,
+					...value,
+				});
+				await em.flush();
+				return serialize(created);
+			}
+		}
+		const updated = await em.findOne(coreModels.rsvp, { authId });
+		if (updated) {
+			em.assign(updated, value, { ignoreUndefined: true });
+			await em.flush();
 		}
-		const [updated] = await db.update(coreModels.rsvp, { authId }, value);
 		if (!updated) throw new HackKitError("NOT_FOUND", "RSVP not found.");
-		return updated;
+		return serialize(updated);
 	}
 
 	async function getSummary(): Promise<RsvpSummary> {
@@ -179,7 +205,8 @@ export function createRsvpApi(context: RsvpApiContext) {
 			waitlistEnabled,
 			confirmedCount,
 			waitlistedCount,
-			availableSpots: limit === 0 ? null : Math.max(0, limit - confirmedCount),
+			availableSpots:
+				limit === 0 ? null : Math.max(0, limit - confirmedCount),
 		};
 	}
 
@@ -187,178 +214,218 @@ export function createRsvpApi(context: RsvpApiContext) {
 		getSummary,
 
 		async getRsvp(authId: AuthId): Promise<Rsvp | null> {
-			return db.findOne(coreModels.rsvp, { authId });
+			const record = await em.findOne(coreModels.rsvp, { authId });
+			return record ? serialize(record) : null;
 		},
 
 		async listRsvps(input?: { actorAuthId?: AuthId }): Promise<Rsvp[]> {
 			if (input?.actorAuthId) {
-				await requirePermission(input.actorAuthId, CorePermission.UsersView);
+				await requirePermission(
+					input.actorAuthId,
+					CorePermission.UsersView,
+				);
 			}
 			return listAll();
 		},
 
 		async confirm(input: unknown): Promise<Rsvp> {
-			const parsed = parseInput(confirmRsvpSchema, input);
-			return withDomainLog(
-				logger,
-				"rsvp.confirm",
-				{ targetAuthId: parsed.authId },
-				async () => {
-					await assertApprovedHacker(parsed.authId);
-					const settings = await getSettings();
-					if (!settings.isOpen) {
-						throw new HackKitError("INVALID_OPERATION", "RSVPs are closed.");
-					}
-					const existing = await db.findOne(coreModels.rsvp, {
-						authId: parsed.authId,
-					});
-					if (existing && existing.status !== "cancelled") return existing;
+			return withOperationLock(em, "rsvp", async () => {
+				const parsed = parseInput(confirmRsvpSchema, input);
+				return withDomainLog(
+					logger,
+					"rsvp.confirm",
+					{ targetAuthId: parsed.authId },
+					async () => {
+						await assertApprovedHacker(parsed.authId);
+						const settings = await getSettings();
+						if (!settings.isOpen) {
+							throw new HackKitError(
+								"INVALID_OPERATION",
+								"RSVPs are closed.",
+							);
+						}
+						const existing = await em.findOne(coreModels.rsvp, {
+							authId: parsed.authId,
+						});
+						if (existing && existing.status !== "cancelled")
+							return serialize(existing);
 
-					const active = activeRsvps(await listAll());
-					const confirmedCount = confirmedRsvps(active).length;
-					const timestamp = now();
-					const hasCapacity =
-						settings.limit === 0 || confirmedCount < settings.limit;
+						const active = activeRsvps(await listAll());
+						const confirmedCount = confirmedRsvps(active).length;
+						const timestamp = now();
+						const hasCapacity =
+							settings.limit === 0 ||
+							confirmedCount < settings.limit;
 
-					let rsvp: Rsvp;
-					if (hasCapacity) {
-						rsvp = await writeRsvp(parsed.authId, {
-							status: "confirmed",
-							waitlistPosition: clearNumber,
-							confirmedAt: timestamp,
-							waitlistedAt: clearDate,
-							cancelledAt: clearDate,
-							cancelledByAuthId: clearString,
-						});
-					} else if (settings.waitlistEnabled) {
-						rsvp = await writeRsvp(parsed.authId, {
-							status: "waitlisted",
-							waitlistPosition: await nextWaitlistPosition(),
-							waitlistedAt: timestamp,
-							confirmedAt: clearDate,
-							cancelledAt: clearDate,
-							cancelledByAuthId: clearString,
-						});
-					} else {
-						throw new HackKitError(
-							"INVALID_OPERATION",
-							"RSVP capacity has been reached.",
-						);
-					}
+						let rsvp: Rsvp;
+						if (hasCapacity) {
+							rsvp = await writeRsvp(parsed.authId, {
+								status: "confirmed",
+								waitlistPosition: null,
+								confirmedAt: timestamp,
+								waitlistedAt: null,
+								cancelledAt: null,
+								cancelledByAuthId: null,
+							});
+						} else if (settings.waitlistEnabled) {
+							rsvp = await writeRsvp(parsed.authId, {
+								status: "waitlisted",
+								waitlistPosition: await nextWaitlistPosition(),
+								waitlistedAt: timestamp,
+								confirmedAt: null,
+								cancelledAt: null,
+								cancelledByAuthId: null,
+							});
+						} else {
+							throw new HackKitError(
+								"INVALID_OPERATION",
+								"RSVP capacity has been reached.",
+							);
+						}
 
-					await queueRsvpIntent(rsvp);
-					return rsvp;
-				},
-			);
+						await queueRsvpIntent(rsvp);
+						return rsvp;
+					},
+				);
+			});
 		},
 
 		async cancel(input: unknown): Promise<Rsvp> {
-			const parsed = parseInput(adminCancelRsvpSchema, input);
-			return withDomainLog(
-				logger,
-				"rsvp.cancel",
-				{
-					actorAuthId: parsed.actorAuthId,
-					targetAuthId: parsed.targetAuthId,
-				},
-				async () => {
-					await requirePermission(parsed.actorAuthId, CorePermission.UsersApprove);
-					await getUserOrThrow(parsed.targetAuthId);
-					const timestamp = now();
-					const rsvp = await writeRsvp(parsed.targetAuthId, {
-						status: "cancelled",
-						waitlistPosition: clearNumber,
-						cancelledAt: timestamp,
-						cancelledByAuthId: parsed.actorAuthId,
-					});
-					await renumberWaitlist();
-					return rsvp;
-				},
-			);
+			return withOperationLock(em, "rsvp", async () => {
+				const parsed = parseInput(adminCancelRsvpSchema, input);
+				return withDomainLog(
+					logger,
+					"rsvp.cancel",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersApprove,
+						);
+						await getUserOrThrow(parsed.targetAuthId);
+						const timestamp = now();
+						const rsvp = await writeRsvp(parsed.targetAuthId, {
+							status: "cancelled",
+							waitlistPosition: null,
+							cancelledAt: timestamp,
+							cancelledByAuthId: parsed.actorAuthId,
+						});
+						await renumberWaitlist();
+						return rsvp;
+					},
+				);
+			});
 		},
 
 		async setStatus(input: unknown): Promise<Rsvp> {
-			const parsed = parseInput(adminSetRsvpStatusSchema, input);
-			return withDomainLog(
-				logger,
-				"rsvp.setStatus",
-				{
-					actorAuthId: parsed.actorAuthId,
-					targetAuthId: parsed.targetAuthId,
-				},
-				async () => {
-					await requirePermission(parsed.actorAuthId, CorePermission.UsersApprove);
-					await assertApprovedHacker(parsed.targetAuthId);
-					const timestamp = now();
-					const patch: Partial<Rsvp> =
-						parsed.status === "confirmed"
-							? {
-									status: "confirmed",
-									waitlistPosition: clearNumber,
-									confirmedAt: timestamp,
-									cancelledAt: clearDate,
-									cancelledByAuthId: clearString,
-								}
-							: parsed.status === "waitlisted"
+			return withOperationLock(em, "rsvp", async () => {
+				const parsed = parseInput(adminSetRsvpStatusSchema, input);
+				return withDomainLog(
+					logger,
+					"rsvp.setStatus",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersApprove,
+						);
+						await assertApprovedHacker(parsed.targetAuthId);
+						const timestamp = now();
+						const patch: Partial<Rsvp> =
+							parsed.status === "confirmed"
 								? {
-										status: "waitlisted",
-										waitlistPosition: await nextWaitlistPosition(),
-										waitlistedAt: timestamp,
-										cancelledAt: clearDate,
-										cancelledByAuthId: clearString,
+										status: "confirmed",
+										waitlistPosition: null,
+										confirmedAt: timestamp,
+										cancelledAt: null,
+										cancelledByAuthId: null,
 									}
-								: {
-										status: "cancelled",
-										waitlistPosition: clearNumber,
-										cancelledAt: timestamp,
-										cancelledByAuthId: parsed.actorAuthId,
-									};
-					const rsvp = await writeRsvp(parsed.targetAuthId, patch);
-					await renumberWaitlist();
-					await queueRsvpIntent(rsvp);
-					return rsvp;
-				},
-			);
+								: parsed.status === "waitlisted"
+									? {
+											status: "waitlisted",
+											waitlistPosition:
+												await nextWaitlistPosition(),
+											waitlistedAt: timestamp,
+											cancelledAt: null,
+											cancelledByAuthId: null,
+										}
+									: {
+											status: "cancelled",
+											waitlistPosition: null,
+											cancelledAt: timestamp,
+											cancelledByAuthId:
+												parsed.actorAuthId,
+										};
+						const rsvp = await writeRsvp(
+							parsed.targetAuthId,
+							patch,
+						);
+						await renumberWaitlist();
+						await queueRsvpIntent(rsvp);
+						return rsvp;
+					},
+				);
+			});
 		},
 
 		async promote(input: unknown): Promise<Rsvp> {
-			const parsed = parseInput(adminPromoteRsvpSchema, input);
-			return withDomainLog(
-				logger,
-				"rsvp.promote",
-				{ actorAuthId: parsed.actorAuthId, targetAuthId: parsed.targetAuthId },
-				async () => {
-					await requirePermission(parsed.actorAuthId, CorePermission.UsersApprove);
-					const summary = await getSummary();
-					if (summary.limit !== 0 && summary.confirmedCount >= summary.limit) {
-						throw new HackKitError(
-							"INVALID_OPERATION",
-							"RSVP capacity has been reached.",
+			return withOperationLock(em, "rsvp", async () => {
+				const parsed = parseInput(adminPromoteRsvpSchema, input);
+				return withDomainLog(
+					logger,
+					"rsvp.promote",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersApprove,
 						);
-					}
-					const target = parsed.targetAuthId
-						? await db.findOne(coreModels.rsvp, {
-								authId: parsed.targetAuthId,
-								status: "waitlisted",
-							})
-						: sortWaitlist(await listAll())[0];
-					if (!target) {
-						throw new HackKitError("NOT_FOUND", "Waitlisted RSVP not found.");
-					}
-					await assertApprovedHacker(target.authId);
-					const timestamp = now();
-					const rsvp = await writeRsvp(target.authId, {
-						status: "confirmed",
-						waitlistPosition: clearNumber,
-						confirmedAt: timestamp,
-						promotedAt: timestamp,
-						promotedByAuthId: parsed.actorAuthId,
-					});
-					await renumberWaitlist();
-					await queueRsvpIntent(rsvp, parsed.actorAuthId);
-					return rsvp;
-				},
-			);
+						const summary = await getSummary();
+						if (
+							summary.limit !== 0 &&
+							summary.confirmedCount >= summary.limit
+						) {
+							throw new HackKitError(
+								"INVALID_OPERATION",
+								"RSVP capacity has been reached.",
+							);
+						}
+						const target = parsed.targetAuthId
+							? await em.findOne(coreModels.rsvp, {
+									authId: parsed.targetAuthId,
+									status: "waitlisted",
+								})
+							: sortWaitlist(await listAll())[0];
+						if (!target) {
+							throw new HackKitError(
+								"NOT_FOUND",
+								"Waitlisted RSVP not found.",
+							);
+						}
+						await assertApprovedHacker(target.authId);
+						const timestamp = now();
+						const rsvp = await writeRsvp(target.authId, {
+							status: "confirmed",
+							waitlistPosition: null,
+							confirmedAt: timestamp,
+							promotedAt: timestamp,
+							promotedByAuthId: parsed.actorAuthId,
+						});
+						await renumberWaitlist();
+						await queueRsvpIntent(rsvp, parsed.actorAuthId);
+						return rsvp;
+					},
+				);
+			});
 		},
 	};
 }
diff --git a/packages/core/src/functions/settings.ts b/packages/core/src/functions/settings.ts
index 51d5cd5e..82effd7a 100644
--- a/packages/core/src/functions/settings.ts
+++ b/packages/core/src/functions/settings.ts
@@ -1,5 +1,6 @@
+import { withOperationLock } from "../mikro/operation";
 import type { HackKitLogger } from "../adapters/logger";
-import type { DatabaseAdapter } from "../database";
+import type { EntityManager } from "@mikro-orm/core";
 import { HackKitError } from "../errors";
 import { coreModels } from "../models";
 import { CorePermission } from "../permissions";
@@ -14,7 +15,7 @@ import { validateSettingValue } from "../settings";
 import type { AuthId, PermissionKey } from "../types";
 
 type SettingsApiContext = {
-	db: DatabaseAdapter;
+	em: EntityManager;
 	now: () => Date;
 	logger: HackKitLogger;
 	settings: readonly HackathonSettingDefinition[];
@@ -24,11 +25,7 @@ type SettingsApiContext = {
 	) => Promise<unknown>;
 };
 
-type SettingRow = typeof coreModels.setting extends infer TModel
-	? TModel extends import("../database").Model
-		? import("../database").InferSelect<TModel>
-		: never
-	: never;
+type SettingRow = import("../types").HackathonSetting;
 
 export type SetHackathonSettingInput = {
 	actorAuthId: AuthId;
@@ -51,8 +48,12 @@ export type ResetManyHackathonSettingsInput = {
 	keys: readonly SettingKey[];
 };
 
-function createDefinitionMap(definitions: readonly HackathonSettingDefinition[]) {
-	return new Map(definitions.map((definition) => [definition.key, definition]));
+function createDefinitionMap(
+	definitions: readonly HackathonSettingDefinition[],
+) {
+	return new Map(
+		definitions.map((definition) => [definition.key, definition]),
+	);
 }
 
 function getDefinition(
@@ -61,7 +62,10 @@ function getDefinition(
 ): HackathonSettingDefinition {
 	const definition = definitions.get(key);
 	if (!definition) {
-		throw new HackKitError("NOT_FOUND", `Hackathon setting '${key}' is not registered.`);
+		throw new HackKitError(
+			"NOT_FOUND",
+			`Hackathon setting '${key}' is not registered.`,
+		);
 	}
 	return definition;
 }
@@ -92,11 +96,14 @@ export function createSettingsApi(context: SettingsApiContext) {
 	const definitions = createDefinitionMap(context.settings);
 
 	async function requireManage(actorAuthId: AuthId) {
-		await context.requirePermission(actorAuthId, CorePermission.SettingsManage);
+		await context.requirePermission(
+			actorAuthId,
+			CorePermission.SettingsManage,
+		);
 	}
 
 	async function getRow(key: SettingKey): Promise<SettingRow | null> {
-		return context.db.findOne(coreModels.setting, { key });
+		return context.em.findOne(coreModels.setting, { key });
 	}
 
 	async function getValue(key: SettingKey): Promise<SettingValue> {
@@ -112,20 +119,34 @@ export function createSettingsApi(context: SettingsApiContext) {
 		const timestamp = context.now();
 		const existing = await getRow(key);
 		if (existing) {
-			await context.db.update(
-				coreModels.setting,
-				{ key },
-				{ value, updatedAt: timestamp, updatedByAuthId: actorAuthId },
-			);
+			{
+				const updatedRows = await context.em.find(coreModels.setting, {
+					key,
+				});
+				for (const row of updatedRows)
+					context.em.assign(
+						row,
+						{
+							value,
+							updatedAt: timestamp,
+							updatedByAuthId: actorAuthId,
+						},
+						{ ignoreUndefined: true },
+					);
+				await context.em.flush();
+			}
 		} else {
-			await context.db.insert(coreModels.setting, {
-				key,
-				value,
-				createdAt: timestamp,
-				createdByAuthId: actorAuthId,
-				updatedAt: timestamp,
-				updatedByAuthId: actorAuthId,
-			});
+			{
+				context.em.create(coreModels.setting, {
+					key,
+					value,
+					createdAt: timestamp,
+					createdByAuthId: actorAuthId,
+					updatedAt: timestamp,
+					updatedByAuthId: actorAuthId,
+				});
+				await context.em.flush();
+			}
 		}
 		context.logger.log("info", "hackathon setting changed", {
 			action: "settings.set",
@@ -135,8 +156,11 @@ export function createSettingsApi(context: SettingsApiContext) {
 		});
 	}
 
-	async function resetSetting(actorAuthId: AuthId, key: SettingKey): Promise<void> {
-		await context.db.delete(coreModels.setting, { key });
+	async function resetSetting(
+		actorAuthId: AuthId,
+		key: SettingKey,
+	): Promise<void> {
+		await context.em.nativeDelete(coreModels.setting, { key });
 		context.logger.log("info", "hackathon setting reset", {
 			action: "settings.reset",
 			actorAuthId,
@@ -147,27 +171,39 @@ export function createSettingsApi(context: SettingsApiContext) {
 
 	return {
 		getValue: getValue as {
-			<TKey extends keyof CoreSettingValueMap>(key: TKey): Promise<CoreSettingValueMap[TKey]>;
+			<TKey extends keyof CoreSettingValueMap>(
+				key: TKey,
+			): Promise<CoreSettingValueMap[TKey]>;
 			(key: SettingKey): Promise<SettingValue>;
 		},
 
-		async get(input: { actorAuthId: AuthId; key: SettingKey }): Promise<ResolvedHackathonSetting> {
+		async get(input: {
+			actorAuthId: AuthId;
+			key: SettingKey;
+		}): Promise<ResolvedHackathonSetting> {
 			await requireManage(input.actorAuthId);
 			const definition = getDefinition(definitions, input.key);
 			return resolveSetting(definition, await getRow(input.key));
 		},
 
-		async list(input: { actorAuthId: AuthId }): Promise<ResolvedHackathonSetting[]> {
+		async list(input: {
+			actorAuthId: AuthId;
+		}): Promise<ResolvedHackathonSetting[]> {
 			await requireManage(input.actorAuthId);
 			const rows = new Map(
-				(await context.db.findMany(coreModels.setting)).map((row) => [row.key, row]),
+				(await context.em.find(coreModels.setting, {})).map((row) => [
+					row.key,
+					row,
+				]),
 			);
 			return context.settings.map((definition) =>
 				resolveSetting(definition, rows.get(definition.key) ?? null),
 			);
 		},
 
-		async set(input: SetHackathonSettingInput): Promise<ResolvedHackathonSetting> {
+		async set(
+			input: SetHackathonSettingInput,
+		): Promise<ResolvedHackathonSetting> {
 			const [setting] = await this.setMany({
 				actorAuthId: input.actorAuthId,
 				values: [{ key: input.key, value: input.value }],
@@ -175,23 +211,37 @@ export function createSettingsApi(context: SettingsApiContext) {
 			return setting;
 		},
 
-		async setMany(input: SetManyHackathonSettingsInput): Promise<ResolvedHackathonSetting[]> {
-			await requireManage(input.actorAuthId);
-			const parsed = input.values.map(({ key, value }) => {
-				const definition = getDefinition(definitions, key);
-				return { key, definition, value: validateSettingValue(definition, value) };
+		async setMany(
+			input: SetManyHackathonSettingsInput,
+		): Promise<ResolvedHackathonSetting[]> {
+			return withOperationLock(context.em, "settings", async () => {
+				await requireManage(input.actorAuthId);
+				const parsed = input.values.map(({ key, value }) => {
+					const definition = getDefinition(definitions, key);
+					return {
+						key,
+						definition,
+						value: validateSettingValue(definition, value),
+					};
+				});
+				for (const update of parsed) {
+					await writeSetting(
+						input.actorAuthId,
+						update.key,
+						update.value,
+					);
+				}
+				return Promise.all(
+					parsed.map(async ({ key, definition }) =>
+						resolveSetting(definition, await getRow(key)),
+					),
+				);
 			});
-			for (const update of parsed) {
-				await writeSetting(input.actorAuthId, update.key, update.value);
-			}
-			return Promise.all(
-				parsed.map(async ({ key, definition }) =>
-					resolveSetting(definition, await getRow(key)),
-				),
-			);
 		},
 
-		async reset(input: ResetHackathonSettingInput): Promise<ResolvedHackathonSetting> {
+		async reset(
+			input: ResetHackathonSettingInput,
+		): Promise<ResolvedHackathonSetting> {
 			const [setting] = await this.resetMany({
 				actorAuthId: input.actorAuthId,
 				keys: [input.key],
@@ -199,13 +249,21 @@ export function createSettingsApi(context: SettingsApiContext) {
 			return setting;
 		},
 
-		async resetMany(input: ResetManyHackathonSettingsInput): Promise<ResolvedHackathonSetting[]> {
-			await requireManage(input.actorAuthId);
-			const definitionsToReset = input.keys.map((key) => getDefinition(definitions, key));
-			for (const definition of definitionsToReset) {
-				await resetSetting(input.actorAuthId, definition.key);
-			}
-			return definitionsToReset.map((definition) => resolveSetting(definition, null));
+		async resetMany(
+			input: ResetManyHackathonSettingsInput,
+		): Promise<ResolvedHackathonSetting[]> {
+			return withOperationLock(context.em, "settings", async () => {
+				await requireManage(input.actorAuthId);
+				const definitionsToReset = input.keys.map((key) =>
+					getDefinition(definitions, key),
+				);
+				for (const definition of definitionsToReset) {
+					await resetSetting(input.actorAuthId, definition.key);
+				}
+				return definitionsToReset.map((definition) =>
+					resolveSetting(definition, null),
+				);
+			});
 		},
 	};
 }
diff --git a/packages/core/src/functions/users.ts b/packages/core/src/functions/users.ts
index 612d66b9..6e008059 100644
--- a/packages/core/src/functions/users.ts
+++ b/packages/core/src/functions/users.ts
@@ -1,3 +1,6 @@
+import { serialize } from "@mikro-orm/core";
+import { withOperationLock } from "../mikro/operation";
+import { readUser } from "../mikro/user";
 import type { HackkitRuntimeContext } from "../hackkit-context";
 import { HackKitError, parseInput } from "../errors";
 import { withDomainLog } from "../domain-log";
@@ -10,7 +13,6 @@ import {
 	checkInUserSchema,
 	claimHackTagSchema,
 	clearCheckInUserSchema,
-	ensureUserSchema,
 	unbanUserSchema,
 	updateUserProfileSchema,
 } from "../schemas";
@@ -18,7 +20,7 @@ import type { AuthId, PublicUserProfile, User, UserBan } from "../types";
 
 export type UsersApiContext = Pick<
 	HackkitRuntimeContext,
-	| "db"
+	| "em"
 	| "now"
 	| "logger"
 	| "getUserOrThrow"
@@ -32,7 +34,7 @@ export type UsersApiContext = Pick<
 
 export function createUsersApi(context: UsersApiContext) {
 	const {
-		db,
+		em,
 		now,
 		logger,
 		getUserOrThrow,
@@ -44,46 +46,16 @@ export function createUsersApi(context: UsersApiContext) {
 	} = context;
 
 	return {
-		async ensureUser(input: unknown): Promise<User> {
-			const parsed = parseInput(ensureUserSchema, input);
-			const existing = await db.findOne(coreModels.user, {
-				authId: parsed.authId,
-			});
-			const timestamp = now();
-
-			if (!existing) {
-				const user: User = {
-					...parsed,
-					skills: [],
-					isProfileSearchable: true,
-					isApproved: false,
-					createdAt: timestamp,
-					updatedAt: timestamp,
-				};
-				return db.insert(coreModels.user, user);
-			}
-
-			const [updated] = await db.update(
-				coreModels.user,
-				{ authId: parsed.authId },
-				{
-					email: parsed.email,
-					firstName: parsed.firstName,
-					lastName: parsed.lastName,
-					profilePhotoUrl: existing.profilePhotoUrl ?? parsed.profilePhotoUrl,
-					updatedAt: timestamp,
-				},
-			);
-			return updated ?? { ...existing, ...parsed, updatedAt: timestamp };
-		},
-
 		async getUser(authId: AuthId): Promise<User | null> {
-			return db.findOne(coreModels.user, { authId });
+			return readUser(em, { id: authId });
 		},
 
 		async getUserByHackTag(hackTag: string): Promise<User | null> {
-			const parsedHackTag = parseInput(claimHackTagSchema.shape.hackTag, hackTag);
-			return db.findOne(coreModels.user, { hackTag: parsedHackTag });
+			const parsedHackTag = parseInput(
+				claimHackTagSchema.shape.hackTag,
+				hackTag,
+			);
+			return readUser(em, { hackTag: parsedHackTag });
 		},
 
 		async getPublicProfileByHackTag(
@@ -92,14 +64,15 @@ export function createUsersApi(context: UsersApiContext) {
 			const user = await this.getUserByHackTag(hackTag);
 			if (!user || !user.isProfileSearchable) return null;
 			const [hacker, role] = await Promise.all([
-				db.findOne(coreModels.hacker, { authId: user.authId }),
-				user.roleId ? db.findOne(coreModels.role, { id: user.roleId }) : null,
+				em.findOne(coreModels.hacker, { userId: user.id }),
+				user.roleId
+					? em.findOne(coreModels.role, { id: user.roleId })
+					: null,
 			]);
 			return {
 				user: {
-					authId: user.authId,
-					firstName: user.firstName,
-					lastName: user.lastName,
+					id: user.id,
+					name: user.name,
 					profilePhotoUrl: user.profilePhotoUrl,
 					hackTag: user.hackTag,
 					bio: user.bio,
@@ -117,12 +90,13 @@ export function createUsersApi(context: UsersApiContext) {
 							personalWebsiteUrl: hacker.personalWebsiteUrl,
 						}
 					: null,
-				role,
+				role: role ? serialize(role) : null,
 			};
 		},
 
 		async getUserBan(authId: AuthId): Promise<UserBan | null> {
-			return db.findOne(coreModels.userBan, { authId });
+			const record = await em.findOne(coreModels.userBan, { authId });
+			return record ? serialize(record) : null;
 		},
 
 		async listUsers(input?: { actorAuthId?: AuthId }): Promise<User[]> {
@@ -131,233 +105,310 @@ export function createUsersApi(context: UsersApiContext) {
 					input.actorAuthId,
 					CorePermission.UsersView,
 				);
-			return db.findMany(coreModels.user, {
-				orderBy: { field: "createdAt", direction: "desc" },
-			});
+			const users = await em.find(
+				coreModels.user,
+				{},
+				{ orderBy: { createdAt: "desc" } },
+			);
+			return serialize(users);
 		},
 
 		async claimHackTag(input: unknown): Promise<User> {
 			const parsed = parseInput(claimHackTagSchema, input);
-			return withDomainLog(
-				logger,
-				"users.claimHackTag",
-				{ targetAuthId: parsed.authId },
-				async () => {
-					await getUserOrThrow(parsed.authId);
-					const existing = await db.findOne(coreModels.user, {
-						hackTag: parsed.hackTag,
-					});
-					if (existing && existing.authId !== parsed.authId) {
-						throw new HackKitError(
-							"CONFLICT",
-							"HackTag is already claimed.",
-						);
-					}
-					const [updated] = await db.update(
-						coreModels.user,
-						{ authId: parsed.authId },
-						{
+			const profileKey = `profile:${parsed.authId}`;
+			return withOperationLock(em, profileKey, async () => {
+				return withDomainLog(
+					logger,
+					"users.claimHackTag",
+					{ targetAuthId: parsed.authId },
+					async () => {
+						await getUserOrThrow(parsed.authId);
+						const existing = await em.findOne(coreModels.user, {
 							hackTag: parsed.hackTag,
-							updatedAt: now(),
-						},
-					);
-					if (!updated)
-						throw new HackKitError("NOT_FOUND", "User not found.");
-					return updated;
-				},
-			);
+						});
+						if (existing && existing.id !== parsed.authId) {
+							throw new HackKitError(
+								"CONFLICT",
+								"HackTag is already claimed.",
+							);
+						}
+						const updated = await em.findOne(coreModels.user, {
+							id: parsed.authId,
+						});
+						if (updated) {
+							em.assign(
+								updated,
+								{
+									hackTag: parsed.hackTag,
+									updatedAt: now(),
+								},
+								{ ignoreUndefined: true },
+							);
+							await em.flush();
+						}
+						if (!updated)
+							throw new HackKitError(
+								"NOT_FOUND",
+								"User not found.",
+							);
+						return getUserOrThrow(updated.id);
+					},
+				);
+			});
 		},
 
 		async updateProfile(input: unknown): Promise<User> {
 			const parsed = parseInput(updateUserProfileSchema, input);
-			return withDomainLog(
-				logger,
-				"users.updateProfile",
-				{ targetAuthId: parsed.authId },
-				async () => {
-					await getUserOrThrow(parsed.authId);
-					if (parsed.hackTag) {
-						const existing = await db.findOne(coreModels.user, {
-							hackTag: parsed.hackTag,
+			const profileKey = `profile:${parsed.authId}`;
+			return withOperationLock(em, profileKey, async () => {
+				return withDomainLog(
+					logger,
+					"users.updateProfile",
+					{ targetAuthId: parsed.authId },
+					async () => {
+						await getUserOrThrow(parsed.authId);
+						if (parsed.hackTag) {
+							const existing = await em.findOne(coreModels.user, {
+								hackTag: parsed.hackTag,
+							});
+							if (existing && existing.id !== parsed.authId) {
+								throw new HackKitError(
+									"CONFLICT",
+									"HackTag is already claimed.",
+								);
+							}
+						}
+						const updated = await em.findOne(coreModels.user, {
+							id: parsed.authId,
 						});
-						if (existing && existing.authId !== parsed.authId) {
-							throw new HackKitError(
-								"CONFLICT",
-								"HackTag is already claimed.",
+						if (updated) {
+							em.assign(
+								updated,
+								{
+									name: parsed.name,
+									profilePhotoUrl: parsed.profilePhotoUrl,
+									hackTag: parsed.hackTag,
+									bio: parsed.bio,
+									pronouns: parsed.pronouns,
+									skills: parsed.skills?.map((skill) =>
+										skill.toLowerCase(),
+									),
+									isProfileSearchable:
+										parsed.isProfileSearchable,
+									discordDisplayHandle:
+										parsed.discordDisplayHandle,
+									updatedAt: now(),
+								},
+								{ ignoreUndefined: true },
 							);
+							await em.flush();
 						}
-					}
-					const [updated] = await db.update(
-						coreModels.user,
-						{ authId: parsed.authId },
-						{
-							firstName: parsed.firstName,
-							lastName: parsed.lastName,
-							profilePhotoUrl: parsed.profilePhotoUrl,
-							hackTag: parsed.hackTag,
-							bio: parsed.bio,
-							pronouns: parsed.pronouns,
-							skills: parsed.skills?.map((skill) => skill.toLowerCase()),
-							isProfileSearchable: parsed.isProfileSearchable,
-							discordDisplayHandle: parsed.discordDisplayHandle,
-							updatedAt: now(),
-						},
-					);
-					if (!updated)
-						throw new HackKitError("NOT_FOUND", "User not found.");
-					return updated;
-				},
-			);
+						if (!updated)
+							throw new HackKitError(
+								"NOT_FOUND",
+								"User not found.",
+							);
+						return getUserOrThrow(updated.id);
+					},
+				);
+			});
 		},
 
 		async approveUser(input: unknown): Promise<User> {
-			const parsed = parseInput(approveUserSchema, input);
-			return withDomainLog(
-				logger,
-				"users.approveUser",
-				{
-					actorAuthId: parsed.actorAuthId,
-					targetAuthId: parsed.targetAuthId,
-				},
-				async () => {
-					const principal = await requirePermission(
-						parsed.actorAuthId,
-						CorePermission.UsersApprove,
-					);
-					const target = await getUserOrThrow(parsed.targetAuthId);
-					if (parsed.approved && !target.isApproved) {
-						await registrationPolicy.assertCanApproveUser(parsed.targetAuthId);
-					}
-					if (target.roleId)
-						assertCanManageRole(
-							principal,
-							await getRoleOrThrow(target.roleId),
+			return withOperationLock(em, "registration", async () => {
+				const parsed = parseInput(approveUserSchema, input);
+				return withDomainLog(
+					logger,
+					"users.approveUser",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						const principal = await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersApprove,
 						);
-					const [updated] = await db.update(
-						coreModels.user,
-						{ authId: parsed.targetAuthId },
-						{
-							isApproved: parsed.approved,
-							updatedAt: now(),
-						},
-					);
-					if (!updated)
-						throw new HackKitError("NOT_FOUND", "User not found.");
-					if (parsed.approved) {
-						await groups.assignNextGroup(parsed.targetAuthId);
-					}
-					return updated;
-				},
-			);
+						const target = await getUserOrThrow(
+							parsed.targetAuthId,
+						);
+						if (parsed.approved && !target.isApproved) {
+							await registrationPolicy.assertCanApproveUser(
+								parsed.targetAuthId,
+							);
+						}
+						if (target.roleId)
+							assertCanManageRole(
+								principal,
+								await getRoleOrThrow(target.roleId),
+							);
+						const updated = await em.findOne(coreModels.user, {
+							id: parsed.targetAuthId,
+						});
+						if (updated) {
+							em.assign(
+								updated,
+								{
+									isApproved: parsed.approved,
+									updatedAt: now(),
+								},
+								{ ignoreUndefined: true },
+							);
+							await em.flush();
+						}
+						if (!updated)
+							throw new HackKitError(
+								"NOT_FOUND",
+								"User not found.",
+							);
+						if (parsed.approved) {
+							await groups.assignNextGroup(parsed.targetAuthId);
+						}
+						return getUserOrThrow(updated.id);
+					},
+				);
+			});
 		},
 
 		async banUser(input: unknown): Promise<UserBan> {
-			const parsed = parseInput(banUserSchema, input);
-			const principal = await requirePermission(
-				parsed.actorAuthId,
-				CorePermission.UsersBan,
-			);
-			const target = await getUserOrThrow(parsed.targetAuthId);
-			if (target.roleId)
-				assertCanManageRole(
-					principal,
-					await getRoleOrThrow(target.roleId),
+			return withOperationLock(em, "bans", async () => {
+				const parsed = parseInput(banUserSchema, input);
+				const principal = await requirePermission(
+					parsed.actorAuthId,
+					CorePermission.UsersBan,
 				);
-			const existing = await db.findOne(coreModels.userBan, {
-				authId: parsed.targetAuthId,
-			});
-			if (existing) return existing;
-			return db.insert(coreModels.userBan, {
-				authId: parsed.targetAuthId,
-				reason: parsed.reason,
-				bannedByAuthId: parsed.actorAuthId,
-				createdAt: now(),
+				const target = await getUserOrThrow(parsed.targetAuthId);
+				if (target.roleId)
+					assertCanManageRole(
+						principal,
+						await getRoleOrThrow(target.roleId),
+					);
+				const existing = await em.findOne(coreModels.userBan, {
+					authId: parsed.targetAuthId,
+				});
+				if (existing) return existing;
+				{
+					const created = em.create(coreModels.userBan, {
+						authId: parsed.targetAuthId,
+						reason: parsed.reason,
+						bannedByAuthId: parsed.actorAuthId,
+						createdAt: now(),
+					});
+					await em.flush();
+					return serialize(created);
+				}
 			});
 		},
 
 		async unbanUser(input: unknown): Promise<void> {
-			const parsed = parseInput(unbanUserSchema, input);
-			const principal = await requirePermission(
-				parsed.actorAuthId,
-				CorePermission.UsersBan,
-			);
-			const target = await getUserOrThrow(parsed.targetAuthId);
-			if (target.roleId)
-				assertCanManageRole(
-					principal,
-					await getRoleOrThrow(target.roleId),
+			return withOperationLock(em, "bans", async () => {
+				const parsed = parseInput(unbanUserSchema, input);
+				const principal = await requirePermission(
+					parsed.actorAuthId,
+					CorePermission.UsersBan,
 				);
-			await db.delete(coreModels.userBan, {
-				authId: parsed.targetAuthId,
+				const target = await getUserOrThrow(parsed.targetAuthId);
+				if (target.roleId)
+					assertCanManageRole(
+						principal,
+						await getRoleOrThrow(target.roleId),
+					);
+				await em.nativeDelete(coreModels.userBan, {
+					authId: parsed.targetAuthId,
+				});
 			});
 		},
 
 		async checkIn(input: unknown): Promise<User> {
-			const parsed = parseInput(checkInUserSchema, input);
-			return withDomainLog(
-				logger,
-				"users.checkIn",
-				{
-					actorAuthId: parsed.actorAuthId,
-					targetAuthId: parsed.targetAuthId,
-				},
-				async () => {
-					await requirePermission(
-						parsed.actorAuthId,
-						CorePermission.UsersCheckIn,
-					);
-					const target = await getUserOrThrow(parsed.targetAuthId);
-					if (target.checkedInAt) {
-						throw new HackKitError(
-							"INVALID_OPERATION",
-							"User is already checked in.",
+			return withOperationLock(em, "check-in", async () => {
+				const parsed = parseInput(checkInUserSchema, input);
+				return withDomainLog(
+					logger,
+					"users.checkIn",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersCheckIn,
 						);
-					}
-					const timestamp = now();
-					const [updated] = await db.update(
-						coreModels.user,
-						{ authId: parsed.targetAuthId },
-						{
-							checkedInAt: timestamp,
-							updatedAt: timestamp,
-						},
-					);
-					if (!updated)
-						throw new HackKitError("NOT_FOUND", "User not found.");
-					return updated;
-				},
-			);
+						const target = await getUserOrThrow(
+							parsed.targetAuthId,
+						);
+						if (target.checkedInAt) {
+							throw new HackKitError(
+								"INVALID_OPERATION",
+								"User is already checked in.",
+							);
+						}
+						const timestamp = now();
+						const updated = await em.findOne(coreModels.user, {
+							id: parsed.targetAuthId,
+						});
+						if (updated) {
+							em.assign(
+								updated,
+								{
+									checkedInAt: timestamp,
+									updatedAt: timestamp,
+								},
+								{ ignoreUndefined: true },
+							);
+							await em.flush();
+						}
+						if (!updated)
+							throw new HackKitError(
+								"NOT_FOUND",
+								"User not found.",
+							);
+						return getUserOrThrow(updated.id);
+					},
+				);
+			});
 		},
 
 		async clearCheckIn(input: unknown): Promise<User> {
-			const parsed = parseInput(clearCheckInUserSchema, input);
-			return withDomainLog(
-				logger,
-				"users.clearCheckIn",
-				{
-					actorAuthId: parsed.actorAuthId,
-					targetAuthId: parsed.targetAuthId,
-				},
-				async () => {
-					await requirePermission(
-						parsed.actorAuthId,
-						CorePermission.UsersCheckIn,
-					);
-					await getUserOrThrow(parsed.targetAuthId);
-					const timestamp = now();
-					const [updated] = await db.update(
-						coreModels.user,
-						{ authId: parsed.targetAuthId },
-						{
-							checkedInAt: null as unknown as Date,
-							updatedAt: timestamp,
-						},
-					);
-					if (!updated)
-						throw new HackKitError("NOT_FOUND", "User not found.");
-					return updated;
-				},
-			);
+			return withOperationLock(em, "check-in", async () => {
+				const parsed = parseInput(clearCheckInUserSchema, input);
+				return withDomainLog(
+					logger,
+					"users.clearCheckIn",
+					{
+						actorAuthId: parsed.actorAuthId,
+						targetAuthId: parsed.targetAuthId,
+					},
+					async () => {
+						await requirePermission(
+							parsed.actorAuthId,
+							CorePermission.UsersCheckIn,
+						);
+						await getUserOrThrow(parsed.targetAuthId);
+						const timestamp = now();
+						const updated = await em.findOne(coreModels.user, {
+							id: parsed.targetAuthId,
+						});
+						if (updated) {
+							em.assign(
+								updated,
+								{
+									checkedInAt: null,
+									updatedAt: timestamp,
+								},
+								{ ignoreUndefined: true },
+							);
+							await em.flush();
+						}
+						if (!updated)
+							throw new HackKitError(
+								"NOT_FOUND",
+								"User not found.",
+							);
+						return getUserOrThrow(updated.id);
+					},
+				);
+			});
 		},
 	};
 }
diff --git a/packages/core/src/groups.ts b/packages/core/src/groups.ts
index 9527f8cf..986e06dc 100644
--- a/packages/core/src/groups.ts
+++ b/packages/core/src/groups.ts
@@ -22,19 +22,24 @@ function normalizeGroupId(id: string): string {
 	return id.trim();
 }
 
-export function resolveGroups(input: GroupsInput = []): readonly HackkitGroup[] {
+export function resolveGroups(
+	input: GroupsInput = [],
+): readonly HackkitGroup[] {
 	const seen = new Set<string>();
 	return input.map((group) => {
-		const value =
-			typeof group === "string"
-				? { id: group }
-				: group;
+		const value = typeof group === "string" ? { id: group } : group;
 		const id = normalizeGroupId(value.id);
 		if (!id) {
-			throw new HackKitError("INVALID_OPERATION", "Group id is required.");
+			throw new HackKitError(
+				"INVALID_OPERATION",
+				"Group id is required.",
+			);
 		}
 		if (seen.has(id)) {
-			throw new HackKitError("CONFLICT", `Group '${id}' is already configured.`);
+			throw new HackKitError(
+				"CONFLICT",
+				`Group '${id}' is already configured.`,
+			);
 		}
 		seen.add(id);
 		return {
diff --git a/packages/core/src/hackkit-context.ts b/packages/core/src/hackkit-context.ts
index 8c94e0b5..c46ff089 100644
--- a/packages/core/src/hackkit-context.ts
+++ b/packages/core/src/hackkit-context.ts
@@ -1,5 +1,5 @@
 import type { HackKitLogger } from "./adapters/logger";
-import type { DatabaseAdapter } from "./database";
+import type { EntityManager } from "@mikro-orm/core";
 import type { EventTypes } from "./event-types";
 import type { SettingKey, SettingValue } from "./settings";
 import type { UserDataOptions } from "./user-data-options";
@@ -9,7 +9,7 @@ import type { AuthId, PermissionKey, Role, User } from "./types";
 import type { HackkitGroup } from "./groups";
 
 export type HackkitRuntimeContext = {
-	db: DatabaseAdapter;
+	em: EntityManager;
 	now: () => Date;
 	id: () => string;
 	logger: HackKitLogger;
@@ -24,10 +24,7 @@ export type HackkitRuntimeContext = {
 		actorAuthId: AuthId,
 		permission: PermissionKey,
 	) => Promise<AccessPrincipal>;
-	assertCanManageRole: (
-		principal: AccessPrincipal,
-		role: Role,
-	) => void;
+	assertCanManageRole: (principal: AccessPrincipal, role: Role) => void;
 	accessControl: AccessControl;
 	notifications: NotificationsApi;
 };
diff --git a/packages/core/src/hackkit.ts b/packages/core/src/hackkit.ts
index b413accd..37f30628 100644
--- a/packages/core/src/hackkit.ts
+++ b/packages/core/src/hackkit.ts
@@ -1,7 +1,7 @@
-import {
-	isDatabaseAdapterFactory,
-	type DatabaseAdapterInput,
-} from "./database";
+import { serialize } from "@mikro-orm/core";
+import { withOperationLock } from "./mikro/operation";
+import type { EntityManager } from "@mikro-orm/core";
+import { readUser } from "./mikro/user";
 import { createAccessControl } from "./access-control";
 import { HackKitError, parseInput } from "./errors";
 import type { HackkitRuntimeContext } from "./hackkit-context";
@@ -28,6 +28,7 @@ import type {
 	RoleId,
 	User,
 	UserData,
+	UserId,
 } from "./types";
 import { createUsersApi } from "./functions/users";
 import { createEventsApi } from "./functions/events";
@@ -47,10 +48,12 @@ import { createNotificationsApi } from "./notifications";
 import { createRsvpApi } from "./functions/rsvp";
 import { createGroupsApi } from "./functions/groups";
 
-type CreateHackkitOptions<
+export type CreateHackkitOptions<
 	TPlugins extends readonly HackKitPlugin[] = readonly HackKitPlugin[],
 > = {
-	database: DatabaseAdapterInput;
+	em: EntityManager;
+	registry?: import("./plugins").HackKitRegistry;
+	actorAuthId?: string;
 	plugins?: TPlugins;
 	clock?: () => Date;
 	id?: () => string;
@@ -68,12 +71,10 @@ export function createHackkit<
 	const TPlugins extends readonly HackKitPlugin[] = [],
 >(options: CreateHackkitOptions<TPlugins>) {
 	const plugins = options.plugins ?? ([] as unknown as TPlugins);
-	const registry = createPluginRegistry(plugins);
+	const registry = options.registry ?? createPluginRegistry(plugins);
 	const now = options.clock ?? (() => new Date());
 	const id = options.id ?? defaultId;
-	const db = isDatabaseAdapterFactory(options.database)
-		? options.database.create({ storage: registry.storage, now, id })
-		: options.database;
+	const em = options.em;
 	const userDataOptions = resolveUserDataOptions(options.userDataOptions);
 	const eventTypes = resolveEventTypes(options.eventTypes);
 	const groups = resolveGroups(options.groups);
@@ -81,18 +82,18 @@ export function createHackkit<
 		createCompleteUserDataSchema(userDataOptions);
 	const logger = createLogger(options.logger);
 	const defaultCompetitorRoleId = options.defaultCompetitorRoleId;
-	const notificationsApi = createNotificationsApi({ db, now });
+	const notificationsApi = createNotificationsApi({ em, now });
 
 	async function getUserOrThrow(authId: AuthId): Promise<User> {
-		const user = await db.findOne(coreModels.user, { authId });
+		const user = await readUser(em, { id: authId });
 		if (!user) throw new HackKitError("NOT_FOUND", "User not found.");
 		return user;
 	}
 
 	async function getRoleOrThrow(roleId: RoleId): Promise<Role> {
-		const role = await db.findOne(coreModels.role, { id: roleId });
+		const role = await em.findOne(coreModels.role, { id: roleId });
 		if (!role) throw new HackKitError("NOT_FOUND", "Role not found.");
-		return role;
+		return serialize(role);
 	}
 
 	const accessControl = createAccessControl({
@@ -100,14 +101,16 @@ export function createHackkit<
 		getRoleOrThrow,
 	});
 	const settingsApi = createSettingsApi({
-		db,
+		em,
 		now,
 		logger,
 		settings: registry.settings,
 		requirePermission: accessControl.requirePermission,
 	});
 	const pluginApis = setupPluginApis(plugins, {
-		database: db,
+		em,
+		actorAuthId: options.actorAuthId,
+		getUser: (authId) => readUser(em, { id: authId }),
 		registry,
 		getSettingValue: settingsApi.getValue,
 		notifications: notificationsApi,
@@ -115,7 +118,7 @@ export function createHackkit<
 	});
 
 	const runtimeContext: HackkitRuntimeContext = {
-		db,
+		em,
 		now,
 		id,
 		logger,
@@ -138,68 +141,56 @@ export function createHackkit<
 	const groupsApi = createGroupsApi(runtimeContext);
 
 	async function registerHacker(input: unknown): Promise<Hacker> {
-		const parsed = parseInput(registerHackerSchema, input);
-		return withDomainLog(
-			logger,
-			"hackers.register",
-			{ targetAuthId: parsed.authId },
-			async () => {
-				await getUserOrThrow(parsed.authId);
-				const userData = await db.findOne(coreModels.userData, {
-					authId: parsed.authId,
-				});
-				if (!userData)
-					throw new HackKitError(
-						"INVALID_OPERATION",
-						"User Data must be completed before registering as a Hacker.",
-					);
-				const existing = await db.findOne(coreModels.hacker, {
-					authId: parsed.authId,
-				});
-				const timestamp = now();
-				const value: Hacker = {
-					...parsed,
-					registeredAt: existing?.registeredAt ?? timestamp,
-					updatedAt: timestamp,
-				};
+		return withOperationLock(em, "registration", async () => {
+			const parsed = parseInput(registerHackerSchema, input);
+			return withDomainLog(
+				logger,
+				"hackers.register",
+				{ targetAuthId: parsed.userId },
+				async () => {
+					await getUserOrThrow(parsed.userId);
+					const userData = await em.findOne(coreModels.userData, {
+						authId: parsed.userId,
+					});
+					if (!userData)
+						throw new HackKitError(
+							"INVALID_OPERATION",
+							"User Data must be completed before registering as a Hacker.",
+						);
+					const existing = await em.findOne(coreModels.hacker, {
+						userId: parsed.userId,
+					});
+					const timestamp = now();
+					const value: Hacker = {
+						...parsed,
+						registeredAt: existing?.registeredAt ?? timestamp,
+						updatedAt: timestamp,
+					};
 
-				let hacker: Hacker;
-				if (!existing) {
+					if (existing) {
+						em.assign(existing, value, { ignoreUndefined: true });
+						await em.flush();
+						return serialize(existing);
+					}
 					const { requireApproval } =
 						await registrationPolicy.assertCanRegisterNewHacker();
-					hacker = await db.insert(coreModels.hacker, value);
+					const hacker = em.create(coreModels.hacker, value);
+					const profile = await em.findOneOrFail(coreModels.user, {
+						id: parsed.userId,
+					});
 					if (defaultCompetitorRoleId) {
 						await getRoleOrThrow(defaultCompetitorRoleId);
-						await db.update(
-							coreModels.user,
-							{ authId: parsed.authId },
-							{
-								roleId: defaultCompetitorRoleId,
-								isApproved: !requireApproval,
-								updatedAt: timestamp,
-							},
-						);
+						profile.roleId = defaultCompetitorRoleId;
+						profile.isApproved = !requireApproval;
 					} else if (!requireApproval) {
-						await db.update(
-							coreModels.user,
-							{ authId: parsed.authId },
-							{
-								isApproved: true,
-								updatedAt: timestamp,
-							},
-						);
+						profile.isApproved = true;
 					}
-				} else {
-					const [updated] = await db.update(
-						coreModels.hacker,
-						{ authId: parsed.authId },
-						value,
-					);
-					hacker = updated ?? value;
-				}
-				return hacker;
-			},
-		);
+					profile.updatedAt = timestamp;
+					await em.flush();
+					return serialize(hacker);
+				},
+			);
+		});
 	}
 
 	const hackkit = {
@@ -207,6 +198,13 @@ export function createHackkit<
 		permissions: CorePermission,
 		registry,
 		plugins: pluginApis,
+		isPluginEnabled(pluginId: string): boolean {
+			const plugin = registry.plugins[pluginId];
+			return (
+				Object.hasOwn(registry.plugins, pluginId) &&
+				plugin.enabled !== false
+			);
+		},
 		accessControl,
 		settings: settingsApi,
 		notifications: notificationsApi,
@@ -224,36 +222,40 @@ export function createHackkit<
 			options: userDataOptions,
 
 			async getUserData(authId: AuthId): Promise<UserData | null> {
-				return db.findOne(coreModels.userData, { authId });
+				const record = await em.findOne(coreModels.userData, {
+					authId,
+				});
+				return record ? serialize(record) : null;
 			},
 
 			async completeUserData(input: unknown): Promise<UserData> {
-				const parsed = parseInput(completeUserDataSchema, input);
-				await getUserOrThrow(parsed.authId);
-				const existing = await db.findOne(coreModels.userData, {
-					authId: parsed.authId,
+				return withOperationLock(em, "user-data", async () => {
+					const parsed = parseInput(completeUserDataSchema, input);
+					await getUserOrThrow(parsed.authId);
+					const existing = await em.findOne(coreModels.userData, {
+						authId: parsed.authId,
+					});
+					const timestamp = now();
+					const value: UserData = {
+						...parsed,
+						completedAt: existing?.completedAt ?? timestamp,
+						updatedAt: timestamp,
+					};
+					const record = existing
+						? em.assign(existing, value, { ignoreUndefined: true })
+						: em.create(coreModels.userData, value);
+					await em.flush();
+					return serialize(record);
 				});
-				const timestamp = now();
-				const value: UserData = {
-					...parsed,
-					completedAt: existing?.completedAt ?? timestamp,
-					updatedAt: timestamp,
-				};
-				if (!existing) return db.insert(coreModels.userData, value);
-				const [updated] = await db.update(
-					coreModels.userData,
-					{ authId: parsed.authId },
-					value,
-				);
-				return updated ?? value;
 			},
 		},
 
 		hackers: {
 			registerHacker,
 
-			async getHacker(authId: AuthId): Promise<Hacker | null> {
-				return db.findOne(coreModels.hacker, { authId });
+			async getHacker(userId: UserId): Promise<Hacker | null> {
+				const record = await em.findOne(coreModels.hacker, { userId });
+				return record ? serialize(record) : null;
 			},
 		},
 
@@ -264,131 +266,165 @@ export function createHackkit<
 						input.actorAuthId,
 						CorePermission.RolesView,
 					);
-				return db.findMany(coreModels.role, {
-					orderBy: { field: "position", direction: "asc" },
-				});
+				return serialize(
+					await em.find(
+						coreModels.role,
+						{},
+						{ orderBy: { position: "asc" } },
+					),
+				);
 			},
 
 			async getRole(roleId: RoleId): Promise<Role | null> {
-				return db.findOne(coreModels.role, { id: roleId });
+				const record = await em.findOne(coreModels.role, {
+					id: roleId,
+				});
+				return record ? serialize(record) : null;
 			},
 
 			async createRole(input: unknown): Promise<Role> {
-				const parsed = parseInput(createRoleSchema, input);
-				const principal = await accessControl.requirePermission(
-					parsed.actorAuthId,
-					CorePermission.RolesCreate,
-				);
-				const rolePosition = {
-					...principal.role,
-					position: parsed.position,
-				};
-				accessControl.assertCanManageRole(principal, rolePosition);
-				accessControl.assertCanGrantPermissions(
-					principal,
-					parsed.permissions as PermissionKey[],
-				);
-				const existingName = await db.findOne(coreModels.role, {
-					name: parsed.name,
-				});
-				if (existingName)
-					throw new HackKitError(
-						"CONFLICT",
-						"Role name already exists.",
+				return withOperationLock(em, "roles", async () => {
+					const parsed = parseInput(createRoleSchema, input);
+					const principal = await accessControl.requirePermission(
+						parsed.actorAuthId,
+						CorePermission.RolesCreate,
 					);
-				const timestamp = now();
-				return db.insert(coreModels.role, {
-					id: parsed.id ?? id(),
-					name: parsed.name,
-					position: parsed.position,
-					permissions: parsed.permissions as PermissionKey[],
-					color: parsed.color,
-					createdAt: timestamp,
-					updatedAt: timestamp,
-				});
-			},
-
-			async updateRole(input: unknown): Promise<Role> {
-				const parsed = parseInput(updateRoleSchema, input);
-				const principal = await accessControl.requirePermission(
-					parsed.actorAuthId,
-					CorePermission.RolesUpdate,
-				);
-				const role = await getRoleOrThrow(parsed.roleId);
-				accessControl.assertCanManageRole(principal, role);
-				if (parsed.position !== undefined)
-					accessControl.assertCanManageRole(principal, {
-						...role,
+					const rolePosition = {
+						...principal.role,
 						position: parsed.position,
-					});
-				if (parsed.permissions)
+					};
+					accessControl.assertCanManageRole(principal, rolePosition);
 					accessControl.assertCanGrantPermissions(
 						principal,
 						parsed.permissions as PermissionKey[],
 					);
-				const [updated] = await db.update(
-					coreModels.role,
-					{ id: parsed.roleId },
-					{
+					const existingName = await em.findOne(coreModels.role, {
 						name: parsed.name,
-						position: parsed.position,
-						permissions: parsed.permissions as
-							| PermissionKey[]
-							| undefined,
-						color: parsed.color,
-						updatedAt: now(),
-					},
-				);
-				if (!updated)
-					throw new HackKitError("NOT_FOUND", "Role not found.");
-				return updated;
+					});
+					if (existingName)
+						throw new HackKitError(
+							"CONFLICT",
+							"Role name already exists.",
+						);
+					const timestamp = now();
+					{
+						const created = em.create(coreModels.role, {
+							id: parsed.id ?? id(),
+							name: parsed.name,
+							position: parsed.position,
+							permissions: parsed.permissions as PermissionKey[],
+							color: parsed.color,
+							createdAt: timestamp,
+							updatedAt: timestamp,
+						});
+						await em.flush();
+						return serialize(created);
+					}
+				});
 			},
 
-			async deleteRole(input: unknown): Promise<void> {
-				const parsed = parseInput(deleteRoleSchema, input);
-				const principal = await accessControl.requirePermission(
-					parsed.actorAuthId,
-					CorePermission.RolesDelete,
-				);
-				const role = await getRoleOrThrow(parsed.roleId);
-				accessControl.assertCanManageRole(principal, role);
-				const usersWithRole = await db.findMany(coreModels.user, {
-					where: { roleId: parsed.roleId },
-					limit: 1,
+			async updateRole(input: unknown): Promise<Role> {
+				return withOperationLock(em, "roles", async () => {
+					const parsed = parseInput(updateRoleSchema, input);
+					const principal = await accessControl.requirePermission(
+						parsed.actorAuthId,
+						CorePermission.RolesUpdate,
+					);
+					const role = await getRoleOrThrow(parsed.roleId);
+					accessControl.assertCanManageRole(principal, role);
+					if (parsed.position !== undefined)
+						accessControl.assertCanManageRole(principal, {
+							...role,
+							position: parsed.position,
+						});
+					if (parsed.permissions)
+						accessControl.assertCanGrantPermissions(
+							principal,
+							parsed.permissions as PermissionKey[],
+						);
+					const updated = await em.findOne(coreModels.role, {
+						id: parsed.roleId,
+					});
+					if (updated) {
+						em.assign(
+							updated,
+							{
+								name: parsed.name,
+								position: parsed.position,
+								permissions: parsed.permissions as
+									| PermissionKey[]
+									| undefined,
+								color: parsed.color,
+								updatedAt: now(),
+							},
+							{ ignoreUndefined: true },
+						);
+						await em.flush();
+					}
+					if (!updated)
+						throw new HackKitError("NOT_FOUND", "Role not found.");
+					return serialize(updated);
 				});
-				if (usersWithRole.length > 0)
-					throw new HackKitError(
-						"INVALID_OPERATION",
-						"Cannot delete a role assigned to users.",
+			},
+
+			async deleteRole(input: unknown): Promise<void> {
+				return withOperationLock(em, "roles", async () => {
+					const parsed = parseInput(deleteRoleSchema, input);
+					const principal = await accessControl.requirePermission(
+						parsed.actorAuthId,
+						CorePermission.RolesDelete,
+					);
+					const role = await getRoleOrThrow(parsed.roleId);
+					accessControl.assertCanManageRole(principal, role);
+					const usersWithRole = await em.find(
+						coreModels.user,
+						{ roleId: parsed.roleId },
+						{ limit: 1 },
 					);
-				await db.delete(coreModels.role, { id: parsed.roleId });
+					if (usersWithRole.length > 0)
+						throw new HackKitError(
+							"INVALID_OPERATION",
+							"Cannot delete a role assigned to users.",
+						);
+					await em.nativeDelete(coreModels.role, {
+						id: parsed.roleId,
+					});
+				});
 			},
 
 			async assignRoleToUser(input: unknown): Promise<User> {
-				const parsed = parseInput(assignRoleSchema, input);
-				const principal = await accessControl.requirePermission(
-					parsed.actorAuthId,
-					CorePermission.RolesAssign,
-				);
-				const target = await getUserOrThrow(parsed.targetAuthId);
-				const nextRole = await getRoleOrThrow(parsed.roleId);
-				accessControl.assertCanManageRole(principal, nextRole);
-				if (target.roleId)
-					accessControl.assertCanManageRole(
-						principal,
-						await getRoleOrThrow(target.roleId),
+				return withOperationLock(em, "roles", async () => {
+					const parsed = parseInput(assignRoleSchema, input);
+					const principal = await accessControl.requirePermission(
+						parsed.actorAuthId,
+						CorePermission.RolesAssign,
 					);
-				const [updated] = await db.update(
-					coreModels.user,
-					{ authId: parsed.targetAuthId },
-					{
-						roleId: parsed.roleId,
-						updatedAt: now(),
-					},
-				);
-				if (!updated)
-					throw new HackKitError("NOT_FOUND", "User not found.");
-				return updated;
+					const target = await getUserOrThrow(parsed.targetAuthId);
+					const nextRole = await getRoleOrThrow(parsed.roleId);
+					accessControl.assertCanManageRole(principal, nextRole);
+					if (target.roleId)
+						accessControl.assertCanManageRole(
+							principal,
+							await getRoleOrThrow(target.roleId),
+						);
+					const updated = await em.findOne(coreModels.user, {
+						id: parsed.targetAuthId,
+					});
+					if (updated) {
+						em.assign(
+							updated,
+							{
+								roleId: parsed.roleId,
+								updatedAt: now(),
+							},
+							{ ignoreUndefined: true },
+						);
+						await em.flush();
+					}
+					if (!updated)
+						throw new HackKitError("NOT_FOUND", "User not found.");
+					return getUserOrThrow(parsed.targetAuthId);
+				});
 			},
 		},
 	};
diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts
index b5e1f2a8..921ab88a 100644
--- a/packages/core/src/index.ts
+++ b/packages/core/src/index.ts
@@ -1,4 +1,3 @@
-export type { AuthAdapter, AuthIdentity, AuthSession } from "./adapters/auth";
 export type {
 	BlobStorageAdapter,
 	BlobStorageAdapterWithView,
@@ -19,16 +18,18 @@ export type {
 	HackKitLoggerOptions,
 	LogLevel,
 } from "./adapters/logger";
-export { createHackkit } from "./hackkit";
+export { createHackKitAuth } from "./mikro/auth";
+export type { HackKitAuthOptions } from "./mikro/auth";
+export {
+	authEntities,
+	AuthSession,
+	AuthAccount,
+	AuthVerification,
+} from "./mikro/auth-entities";
+export { HackKitUser } from "./models";
 export type { HackKit } from "./hackkit";
 export { seedRoles } from "./seed";
 export type { SeedRoleInput, SeedRolesOptions, SeedRolesResult } from "./seed";
-export {
-	defineModel,
-	field,
-	isDatabaseAdapterFactory,
-	model,
-} from "./database";
 export {
 	createCompleteUserDataSchema,
 	defaultUserDataOptions,
@@ -46,10 +47,6 @@ export {
 	defineSetting,
 	validateSettingValue,
 } from "./settings";
-export {
-	createInMemoryDatabaseAdapter,
-	createInMemoryDatabaseAdapterFromStorage,
-} from "./adapters/db/memory";
 export { createAccessControl } from "./access-control";
 export type { AccessControl, AccessPrincipal } from "./access-control";
 export type { HackkitRuntimeContext } from "./hackkit-context";
@@ -82,30 +79,6 @@ export type {
 	EventTypesInput,
 } from "./event-types";
 export type { GroupsInput, HackkitGroup, HackkitGroupInput } from "./groups";
-export type {
-	AnyField,
-	DatabaseAdapter,
-	DatabaseAdapterFactory,
-	DatabaseAdapterFactoryContext,
-	DatabaseAdapterInput,
-	DatabaseSchemaAdapter,
-	FieldDefinition,
-	FieldKind,
-	FieldReference,
-	FindManyOptions,
-	GeneratedSchemaFile,
-	InferInsert,
-	InferSelect,
-	Model,
-	ModelDefinition,
-	ModelKey,
-	OrderBy,
-	PersistentModel,
-	ReferenceAction,
-	StorageDefault,
-	StorageRegistry,
-	Where,
-} from "./database";
 export type {
 	UserDataOption,
 	UserDataOptions,
@@ -149,17 +122,6 @@ export type {
 	AdminUserExportRow,
 	AdminUserRecord,
 	PublicUserProfile,
-	NewHacker,
-	NewRsvp,
-	NewRole,
-	NewUser,
-	NewUserBan,
-	NewUserData,
-	NewEvent,
-	NewEventScan,
-	NewHackathonSetting,
-	NewNotificationDeliveryAttempt,
-	NewNotificationIntent,
 	NotificationDeliveryAttempt,
 	NotificationIntent,
 } from "./types";
@@ -179,7 +141,6 @@ export {
 	createRoleSchema,
 	deleteEventSchema,
 	deleteRoleSchema,
-	ensureUserSchema,
 	getEventSchema,
 	hackTagSchema,
 	listEventScansSchema,
@@ -194,3 +155,14 @@ export {
 	updateUserProfileSchema,
 } from "./schemas";
 export type { CompleteUserDataInput } from "./schemas";
+
+export { initializeHackkit } from "./runtime";
+export { createOrmOptions } from "./mikro/options";
+export type {
+	InitializeHackkitOptions,
+	HackKitScope,
+	HackKitRuntime,
+} from "./runtime";
+export type { HackKitDatabaseOptions, HackKitDriver } from "./mikro/options";
+
+export { withOperationLock } from "./mikro/operation";
diff --git a/packages/core/src/mikro/auth-entities.test.ts b/packages/core/src/mikro/auth-entities.test.ts
new file mode 100644
index 00000000..7ada3670
--- /dev/null
+++ b/packages/core/src/mikro/auth-entities.test.ts
@@ -0,0 +1,104 @@
+import { describe, expect, it } from "vitest";
+import { MikroORM, RequestContext } from "@mikro-orm/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { LibSqlDriver } from "@mikro-orm/libsql";
+import { authEntities } from "./auth-entities";
+import { createHackKitAuth } from "./auth";
+import { HackKitUser } from "../models";
+
+describe.each([
+	[
+		"SQLite",
+		() =>
+			MikroORM.init({
+				driver: SqliteDriver,
+				dbName: ":memory:",
+				entities: [...authEntities, HackKitUser],
+			}),
+	],
+	[
+		"local libSQL",
+		() =>
+			MikroORM.init({
+				driver: LibSqlDriver,
+				dbName: ":memory:",
+				entities: [...authEntities, HackKitUser],
+			}),
+	],
+])("Better Auth MikroORM integration on %s", (_name, open) => {
+	it("persists signup and session with a request-scoped manager", async () => {
+		const orm = await open();
+		try {
+			await orm.schema.create();
+			const auth = createHackKitAuth(orm, {
+				secret: "test-secret-that-is-at-least-32-characters",
+				baseURL: "http://localhost:3000",
+				emailAndPassword: { enabled: true },
+			});
+			await RequestContext.create(orm.em, async () => {
+				const result = await auth.api.signUpEmail({
+					body: {
+						name: "Example User",
+						email: "example@example.com",
+						password: "correct horse battery staple",
+					},
+					asResponse: true,
+				});
+				expect(result.status).toBe(200);
+				const cookie = result.headers.get("set-cookie");
+				expect(cookie).toContain("better-auth.session_token");
+				const session = await auth.api.getSession({
+					headers: new Headers({ cookie: cookie ?? "" }),
+				});
+				expect(session?.user.email).toBe("example@example.com");
+			});
+			const users = await orm.em.fork().find(HackKitUser, {});
+			expect(users).toHaveLength(1);
+			const em = orm.em.fork();
+			const profile = await em.findOneOrFail(HackKitUser, {
+				id: users[0].id,
+			});
+			profile.hackTag = "example";
+			await em.persist(profile).flush();
+			expect(
+				(
+					await em
+						.fork()
+						.findOneOrFail(HackKitUser, { hackTag: "example" })
+				).skills,
+			).toEqual([]);
+			const duplicateManager = em.fork();
+			await expect(
+				duplicateManager
+					.persist(
+						duplicateManager.create(HackKitUser, {
+							id: users[0].id,
+							name: "Duplicate User",
+							email: "duplicate@example.com",
+						}),
+					)
+					.flush(),
+			).rejects.toThrow();
+			await expect(
+				em.transactional(async (transaction) => {
+					const value = await transaction.findOneOrFail(HackKitUser, {
+						hackTag: "example",
+					});
+					value.bio = "rolled back";
+					await transaction.flush();
+					throw new Error("abort");
+				}),
+			).rejects.toThrow("abort");
+			expect(
+				(
+					await em
+						.fork()
+						.findOneOrFail(HackKitUser, { hackTag: "example" })
+				).bio,
+			).toBeNull();
+			expect(await orm.schema.getUpdateSchemaSQL()).toBe("");
+		} finally {
+			await orm.close();
+		}
+	});
+});
diff --git a/packages/core/src/mikro/auth-entities.ts b/packages/core/src/mikro/auth-entities.ts
new file mode 100644
index 00000000..8ac57bf4
--- /dev/null
+++ b/packages/core/src/mikro/auth-entities.ts
@@ -0,0 +1,65 @@
+import { defineEntity, p } from "@mikro-orm/core";
+
+import { HackKitUser } from "../models";
+
+export const AuthSession = defineEntity({
+	name: "AuthSession",
+	tableName: "session",
+	properties: {
+		id: p.string().primary(),
+		expiresAt: p.datetime(),
+		token: p.string().unique(),
+		createdAt: p.datetime(),
+		updatedAt: p.datetime(),
+		ipAddress: p.string().nullable(),
+		userAgent: p.text().nullable(),
+		userId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("user_id")
+				.index()
+				.deleteRule("cascade"),
+	},
+});
+
+export const AuthAccount = defineEntity({
+	name: "AuthAccount",
+	tableName: "account",
+	properties: {
+		id: p.string().primary(),
+		accountId: p.string(),
+		providerId: p.string(),
+		userId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("user_id")
+				.index()
+				.deleteRule("cascade"),
+		accessToken: p.text().nullable(),
+		refreshToken: p.text().nullable(),
+		idToken: p.text().nullable(),
+		accessTokenExpiresAt: p.datetime().nullable(),
+		refreshTokenExpiresAt: p.datetime().nullable(),
+		scope: p.text().nullable(),
+		password: p.string().nullable(),
+		createdAt: p.datetime(),
+		updatedAt: p.datetime(),
+	},
+});
+
+export const AuthVerification = defineEntity({
+	name: "AuthVerification",
+	tableName: "verification",
+	properties: {
+		id: p.string().primary(),
+		identifier: p.string().index(),
+		value: p.text(),
+		expiresAt: p.datetime(),
+		createdAt: p.datetime().nullable(),
+		updatedAt: p.datetime().nullable(),
+	},
+});
+
+export const authEntities = [AuthSession, AuthAccount, AuthVerification];
diff --git a/packages/core/src/mikro/auth-lifecycle.test.ts b/packages/core/src/mikro/auth-lifecycle.test.ts
new file mode 100644
index 00000000..bf929057
--- /dev/null
+++ b/packages/core/src/mikro/auth-lifecycle.test.ts
@@ -0,0 +1,287 @@
+import { MikroORM } from "@mikro-orm/core";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { describe, expect, it } from "vitest";
+import { createHackKitAuth } from "./auth";
+import { authEntities, AuthSession, AuthAccount } from "./auth-entities";
+import { coreModels, HackKitUser } from "../models";
+import { createHackkit } from "../hackkit";
+
+const options = {
+	secret: "local-test-secret-with-at-least-32-characters",
+	baseURL: "http://localhost:3000",
+	emailAndPassword: { enabled: true },
+	user: { deleteUser: { enabled: true } },
+	logger: { disabled: true },
+};
+const signupBody = {
+	email: "josh@example.com",
+	name: "Josh Silva",
+	password: "a sufficiently long password",
+};
+async function open() {
+	const orm = await MikroORM.init({
+		driver: SqliteDriver,
+		dbName: ":memory:",
+		entities: [...authEntities, ...Object.values(coreModels)],
+	});
+	await orm.schema.create();
+	return orm;
+}
+
+describe("Core auth lifecycle", () => {
+	it("rolls back the single user row when account creation rejects signup", async () => {
+		const orm = await open();
+		try {
+			let userExistsBeforeAccount = false;
+			const auth = createHackKitAuth(orm, {
+				...options,
+				databaseHooks: {
+					account: {
+						create: {
+							before: async () => {
+								userExistsBeforeAccount =
+									(await orm.em.count(HackKitUser)) === 1;
+								throw new Error("Reject account");
+							},
+						},
+					},
+				},
+			});
+			await expect(
+				auth.api.signUpEmail({ body: signupBody }),
+			).rejects.toThrow("Reject account");
+			expect(userExistsBeforeAccount).toBe(true);
+			const em = orm.em.fork({ useContext: true });
+			expect(await em.count(HackKitUser)).toBe(0);
+			expect(await em.count(AuthAccount)).toBe(0);
+			expect(await em.count(AuthSession)).toBe(0);
+		} finally {
+			await orm.close();
+		}
+	});
+
+	it("shares name, photo and email across auth and domain reads and deletes dependent records", async () => {
+		const orm = await open();
+		try {
+			const auth = createHackKitAuth(orm, options);
+			const signup = await auth.api.signUpEmail({
+				body: signupBody,
+				returnHeaders: true,
+			});
+			const headers = new Headers({
+				cookie: signup.headers.get("set-cookie") ?? "",
+			});
+			const id = signup.response.user.id;
+			const em = orm.em.fork({ useContext: true });
+			const user = await em.findOneOrFail(HackKitUser, { id });
+			expect(user).toMatchObject({
+				name: signupBody.name,
+				email: signupBody.email,
+				roleId: null,
+				isApproved: false,
+				skills: [],
+				checkedInAt: null,
+			});
+			expect(await em.count(HackKitUser)).toBe(1);
+			expect(
+				[...orm.getMetadata().getAll().values()].find(
+					(entity) => entity.tableName === "user",
+				),
+			).toBeUndefined();
+			const hackkit = createHackkit({ em, logger: { disabled: true } });
+			await hackkit.users.updateProfile({
+				authId: id,
+				name: "Joshua Silva",
+				profilePhotoUrl: "/api/files/view/avatar.png",
+				bio: "Hello",
+			});
+			expect(
+				(await auth.api.getSession({ headers }))?.user,
+			).toMatchObject({
+				id,
+				name: "Joshua Silva",
+				image: "/api/files/view/avatar.png",
+			});
+			await auth.api.updateUser({
+				headers,
+				body: { name: "Josh", image: "https://example.com/avatar.png" },
+			});
+			expect(
+				await createHackkit({
+					em: em.fork(),
+					logger: { disabled: true },
+				}).users.getUser(id),
+			).toMatchObject({
+				id,
+				name: "Josh",
+				profilePhotoUrl: "https://example.com/avatar.png",
+				bio: "Hello",
+			});
+			const signin = await auth.api.signInEmail({
+				body: {
+					email: signupBody.email,
+					password: signupBody.password,
+				},
+			});
+			expect(signin.user.id).toBe(id);
+			// Nullable audit references survive deletion; dependent domain data cascades.
+			em.create(coreModels.userData, {
+				authId: id,
+				age: 21,
+				gender: "x",
+				race: "x",
+				ethnicity: "x",
+				shirtSize: "m",
+				hasAcceptedMLHCodeOfConduct: true,
+				hasSharedDataWithMLH: false,
+				isEmailable: false,
+			});
+			em.create(coreModels.setting, {
+				key: "test",
+				value: true,
+				createdByAuthId: id,
+				updatedByAuthId: id,
+			});
+			await em.flush();
+			await auth.api.deleteUser({
+				headers,
+				body: { password: signupBody.password },
+			});
+			const fresh = em.fork();
+			expect(await fresh.count(HackKitUser)).toBe(0);
+			expect(await fresh.count(AuthSession)).toBe(0);
+			expect(await fresh.count(AuthAccount)).toBe(0);
+			expect(await fresh.count(coreModels.userData)).toBe(0);
+			expect(
+				await fresh.findOneOrFail(coreModels.setting, { key: "test" }),
+			).toMatchObject({ createdByAuthId: null, updatedByAuthId: null });
+			expect(await auth.api.getSession({ headers })).toBeNull();
+		} finally {
+			await orm.close();
+		}
+	});
+
+	it("ignores privileged fields in public signup and update payloads", async () => {
+		const orm = await open();
+		try {
+			const auth = createHackKitAuth(orm, options);
+			const attack = {
+				roleId: "core.owner",
+				isApproved: true,
+				checkedInAt: new Date().toISOString(),
+				hackTag: "stolen",
+			};
+			const post = (path: string, body: object, cookie = "") =>
+				auth.handler(
+					new Request(`http://localhost:3000/api/auth/${path}`, {
+						method: "POST",
+						headers: {
+							"content-type": "application/json",
+							origin: "http://localhost:3000",
+							cookie,
+						},
+						body: JSON.stringify(body),
+					}),
+				);
+			const signup = await post("sign-up/email", {
+				...signupBody,
+				...attack,
+			});
+			expect(signup.status).toBe(200);
+			const cookie = signup.headers.get("set-cookie") ?? "";
+			const session = await auth.api.getSession({
+				headers: new Headers({ cookie }),
+			});
+			expect(
+				(
+					await post(
+						"update-user",
+						{ name: "Allowed", ...attack },
+						cookie,
+					)
+				).status,
+			).toBe(200);
+			const em = orm.em.fork({ useContext: true });
+			expect(
+				await em.findOneOrFail(HackKitUser, { id: session!.user.id }),
+			).toMatchObject({
+				name: "Allowed",
+				roleId: null,
+				isApproved: false,
+				checkedInAt: null,
+				hackTag: null,
+			});
+			await createHackkit({
+				em,
+				logger: { disabled: true },
+			}).users.updateProfile({
+				authId: session!.user.id,
+				bio: "Allowed",
+				...attack,
+			});
+			expect(
+				await em
+					.fork()
+					.findOneOrFail(HackKitUser, { id: session!.user.id }),
+			).toMatchObject({
+				bio: "Allowed",
+				roleId: null,
+				isApproved: false,
+				checkedInAt: null,
+			});
+		} finally {
+			await orm.close();
+		}
+	});
+
+	it("verifies email on the canonical user before allowing verified signin", async () => {
+		const orm = await open();
+		try {
+			let verificationUrl = "";
+			const auth = createHackKitAuth(orm, {
+				...options,
+				emailAndPassword: {
+					enabled: true,
+					requireEmailVerification: true,
+				},
+				emailVerification: {
+					sendOnSignUp: true,
+					sendVerificationEmail: async ({ url }) => {
+						verificationUrl = url;
+					},
+				},
+			});
+			const signup = await auth.api.signUpEmail({ body: signupBody });
+			await expect(
+				auth.api.signInEmail({
+					body: {
+						email: signupBody.email,
+						password: signupBody.password,
+					},
+				}),
+			).rejects.toMatchObject({ status: "FORBIDDEN" });
+			await auth.api.verifyEmail({
+				query: {
+					token: new URL(verificationUrl).searchParams.get("token")!,
+				},
+			});
+			expect(
+				await orm.em
+					.fork({ useContext: true })
+					.findOneOrFail(HackKitUser, { id: signup.user.id }),
+			).toMatchObject({ emailVerified: true });
+			expect(
+				(
+					await auth.api.signInEmail({
+						body: {
+							email: signupBody.email,
+							password: signupBody.password,
+						},
+					})
+				).user.id,
+			).toBe(signup.user.id);
+		} finally {
+			await orm.close();
+		}
+	});
+});
diff --git a/packages/core/src/mikro/auth-schema.test.ts b/packages/core/src/mikro/auth-schema.test.ts
new file mode 100644
index 00000000..5a613777
--- /dev/null
+++ b/packages/core/src/mikro/auth-schema.test.ts
@@ -0,0 +1,77 @@
+import { expect, it } from "vitest";
+import { createTestHackkit } from "../testing";
+import { createHackKitAuth } from "./auth";
+
+it("rejects auth options that need undeclared columns before serving requests", async () => {
+	const { runtime } = await createTestHackkit();
+	expect(() =>
+		createHackKitAuth(runtime.orm, {
+			secret: "test-secret-that-is-at-least-32-characters",
+			user: {
+				additionalFields: {
+					department: { type: "string", required: false },
+				},
+			},
+		}),
+	).toThrow(/department/);
+});
+
+it("rejects an auth plugin whose table is not in the entity registry", async () => {
+	const { runtime } = await createTestHackkit();
+	expect(() =>
+		createHackKitAuth(runtime.orm, {
+			secret: "test-secret-that-is-at-least-32-characters",
+			plugins: [
+				{
+					id: "test-plugin",
+					schema: {
+						membership: { fields: { label: { type: "string" } } },
+					},
+				},
+			],
+		}),
+	).toThrow(/membership/);
+});
+
+it.each([
+	["roleId", { type: "string", required: false }],
+	[
+		"privilegedAlias",
+		{ type: "boolean", fieldName: "isApproved", required: false },
+	],
+] as const)(
+	"rejects auth additional field %s that exposes domain properties",
+	async (name, field) => {
+		const { runtime } = await createTestHackkit();
+		expect(() =>
+			createHackKitAuth(runtime.orm, {
+				secret: "test-secret-that-is-at-least-32-characters",
+				user: { additionalFields: { [name]: field } },
+			}),
+		).toThrow("owned by Core");
+	},
+);
+
+it("rejects an auth plugin that exposes a domain user field", async () => {
+	const { runtime } = await createTestHackkit();
+	expect(() =>
+		createHackKitAuth(runtime.orm, {
+			secret: "test-secret-that-is-at-least-32-characters",
+			plugins: [
+				{
+					id: "unsafe-user",
+					schema: {
+						user: {
+							fields: {
+								approval: {
+									type: "boolean",
+									fieldName: "isApproved",
+								},
+							},
+						},
+					},
+				},
+			],
+		}),
+	).toThrow("owned by Core");
+});
diff --git a/packages/core/src/mikro/auth.ts b/packages/core/src/mikro/auth.ts
new file mode 100644
index 00000000..4e1b7c1a
--- /dev/null
+++ b/packages/core/src/mikro/auth.ts
@@ -0,0 +1,93 @@
+import type { EntityMetadata, MikroORM } from "@mikro-orm/core";
+import { mikroOrmAdapter } from "@a77ay/better-auth-mikro-orm";
+import { betterAuth, type BetterAuthOptions } from "better-auth";
+import { getAuthTables } from "better-auth/db";
+import { HackKitUser } from "../models";
+
+export type HackKitAuthOptions = Omit<
+	BetterAuthOptions,
+	"database" | "user"
+> & {
+	user?: Omit<NonNullable<BetterAuthOptions["user"]>, "modelName" | "fields">;
+};
+const authUserProperties = new Set([
+	"id",
+	"name",
+	"email",
+	"emailVerified",
+	"profilePhotoUrl",
+	"createdAt",
+	"updatedAt",
+]);
+const domainUserProperties = new Set(
+	Object.keys(HackKitUser.meta.properties).filter(
+		(property) => !authUserProperties.has(property),
+	),
+);
+
+/** Core owns the canonical user mapping. Domain fields stay behind Core APIs. */
+export function resolveHackKitAuthOptions<
+	const TOptions extends HackKitAuthOptions,
+>(options: TOptions) {
+	return {
+		...options,
+		user: {
+			...options.user,
+			modelName: "core_user",
+			fields: { image: "profilePhotoUrl" },
+		},
+	};
+}
+
+/** Fail startup and migration generation when auth needs an undeclared schema. */
+export function assertAuthEntitySchema(
+	entities: readonly Pick<
+		EntityMetadata,
+		"tableName" | "className" | "properties"
+	>[],
+	options: HackKitAuthOptions,
+): void {
+	for (const table of Object.values(
+		getAuthTables(resolveHackKitAuthOptions(options)),
+	)) {
+		const entity = entities.find(
+			(candidate) =>
+				candidate.tableName === table.modelName ||
+				candidate.className === table.modelName,
+		);
+		if (!entity)
+			throw new Error(
+				`Better Auth model '${table.modelName}' needs a registered native MikroORM entity.`,
+			);
+		for (const [name, field] of Object.entries(table.fields)) {
+			const property = field.fieldName ?? name;
+			if (
+				entity.tableName === HackKitUser.meta.tableName &&
+				domainUserProperties.has(property)
+			)
+				throw new Error(
+					`Better Auth field 'core_user.${property}' is owned by Core and cannot be exposed through auth options.`,
+				);
+			if (!(property in entity.properties))
+				throw new Error(
+					`Better Auth field '${table.modelName}.${property}' needs a native MikroORM property and a reviewed migration.`,
+				);
+		}
+	}
+}
+
+/** The application supplies credentials and providers; Core owns the database adapter. */
+export function createHackKitAuth<const TOptions extends HackKitAuthOptions>(
+	orm: MikroORM,
+	options: TOptions,
+) {
+	const authOptions = resolveHackKitAuthOptions(options);
+	assertAuthEntitySchema(
+		[...orm.getMetadata().getAll().values()],
+		authOptions,
+	);
+	return betterAuth({
+		...authOptions,
+		database: mikroOrmAdapter(orm),
+	});
+}
diff --git a/packages/core/src/mikro/domain-transactions.test.ts b/packages/core/src/mikro/domain-transactions.test.ts
new file mode 100644
index 00000000..35d19348
--- /dev/null
+++ b/packages/core/src/mikro/domain-transactions.test.ts
@@ -0,0 +1,75 @@
+import { expect, it } from "vitest";
+import { createTestHackkit, createTestUser } from "../testing";
+import { CoreSetting } from "../settings";
+import { seedTestOwner } from "../__tests__/seed-test-owner";
+
+const registration = {
+	university: "UTSA",
+	major: "Computer Science",
+	levelOfStudy: "undergraduate",
+	hackathonsAttended: 0,
+	softwareExperience: "beginner",
+};
+async function prepareParticipant(
+	hackkit: Awaited<ReturnType<typeof createTestHackkit>>,
+	authId: string,
+) {
+	await createTestUser(hackkit, {
+		authId,
+		email: `${authId}@example.com`,
+		name: "Test Hacker",
+	});
+	await hackkit.userData.completeUserData({
+		authId,
+		age: 21,
+		gender: "prefer_not_to_answer",
+		race: "prefer_not_to_answer",
+		ethnicity: "prefer_not_to_answer",
+		shirtSize: "m",
+		dietaryRestrictions: ["none"],
+		hasAcceptedMLHCodeOfConduct: true,
+		hasSharedDataWithMLH: true,
+		isEmailable: false,
+	});
+}
+
+it("rolls registration back when assigning the configured role fails", async () => {
+	const hackkit = await createTestHackkit({
+		defaultCompetitorRoleId: "missing-role",
+	});
+	await prepareParticipant(hackkit, "participant");
+	await expect(
+		hackkit.hackers.registerHacker({
+			...registration,
+			userId: "participant",
+		}),
+	).rejects.toMatchObject({ code: "NOT_FOUND" });
+	const fresh = hackkit.runtime.createScope().hackkit;
+	await expect(fresh.hackers.getHacker("participant")).resolves.toBeNull();
+	expect((await fresh.users.getUser("participant"))?.isApproved).toBe(false);
+});
+
+it("admits only one concurrent registration into the final place", async () => {
+	const hackkit = await createTestHackkit();
+	await seedTestOwner(hackkit);
+	await hackkit.settings.set({
+		actorAuthId: "owner-auth",
+		key: CoreSetting.MaximumRegistrations,
+		value: 1,
+	});
+	await prepareParticipant(hackkit, "one");
+	await prepareParticipant(hackkit, "two");
+	const results = await Promise.allSettled(
+		["one", "two"].map((authId) =>
+			hackkit.runtime.createScope().hackkit.hackers.registerHacker({
+				...registration,
+				userId: authId,
+			}),
+		),
+	);
+	expect(
+		results.filter((result) => result.status === "fulfilled"),
+	).toHaveLength(1);
+	const rejected = results.find((result) => result.status === "rejected");
+	expect(rejected).toMatchObject({ reason: { code: "INVALID_OPERATION" } });
+});
diff --git a/packages/core/src/mikro/entity-registry.test.ts b/packages/core/src/mikro/entity-registry.test.ts
new file mode 100644
index 00000000..799a0be2
--- /dev/null
+++ b/packages/core/src/mikro/entity-registry.test.ts
@@ -0,0 +1,48 @@
+import { defineEntity, p } from "@mikro-orm/core";
+import { expect, it } from "vitest";
+import { createPluginRegistry } from "../plugins";
+
+function entity(name: string, tableName: string) {
+	return defineEntity({
+		name,
+		tableName,
+		properties: { id: p.string().primary() },
+	});
+}
+
+it("collects plugin and app entities once alongside Core and auth", () => {
+	const pluginEntity = entity("ExampleEntry", "example_entry");
+	const appEntity = entity("AppEntry", "app_entry");
+	const registry = createPluginRegistry(
+		[{ id: "example", entities: [pluginEntity] }],
+		[appEntity],
+	);
+	expect(registry.entities).toContain(pluginEntity);
+	expect(registry.entities).toContain(appEntity);
+	expect(
+		registry.entities.filter((item) => item.meta.tableName === "user"),
+	).toHaveLength(0);
+	expect(
+		registry.entities.filter((item) => item.meta.tableName === "core_user"),
+	).toHaveLength(1);
+});
+
+it("rejects a plugin attempting to use another namespace", () => {
+	expect(() =>
+		createPluginRegistry([
+			{ id: "example", entities: [entity("Intruder", "core_intruder")] },
+		]),
+	).toThrow("example_");
+});
+
+it("rejects duplicate table or entity names before ORM initialization", () => {
+	expect(() =>
+		createPluginRegistry([], [entity("DuplicateUser", "core_user")]),
+	).toThrow("Duplicate entity name or table");
+	expect(() =>
+		createPluginRegistry(
+			[],
+			[entity("Duplicate", "app_one"), entity("Duplicate", "app_two")],
+		),
+	).toThrow("Duplicate entity name or table");
+});
diff --git a/packages/core/src/mikro/operation.ts b/packages/core/src/mikro/operation.ts
new file mode 100644
index 00000000..e4985755
--- /dev/null
+++ b/packages/core/src/mikro/operation.ts
@@ -0,0 +1,46 @@
+import {
+	TransactionPropagation,
+	UniqueConstraintViolationException,
+	type EntityManager,
+} from "@mikro-orm/core";
+import { CoreOperationLock } from "../models";
+import { HackKitError } from "../errors";
+
+/** Serialize a read/check/write decision across connections, including SQLite.
+ * The upsert writes before any reads, acquiring the database's write/row lock.
+ * A fresh token forces a write even when the lock row is already managed.
+ * Callbacks contain database work only; deliver external effects after commit.
+ */
+export async function withOperationLock<T>(
+	em: EntityManager,
+	key: string,
+	operation: () => Promise<T>,
+): Promise<T> {
+	const ownsTransaction = !em.isInTransaction();
+	try {
+		return await em.transactional(
+			async (transaction) => {
+				await transaction.upsert(CoreOperationLock, {
+					key,
+					token: crypto.randomUUID(),
+				});
+				await transaction.flush();
+				return operation();
+			},
+			{ clear: true, propagation: TransactionPropagation.REQUIRED },
+		);
+	} catch (error) {
+		if (error instanceof UniqueConstraintViolationException) {
+			throw new HackKitError(
+				"CONFLICT",
+				"A record with these unique values already exists.",
+				{ cause: error },
+			);
+		}
+		throw error;
+	} finally {
+		// A completed operation is a unit-of-work boundary. Reload subsequent reads
+		// from the database, and never retain entities from a rolled-back operation.
+		if (ownsTransaction) em.clear();
+	}
+}
diff --git a/packages/core/src/mikro/options.ts b/packages/core/src/mikro/options.ts
new file mode 100644
index 00000000..2b381db6
--- /dev/null
+++ b/packages/core/src/mikro/options.ts
@@ -0,0 +1,43 @@
+import type { Options, EntitySchema } from "@mikro-orm/core";
+import type { SqliteDriver } from "@mikro-orm/sqlite";
+import type { LibSqlDriver } from "@mikro-orm/libsql";
+import type { MySqlDriver } from "@mikro-orm/mysql";
+import type { PostgreSqlDriver } from "@mikro-orm/postgresql";
+import { Migrator } from "@mikro-orm/migrations";
+import { createPluginRegistry, type HackKitPlugin } from "../plugins";
+import { assertAuthEntitySchema, type HackKitAuthOptions } from "./auth";
+
+export type HackKitDriver =
+	| SqliteDriver
+	| LibSqlDriver
+	| MySqlDriver
+	| PostgreSqlDriver;
+export type HackKitDatabaseOptions = Omit<
+	Partial<Options<HackKitDriver>>,
+	"entities" | "entitiesTs"
+> & { driver: NonNullable<Options<HackKitDriver>["driver"]> };
+
+export type CreateOrmOptionsInput = {
+	database: HackKitDatabaseOptions;
+	auth: HackKitAuthOptions;
+	plugins?: readonly HackKitPlugin[];
+	entities?: readonly EntitySchema[];
+};
+
+/** Runtime and application migrations discover exactly the same entity collection. */
+export function createOrmOptions(
+	options: CreateOrmOptionsInput,
+): Partial<Options<HackKitDriver>> {
+	const registry = createPluginRegistry(options.plugins, options.entities);
+	assertAuthEntitySchema(
+		registry.entities.map((entity) => entity.meta),
+		options.auth,
+	);
+	return {
+		...options.database,
+		entities: registry.entities,
+		extensions: [
+			...new Set([...(options.database.extensions ?? []), Migrator]),
+		],
+	};
+}
diff --git a/packages/core/src/mikro/plugin-disable.test.ts b/packages/core/src/mikro/plugin-disable.test.ts
new file mode 100644
index 00000000..ac5035b9
--- /dev/null
+++ b/packages/core/src/mikro/plugin-disable.test.ts
@@ -0,0 +1,39 @@
+import { defineEntity, p } from "@mikro-orm/core";
+import { expect, it } from "vitest";
+import { createTestHackkit } from "../testing";
+
+it("retains disabled plugin schema and data without activating its API", async () => {
+	const Entry = defineEntity({
+		name: "DisabledEntry",
+		tableName: "example_entry",
+		properties: { id: p.string().primary(), value: p.string() },
+	});
+	let setups = 0;
+	const hackkit = await createTestHackkit({
+		plugins: [
+			{
+				id: "example",
+				enabled: false,
+				entities: [Entry],
+				permissions: { Read: "example.read" },
+				setup: () => {
+					setups++;
+					return { read: () => "should not run" };
+				},
+			},
+		],
+	});
+	hackkit.em.create(Entry, { id: "retained", value: "existing data" });
+	await hackkit.em.flush();
+	expect(setups).toBe(0);
+	expect(hackkit.isPluginEnabled("example")).toBe(false);
+	expect(hackkit.isPluginEnabled("missing")).toBe(false);
+	expect(hackkit.registry.permissions["example.Read"]).toBe("example.read");
+	expect(() => hackkit.plugins.example.read()).toThrow(
+		"plugin 'example' is disabled",
+	);
+	expect((await hackkit.em.findOneOrFail(Entry, "retained")).value).toBe(
+		"existing data",
+	);
+	expect(await hackkit.runtime.orm.schema.getUpdateSchemaSQL()).toBe("");
+});
diff --git a/packages/core/src/mikro/user.ts b/packages/core/src/mikro/user.ts
new file mode 100644
index 00000000..cd910339
--- /dev/null
+++ b/packages/core/src/mikro/user.ts
@@ -0,0 +1,17 @@
+import {
+	serialize,
+	type EntityManager,
+	type FilterQuery,
+	type InferEntity,
+} from "@mikro-orm/core";
+import { HackKitUser } from "../models";
+import type { User } from "../types";
+
+/** Read the canonical user row as a plain DTO using native serialization. */
+export async function readUser(
+	em: EntityManager,
+	where: FilterQuery<InferEntity<typeof HackKitUser>>,
+): Promise<User | null> {
+	const user = await em.findOne(HackKitUser, where);
+	return user ? serialize(user) : null;
+}
diff --git a/packages/core/src/models.ts b/packages/core/src/models.ts
index 61e9c355..32dd1a9b 100644
--- a/packages/core/src/models.ts
+++ b/packages/core/src/models.ts
@@ -1,208 +1,376 @@
-import { defineModel, field } from "./database";
+import { defineEntity, p } from "@mikro-orm/core";
+
+export const CoreRole = defineEntity({
+	name: "CoreRole",
+	tableName: "core_role",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		name: p.string().unique(),
+		position: p.integer(),
+		permissions: p.json<`${string}.${string}`[]>().default([]),
+		color: p.string().nullable(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+	indexes: [{ properties: ["position"] }],
+});
+
+export const HackKitUser = defineEntity({
+	name: "HackKitUser",
+	tableName: "core_user",
+	properties: {
+		id: p.string().primary(),
+		name: p.string(),
+		email: p.string().unique(),
+		emailVerified: p.boolean().default(false),
+		profilePhotoUrl: p.text().nullable(),
+		hackTag: p.string().nullable().unique(),
+		bio: p.text().nullable(),
+		pronouns: p.string().nullable(),
+		skills: p.json<string[]>().default([]),
+		isProfileSearchable: p.boolean().default(true),
+		discordDisplayHandle: p.string().nullable(),
+		roleId: () =>
+			p
+				.manyToOne(CoreRole)
+				.mapToPk()
+				.fieldName("role_id")
+				.nullable()
+				.deleteRule("set null"),
+		isApproved: p.boolean().default(false),
+		checkedInAt: p.datetime().nullable(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["hackTag"] },
+		{ properties: ["roleId"] },
+		{ properties: ["createdAt"] },
+	],
+});
+
+export const CoreUserData = defineEntity({
+	name: "CoreUserData",
+	tableName: "core_user_data",
+	properties: {
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.primary()
+				.deleteRule("cascade"),
+		age: p.integer(),
+		gender: p.string(),
+		race: p.string(),
+		ethnicity: p.string(),
+		shirtSize: p.string(),
+		dietaryRestrictions: p.json<string[]>().default([]),
+		accommodationNote: p.text().nullable(),
+		phoneNumber: p.string().nullable(),
+		countryOfResidence: p.string().nullable(),
+		hasAcceptedMLHCodeOfConduct: p.boolean(),
+		hasSharedDataWithMLH: p.boolean(),
+		isEmailable: p.boolean(),
+		completedAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+});
+
+export const CoreHacker = defineEntity({
+	name: "CoreHacker",
+	tableName: "core_hacker",
+	properties: {
+		userId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				// Preserve the column name used by committed migrations.
+				.fieldName("auth_id")
+				.primary()
+				.deleteRule("cascade"),
+		university: p.string(),
+		major: p.string(),
+		schoolId: p.string().nullable(),
+		levelOfStudy: p.string(),
+		hackathonsAttended: p.integer(),
+		softwareExperience: p.string(),
+		heardFrom: p.string().nullable(),
+		githubUrl: p.text().nullable(),
+		linkedInUrl: p.text().nullable(),
+		personalWebsiteUrl: p.text().nullable(),
+		resumeUrl: p.text().nullable(),
+		group: p.string().nullable(),
+		registeredAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+	indexes: [{ properties: ["registeredAt"] }],
+});
+
+export const CoreRsvp = defineEntity({
+	name: "CoreRsvp",
+	tableName: "core_rsvp",
+	properties: {
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.primary()
+				.deleteRule("cascade"),
+		status: p.enum(["confirmed", "waitlisted", "cancelled"] as const),
+		waitlistPosition: p.integer().nullable(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+		confirmedAt: p.datetime().nullable(),
+		waitlistedAt: p.datetime().nullable(),
+		cancelledAt: p.datetime().nullable(),
+		cancelledByAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("cancelled_by_auth_id")
+				.nullable()
+				.deleteRule("set null"),
+		promotedAt: p.datetime().nullable(),
+		promotedByAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("promoted_by_auth_id")
+				.nullable()
+				.deleteRule("set null"),
+	},
+	indexes: [
+		{ properties: ["status"] },
+		{ properties: ["waitlistPosition"] },
+		{ properties: ["createdAt"] },
+		{ properties: ["updatedAt"] },
+	],
+});
+
+export const CoreUserBan = defineEntity({
+	name: "CoreUserBan",
+	tableName: "core_user_ban",
+	properties: {
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.primary()
+				.deleteRule("cascade"),
+		reason: p.string().nullable(),
+		bannedByAuthId: () =>
+			p.manyToOne(HackKitUser).mapToPk().fieldName("banned_by_auth_id"),
+		createdAt: p.datetime().onCreate(() => new Date()),
+	},
+});
+
+export const CoreEvent = defineEntity({
+	name: "CoreEvent",
+	tableName: "core_event",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		title: p.string(),
+		startTime: p.datetime(),
+		endTime: p.datetime(),
+		location: p.string().default("TBD"),
+		description: p.text(),
+		type: p.string(),
+		host: p.string().nullable(),
+		hidden: p.boolean().default(false),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["startTime"] },
+		{ properties: ["type"] },
+		{ properties: ["hidden"] },
+	],
+});
+
+export const CoreSetting = defineEntity({
+	name: "CoreSetting",
+	tableName: "core_setting",
+	properties: {
+		key: p.string().primary(),
+		value: p.json<unknown>(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		createdByAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("created_by_auth_id")
+				.nullable()
+				.deleteRule("set null"),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+		updatedByAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("updated_by_auth_id")
+				.nullable()
+				.deleteRule("set null"),
+	},
+	indexes: [
+		{ properties: ["updatedAt"] },
+		{ properties: ["updatedByAuthId"] },
+	],
+});
+
+export const CoreEventScan = defineEntity({
+	name: "CoreEventScan",
+	tableName: "core_event_scan",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		eventId: () =>
+			p
+				.manyToOne(CoreEvent)
+				.mapToPk()
+				.fieldName("event_id")
+				.deleteRule("cascade"),
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.deleteRule("cascade"),
+		scannedByAuthId: () =>
+			p.manyToOne(HackKitUser).mapToPk().fieldName("scanned_by_auth_id"),
+		scannedAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["eventId"] },
+		{ properties: ["authId"] },
+		{ properties: ["eventId", "authId"] },
+		{ properties: ["scannedAt"] },
+	],
+});
+
+export const CoreNotificationIntent = defineEntity({
+	name: "CoreNotificationIntent",
+	tableName: "core_notification_intent",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		kind: p.string(),
+		recipientAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("recipient_auth_id")
+				.nullable()
+				.deleteRule("set null"),
+		payload: p.json<Record<string, unknown>>().onCreate(() => ({})),
+		status: p
+			.enum([
+				"pending",
+				"processing",
+				"delivered",
+				"failed",
+				"skipped",
+			] as const)
+			.default("pending"),
+		idempotencyKey: p.string().nullable().unique(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["kind"] },
+		{ properties: ["recipientAuthId"] },
+		{ properties: ["status"] },
+		{ properties: ["createdAt"] },
+	],
+});
+
+export const CoreNotificationDeliveryAttempt = defineEntity({
+	name: "CoreNotificationDeliveryAttempt",
+	tableName: "core_notification_delivery_attempt",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		intentId: () =>
+			p
+				.manyToOne(CoreNotificationIntent)
+				.mapToPk()
+				.fieldName("intent_id")
+				.deleteRule("cascade"),
+		channel: p.string(),
+		provider: p.string().nullable(),
+		status: p.enum(["delivered", "failed", "skipped"] as const),
+		recipient: p.string().nullable(),
+		externalId: p.string().nullable(),
+		error: p.text().nullable(),
+		metadata: p.json<Record<string, unknown>>().onCreate(() => ({})),
+		attemptedAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["intentId"] },
+		{ properties: ["channel"] },
+		{ properties: ["status"] },
+		{ properties: ["attemptedAt"] },
+	],
+});
+
+// Updating a named row serializes domain decisions that depend on row counts.
+export const CoreOperationLock = defineEntity({
+	name: "CoreOperationLock",
+	tableName: "core_operation_lock",
+	properties: {
+		key: p.string().primary(),
+		token: p.string(),
+	},
+});
 
 export const coreModels = {
-	user: defineModel("core.user", {
-		fields: {
-			authId: field.string().primaryKey(),
-			email: field.string().unique(),
-			firstName: field.string(),
-			lastName: field.string(),
-			profilePhotoUrl: field.string().optional(),
-			hackTag: field.string().optional().unique(),
-			bio: field.string().optional(),
-			pronouns: field.string().optional(),
-			skills: field.json<string[]>().default([]),
-			isProfileSearchable: field.boolean().default(true),
-			discordDisplayHandle: field.string().optional(),
-			roleId: field
-				.string()
-				.optional()
-				.references("core.role", "id", { onDelete: "setNull" }),
-			isApproved: field.boolean().default(false),
-			checkedInAt: field.date().optional(),
-			createdAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-		indexes: [["email"], ["hackTag"], ["roleId"], ["createdAt"]],
-	}),
-	userData: defineModel("core.userData", {
-		fields: {
-			authId: field
-				.string()
-				.primaryKey()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			age: field.integer(),
-			gender: field.string(),
-			race: field.string(),
-			ethnicity: field.string(),
-			shirtSize: field.string(),
-			dietaryRestrictions: field.json<string[]>().default([]),
-			accommodationNote: field.string().optional(),
-			phoneNumber: field.string().optional(),
-			countryOfResidence: field.string().optional(),
-			hasAcceptedMLHCodeOfConduct: field.boolean(),
-			hasSharedDataWithMLH: field.boolean(),
-			isEmailable: field.boolean(),
-			completedAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-	}),
-	hacker: defineModel("core.hacker", {
-		fields: {
-			authId: field
-				.string()
-				.primaryKey()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			university: field.string(),
-			major: field.string(),
-			schoolId: field.string().optional(),
-			levelOfStudy: field.string(),
-			hackathonsAttended: field.integer(),
-			softwareExperience: field.string(),
-			heardFrom: field.string().optional(),
-			githubUrl: field.string().optional(),
-			linkedInUrl: field.string().optional(),
-			personalWebsiteUrl: field.string().optional(),
-			resumeUrl: field.string().optional(),
-			group: field.string().optional(),
-			registeredAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-		indexes: [["registeredAt"]],
-	}),
-	rsvp: defineModel("core.rsvp", {
-		fields: {
-			authId: field
-				.string()
-				.primaryKey()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			status: field.enum(["confirmed", "waitlisted", "cancelled"] as const),
-			waitlistPosition: field.integer().optional(),
-			createdAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-			confirmedAt: field.date().optional(),
-			waitlistedAt: field.date().optional(),
-			cancelledAt: field.date().optional(),
-			cancelledByAuthId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-			promotedAt: field.date().optional(),
-			promotedByAuthId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-		},
-		indexes: [["status"], ["waitlistPosition"], ["createdAt"], ["updatedAt"]],
-	}),
-	role: defineModel("core.role", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			name: field.string().unique(),
-			position: field.integer(),
-			permissions: field.json<`${string}.${string}`[]>().default([]),
-			color: field.string().optional(),
-			createdAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-		indexes: [["position"]],
-	}),
-	userBan: defineModel("core.userBan", {
-		fields: {
-			authId: field
-				.string()
-				.primaryKey()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			reason: field.string().optional(),
-			bannedByAuthId: field.string().references("core.user", "authId"),
-			createdAt: field.date().defaultNow(),
-		},
-	}),
-	event: defineModel("core.event", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			title: field.string(),
-			startTime: field.date(),
-			endTime: field.date(),
-			location: field.string().default("TBD"),
-			description: field.string(),
-			type: field.string(),
-			host: field.string().optional(),
-			hidden: field.boolean().default(false),
-			createdAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-		indexes: [["startTime"], ["type"], ["hidden"]],
-	}),
-	setting: defineModel("core.setting", {
-		fields: {
-			key: field.string().primaryKey(),
-			value: field.json<unknown>(),
-			createdAt: field.date().defaultNow(),
-			createdByAuthId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-			updatedAt: field.date().defaultNow(),
-			updatedByAuthId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-		},
-		indexes: [["updatedAt"], ["updatedByAuthId"]],
-	}),
-	eventScan: defineModel("core.eventScan", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			eventId: field
-				.string()
-				.references("core.event", "id", { onDelete: "cascade" }),
-			authId: field
-				.string()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			scannedByAuthId: field.string().references("core.user", "authId"),
-			scannedAt: field.date().defaultNow(),
-		},
-		indexes: [
-			["eventId"],
-			["authId"],
-			["eventId", "authId"],
-			["scannedAt"],
-		],
-	}),
-	notificationIntent: defineModel("core.notificationIntent", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			kind: field.string(),
-			recipientAuthId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-			payload: field.json<Record<string, unknown>>().default({}),
-			status: field
-				.enum(["pending", "processing", "delivered", "failed", "skipped"] as const)
-				.default("pending"),
-			idempotencyKey: field.string().optional().unique(),
-			createdAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-		},
-		indexes: [["kind"], ["recipientAuthId"], ["status"], ["createdAt"]],
-	}),
-	notificationDeliveryAttempt: defineModel("core.notificationDeliveryAttempt", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			intentId: field
-				.string()
-				.references("core.notificationIntent", "id", { onDelete: "cascade" }),
-			channel: field.string(),
-			provider: field.string().optional(),
-			status: field.enum(["delivered", "failed", "skipped"] as const),
-			recipient: field.string().optional(),
-			externalId: field.string().optional(),
-			error: field.string().optional(),
-			metadata: field.json<Record<string, unknown>>().default({}),
-			attemptedAt: field.date().defaultNow(),
-		},
-		indexes: [["intentId"], ["channel"], ["status"], ["attemptedAt"]],
-	}),
+	operationLock: CoreOperationLock,
+	user: HackKitUser,
+	userData: CoreUserData,
+	hacker: CoreHacker,
+	rsvp: CoreRsvp,
+	role: CoreRole,
+	userBan: CoreUserBan,
+	event: CoreEvent,
+	setting: CoreSetting,
+	eventScan: CoreEventScan,
+	notificationIntent: CoreNotificationIntent,
+	notificationDeliveryAttempt: CoreNotificationDeliveryAttempt,
 } as const;
diff --git a/packages/core/src/notifications.ts b/packages/core/src/notifications.ts
index 54f0b349..c727f8b1 100644
--- a/packages/core/src/notifications.ts
+++ b/packages/core/src/notifications.ts
@@ -1,5 +1,6 @@
+import { serialize } from "@mikro-orm/core";
 import { z } from "zod";
-import type { DatabaseAdapter } from "./database";
+import type { EntityManager } from "@mikro-orm/core";
 import { HackKitError, parseInput } from "./errors";
 import { coreModels } from "./models";
 import type {
@@ -82,7 +83,13 @@ const queueNotificationIntentSchema = z.object({
 const listNotificationIntentsSchema = z
 	.object({
 		status: z
-			.enum(["pending", "processing", "delivered", "failed", "skipped"] as const)
+			.enum([
+				"pending",
+				"processing",
+				"delivered",
+				"failed",
+				"skipped",
+			] as const)
 			.optional(),
 		kind: notificationKindSchema.optional(),
 		recipientAuthId: z.string().min(1).optional(),
@@ -126,19 +133,20 @@ export type DeliverPendingNotificationsResult = {
 };
 
 export type NotificationsApiContext = {
-	db: DatabaseAdapter;
+	em: EntityManager;
 	now: () => Date;
 };
 
-function optionalWhere<T extends Record<string, unknown>>(where: T): Partial<T> {
+function optionalWhere<T extends Record<string, unknown>>(
+	where: T,
+): Partial<T> {
 	return Object.fromEntries(
 		Object.entries(where).filter(([, value]) => value !== undefined),
 	) as Partial<T>;
 }
 
 function parsePayload(kind: string, payload: Record<string, unknown>) {
-	const schema =
-		coreNotificationPayloadSchemas[kind as CoreNotificationKind];
+	const schema = coreNotificationPayloadSchemas[kind as CoreNotificationKind];
 	return schema ? schema.parse(payload) : payload;
 }
 
@@ -155,16 +163,21 @@ function summarizeIntentStatus(
 }
 
 export function createNotificationsApi(context: NotificationsApiContext) {
-	const { db, now } = context;
+	const { em, now } = context;
 
-	async function getIntentOrThrow(intentId: string): Promise<NotificationIntent> {
-		const intent = await db.findOne(coreModels.notificationIntent, {
+	async function getIntentOrThrow(
+		intentId: string,
+	): Promise<NotificationIntent> {
+		const intent = await em.findOne(coreModels.notificationIntent, {
 			id: intentId,
 		});
 		if (!intent) {
-			throw new HackKitError("NOT_FOUND", "Notification intent not found.");
+			throw new HackKitError(
+				"NOT_FOUND",
+				"Notification intent not found.",
+			);
 		}
-		return intent;
+		return serialize(intent);
 	}
 
 	async function recordDeliveryAttempt(
@@ -172,10 +185,14 @@ export function createNotificationsApi(context: NotificationsApiContext) {
 	): Promise<NotificationDeliveryAttempt> {
 		const parsed = parseInput(recordDeliveryAttemptSchema, input);
 		await getIntentOrThrow(parsed.intentId);
-		return db.insert(coreModels.notificationDeliveryAttempt, {
-			...parsed,
-			attemptedAt: now(),
-		});
+		{
+			const created = em.create(coreModels.notificationDeliveryAttempt, {
+				...parsed,
+				attemptedAt: now(),
+			});
+			await em.flush();
+			return serialize(created);
+		}
 	}
 
 	return {
@@ -185,47 +202,62 @@ export function createNotificationsApi(context: NotificationsApiContext) {
 			const parsed = parseInput(queueNotificationIntentSchema, input);
 			const payload = parsePayload(parsed.kind, parsed.payload);
 			if (parsed.idempotencyKey) {
-				const existing = await db.findOne(coreModels.notificationIntent, {
+				const existing = await em.findOne(
+					coreModels.notificationIntent,
+					{
+						idempotencyKey: parsed.idempotencyKey,
+					},
+				);
+				if (existing) return serialize(existing);
+			}
+			const timestamp = now();
+			{
+				const created = em.create(coreModels.notificationIntent, {
+					kind: parsed.kind,
+					recipientAuthId: parsed.recipientAuthId,
+					payload,
 					idempotencyKey: parsed.idempotencyKey,
+					status: "pending",
+					createdAt: timestamp,
+					updatedAt: timestamp,
 				});
-				if (existing) return existing;
+				await em.flush();
+				return serialize(created);
 			}
-			const timestamp = now();
-			return db.insert(coreModels.notificationIntent, {
-				kind: parsed.kind,
-				recipientAuthId: parsed.recipientAuthId,
-				payload,
-				idempotencyKey: parsed.idempotencyKey,
-				status: "pending",
-				createdAt: timestamp,
-				updatedAt: timestamp,
-			});
 		},
 
 		async getIntent(intentId: string): Promise<NotificationIntent | null> {
-			return db.findOne(coreModels.notificationIntent, { id: intentId });
+			const record = await em.findOne(coreModels.notificationIntent, {
+				id: intentId,
+			});
+			return record ? serialize(record) : null;
 		},
 
 		async listIntents(input?: unknown): Promise<NotificationIntent[]> {
 			const parsed = parseInput(listNotificationIntentsSchema, input);
-			return db.findMany(coreModels.notificationIntent, {
-				where: optionalWhere({
-					status: parsed?.status,
-					kind: parsed?.kind,
-					recipientAuthId: parsed?.recipientAuthId,
-				}),
-				orderBy: { field: "createdAt", direction: "desc" },
-				limit: parsed?.limit,
-			});
+			return serialize(
+				await em.find(
+					coreModels.notificationIntent,
+					optionalWhere({
+						status: parsed?.status,
+						kind: parsed?.kind,
+						recipientAuthId: parsed?.recipientAuthId,
+					}),
+					{ orderBy: { createdAt: "desc" }, limit: parsed?.limit },
+				),
+			);
 		},
 
 		async listDeliveryAttempts(
 			intentId: string,
 		): Promise<NotificationDeliveryAttempt[]> {
-			return db.findMany(coreModels.notificationDeliveryAttempt, {
-				where: { intentId },
-				orderBy: { field: "attemptedAt", direction: "desc" },
-			});
+			return serialize(
+				await em.find(
+					coreModels.notificationDeliveryAttempt,
+					{ intentId },
+					{ orderBy: { attemptedAt: "desc" } },
+				),
+			);
 		},
 
 		recordDeliveryAttempt,
@@ -236,25 +268,30 @@ export function createNotificationsApi(context: NotificationsApiContext) {
 			if (input.channels.length === 0) {
 				return { intentsProcessed: 0, attempts: [] };
 			}
-			const intents = await db.findMany(coreModels.notificationIntent, {
-				where: { status: "pending" },
-				orderBy: { field: "createdAt", direction: "asc" },
-				limit: input.limit ?? 25,
-			});
+			const intents = await em.find(
+				coreModels.notificationIntent,
+				{ status: "pending" },
+				{ orderBy: { createdAt: "asc" }, limit: input.limit ?? 25 },
+			);
 			const attempts: NotificationDeliveryAttempt[] = [];
 
+			let intentsProcessed = 0;
 			for (const intent of intents) {
-				await db.update(
+				const claimed = await em.nativeUpdate(
 					coreModels.notificationIntent,
-					{ id: intent.id },
+					{ id: intent.id, status: "pending" },
 					{ status: "processing", updatedAt: now() },
 				);
+				if (claimed === 0) continue;
+				await em.refresh(intent);
+				intentsProcessed++;
+
 				const intentAttempts: NotificationDeliveryAttempt[] = [];
 
 				for (const channel of input.channels) {
 					let result: NotificationDeliveryResult;
 					try {
-						result = await channel.deliver(intent);
+						result = await channel.deliver(serialize(intent));
 					} catch (error) {
 						result = {
 							status: "failed",
@@ -273,17 +310,12 @@ export function createNotificationsApi(context: NotificationsApiContext) {
 					attempts.push(attempt);
 				}
 
-				await db.update(
-					coreModels.notificationIntent,
-					{ id: intent.id },
-					{
-						status: summarizeIntentStatus(intentAttempts),
-						updatedAt: now(),
-					},
-				);
+				intent.status = summarizeIntentStatus(intentAttempts);
+				intent.updatedAt = now();
+				await em.flush();
 			}
 
-			return { intentsProcessed: intents.length, attempts };
+			return { intentsProcessed, attempts };
 		},
 	};
 }
diff --git a/packages/core/src/plugins.ts b/packages/core/src/plugins.ts
index eaf8e5ab..6c9b3d08 100644
--- a/packages/core/src/plugins.ts
+++ b/packages/core/src/plugins.ts
@@ -1,22 +1,24 @@
-import type {
-	DatabaseAdapter,
-	PersistentModel,
-	StorageRegistry,
-} from "./database";
+import type { EntityManager, EntitySchema } from "@mikro-orm/core";
+import { authEntities } from "./mikro/auth-entities";
 import { HackKitError } from "./errors";
 import { coreModels } from "./models";
 import type { NotificationsApi } from "./notifications";
 import { CorePermission } from "./permissions";
-import type { HackathonSettingDefinition, SettingKey, SettingValue } from "./settings";
+import type {
+	HackathonSettingDefinition,
+	SettingKey,
+	SettingValue,
+} from "./settings";
 import { coreSettings } from "./settings";
 import type { PermissionKey } from "./types";
 import type { HackkitGroup } from "./groups";
 
-type ModelMap = Record<string, PersistentModel>;
 type PermissionMap = Record<string, PermissionKey>;
 
 export type HackKitPluginContext = {
-	database: DatabaseAdapter;
+	em: EntityManager;
+	actorAuthId?: string;
+	getUser: (authId: string) => Promise<import("./types").User | null>;
 	registry: HackKitRegistry;
 	getSettingValue: (key: SettingKey) => Promise<SettingValue>;
 	notifications: NotificationsApi;
@@ -28,13 +30,15 @@ export type HackKitPlugin<
 	TApi extends object = object,
 > = {
 	id: TId;
+	/** Disable runtime behavior while retaining entities, settings, and permissions. */
+	enabled?: boolean;
 	/** npm package name used by HackKit CLI to resolve routes and actions. */
 	packageName?: string;
 	/** Factory exported by the plugin package, e.g. createTeamsActions. */
 	actionFactory?: string;
 	/** Server action names exposed by the plugin action factory. */
 	actionNames?: readonly string[];
-	models?: ModelMap;
+	entities?: readonly EntitySchema[];
 	permissions?: PermissionMap;
 	settings?: readonly HackathonSettingDefinition[];
 	setup?: (context: HackKitPluginContext) => TApi;
@@ -50,22 +54,21 @@ export type PluginApiMap<TPlugins extends readonly HackKitPlugin[]> = {
 };
 
 export type HackKitRegistry = {
-	models: Record<string, PersistentModel>;
+	entities: EntitySchema[];
 	permissions: Record<string, PermissionKey>;
 	plugins: Record<string, HackKitPlugin>;
 	settings: readonly HackathonSettingDefinition[];
-	storage: StorageRegistry;
 };
 
 export function createPluginRegistry(
 	plugins: readonly HackKitPlugin[] = [],
+	entities: readonly EntitySchema[] = [],
 ): HackKitRegistry {
 	const registry: HackKitRegistry = {
-		models: { ...coreModels },
+		entities: [...authEntities, ...Object.values(coreModels)],
 		permissions: { ...CorePermission },
 		plugins: {},
 		settings: [...coreSettings],
-		storage: { models: { ...coreModels } },
 	};
 
 	for (const plugin of plugins) {
@@ -78,22 +81,15 @@ export function createPluginRegistry(
 
 		registry.plugins[plugin.id] = plugin;
 
-		for (const [name, pluginModel] of Object.entries(plugin.models ?? {})) {
-			const modelKey = pluginModel.key;
-			if (!modelKey.startsWith(`${plugin.id}.`)) {
+		for (const entity of plugin.entities ?? []) {
+			const prefix = `${plugin.id.replaceAll("-", "_")}_`;
+			if (!entity.meta.tableName?.startsWith(prefix)) {
 				throw new HackKitError(
 					"INVALID_OPERATION",
-					`Plugin model '${name}' must use the '${plugin.id}.' namespace.`,
+					`Plugin entity '${entity.meta.className}' must use the '${prefix}' table namespace.`,
 				);
 			}
-			if (registry.models[modelKey]) {
-				throw new HackKitError(
-					"CONFLICT",
-					`HackKit model '${modelKey}' is already registered.`,
-				);
-			}
-			registry.models[modelKey] = pluginModel;
-			registry.storage.models[modelKey] = pluginModel;
+			registry.entities.push(entity);
 		}
 
 		for (const setting of plugin.settings ?? []) {
@@ -103,7 +99,11 @@ export function createPluginRegistry(
 					`Plugin setting '${setting.key}' must use the '${plugin.id}.' namespace.`,
 				);
 			}
-			if (registry.settings.some((existing) => existing.key === setting.key)) {
+			if (
+				registry.settings.some(
+					(existing) => existing.key === setting.key,
+				)
+			) {
 				throw new HackKitError(
 					"CONFLICT",
 					`HackKit setting '${setting.key}' is already registered.`,
@@ -131,6 +131,25 @@ export function createPluginRegistry(
 		}
 	}
 
+	registry.entities.push(...entities);
+	const names = new Set<string>();
+	const tables = new Set<string>();
+	for (const entity of registry.entities) {
+		const name = entity.meta.className;
+		const table = entity.meta.tableName;
+		if (!table)
+			throw new HackKitError(
+				"INVALID_OPERATION",
+				`Entity '${name}' must declare a tableName.`,
+			);
+		if (names.has(name) || tables.has(table))
+			throw new HackKitError(
+				"CONFLICT",
+				`Duplicate entity name or table: '${name}' / '${table}'.`,
+			);
+		names.add(name);
+		tables.add(table);
+	}
 	return registry;
 }
 
@@ -140,6 +159,19 @@ export function setupPluginApis<TPlugins extends readonly HackKitPlugin[]>(
 ): PluginApiMap<TPlugins> {
 	const apis: Record<string, object> = {};
 	for (const plugin of plugins) {
+		if (plugin.enabled === false) {
+			// Keep the typed API contract: accessing a disabled API fails explicitly.
+			Object.defineProperty(apis, plugin.id, {
+				enumerable: true,
+				get() {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						`HackKit plugin '${plugin.id}' is disabled.`,
+					);
+				},
+			});
+			continue;
+		}
 		apis[plugin.id] = plugin.setup?.(context) ?? {};
 	}
 	return apis as PluginApiMap<TPlugins>;
diff --git a/packages/core/src/runtime.test.ts b/packages/core/src/runtime.test.ts
new file mode 100644
index 00000000..56fb9000
--- /dev/null
+++ b/packages/core/src/runtime.test.ts
@@ -0,0 +1,45 @@
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import { expect, it } from "vitest";
+import { initializeHackkit } from "./runtime";
+
+it("shares auth and connections while isolating domain execution scopes", async () => {
+	const runtime = await initializeHackkit({
+		database: { driver: SqliteDriver, dbName: ":memory:" },
+		auth: {
+			secret: "local-test-secret-with-at-least-32-characters",
+			baseURL: "http://localhost:3000",
+			emailAndPassword: { enabled: true },
+		},
+	});
+	try {
+		await runtime.orm.schema.create();
+		const signedUp = await runtime.auth.api.signUpEmail({
+			body: {
+				email: "participant@example.com",
+				name: "Participant One",
+				password: "a sufficiently long password",
+			},
+		});
+		const first = runtime.createScope();
+		const second = runtime.createScope();
+		expect(first.em).not.toBe(second.em);
+		await first.hackkit.users.claimHackTag({
+			authId: signedUp.user.id,
+			hackTag: "participant",
+		});
+		await first.hackkit.users.updateProfile({
+			authId: signedUp.user.id,
+			bio: "Building useful things",
+		});
+		const profile = await second.hackkit.users.getUser(signedUp.user.id);
+		expect(profile).toMatchObject({
+			id: signedUp.user.id,
+			email: "participant@example.com",
+			hackTag: "participant",
+			bio: "Building useful things",
+		});
+		expect(Object.getPrototypeOf(profile)).toBe(Object.prototype);
+	} finally {
+		await runtime.orm.close();
+	}
+});
diff --git a/packages/core/src/runtime.ts b/packages/core/src/runtime.ts
new file mode 100644
index 00000000..9c881d9b
--- /dev/null
+++ b/packages/core/src/runtime.ts
@@ -0,0 +1,80 @@
+import { MikroORM, RequestContext, type EntityManager } from "@mikro-orm/core";
+import { createLogger } from "./adapters/logger";
+import { createHackkit, type CreateHackkitOptions } from "./hackkit";
+import {
+	createPluginRegistry,
+	type HackKitPlugin,
+	type HackKitRegistry,
+} from "./plugins";
+import { createHackKitAuth, type HackKitAuthOptions } from "./mikro/auth";
+import {
+	createOrmOptions,
+	type CreateOrmOptionsInput,
+	type HackKitDriver,
+} from "./mikro/options";
+
+export type InitializeHackkitOptions<
+	TPlugins extends readonly HackKitPlugin[] = readonly HackKitPlugin[],
+> = Omit<CreateHackkitOptions<TPlugins>, "em" | "registry" | "actorAuthId"> &
+	Omit<CreateOrmOptionsInput, "plugins">;
+
+export type HackKitScope<
+	TPlugins extends readonly HackKitPlugin[] = readonly HackKitPlugin[],
+> = {
+	em: EntityManager;
+	hackkit: ReturnType<typeof createHackkit<TPlugins>>;
+};
+
+export type HackKitRuntime<
+	TPlugins extends readonly HackKitPlugin[] = readonly HackKitPlugin[],
+> = {
+	orm: MikroORM<HackKitDriver>;
+	auth: ReturnType<typeof createHackKitAuth>;
+	registry: HackKitRegistry;
+	createScope(actorAuthId?: string): HackKitScope<TPlugins>;
+	run<T>(
+		operation: (scope: HackKitScope<TPlugins>) => Promise<T>,
+		actorAuthId?: string,
+	): Promise<T>;
+};
+
+/** Initialize shared connections and authentication once, then fork per execution. */
+export async function initializeHackkit<
+	const TPlugins extends readonly HackKitPlugin[] = [],
+>(
+	options: InitializeHackkitOptions<TPlugins>,
+): Promise<HackKitRuntime<TPlugins>> {
+	const registry = createPluginRegistry(options.plugins, options.entities);
+	const orm = await MikroORM.init(createOrmOptions(options));
+	let auth: ReturnType<typeof createHackKitAuth>;
+	try {
+		const logger = createLogger(options.logger);
+		auth = createHackKitAuth<HackKitAuthOptions>(orm, {
+			...options.auth,
+			logger: options.auth.logger ?? {
+				disabled: logger.disabled,
+				level: logger.level,
+				log: (level, message, ...args) =>
+					logger.log(level, message, ...args),
+			},
+		});
+	} catch (error) {
+		await orm.close();
+		throw error;
+	}
+	function createScope(actorAuthId?: string) {
+		const em = orm.em.fork({ useContext: true });
+		return {
+			em,
+			hackkit: createHackkit({ ...options, em, registry, actorAuthId }),
+		};
+	}
+	function run<T>(
+		operation: (scope: ReturnType<typeof createScope>) => Promise<T>,
+		actorAuthId?: string,
+	) {
+		const scope = createScope(actorAuthId);
+		return RequestContext.create(scope.em, () => operation(scope));
+	}
+	return { orm, auth, registry, createScope, run };
+}
diff --git a/packages/core/src/schemas.ts b/packages/core/src/schemas.ts
index ce3c130d..463ab5dd 100644
--- a/packages/core/src/schemas.ts
+++ b/packages/core/src/schemas.ts
@@ -16,18 +16,9 @@ export const hackTagSchema = z
 	.regex(/^[a-zA-Z0-9_-]+$/)
 	.transform((value) => value.toLowerCase());
 
-export const ensureUserSchema = z.object({
-	authId: authIdSchema,
-	email: z.string().email(),
-	firstName: z.string().min(1).max(100),
-	lastName: z.string().min(1).max(100),
-	profilePhotoUrl: z.string().url().optional(),
-});
-
 export const updateUserProfileSchema = z.object({
 	authId: authIdSchema,
-	firstName: z.string().min(1).max(100).optional(),
-	lastName: z.string().min(1).max(100).optional(),
+	name: z.string().trim().min(1).max(200).optional(),
 	profilePhotoUrl: z
 		.union([
 			z.string().url(),
@@ -67,7 +58,7 @@ export const storedFileReferenceSchema = z.union([
 ]);
 
 export const registerHackerSchema = z.object({
-	authId: authIdSchema,
+	userId: authIdSchema,
 	university: z.string().min(1),
 	major: z.string().min(1),
 	schoolId: z.string().optional(),
diff --git a/packages/core/src/seed.ts b/packages/core/src/seed.ts
index 1119818e..b7ef3e36 100644
--- a/packages/core/src/seed.ts
+++ b/packages/core/src/seed.ts
@@ -1,9 +1,5 @@
-import {
-	isDatabaseAdapterFactory,
-	type DatabaseAdapterInput,
-} from "./database";
+import type { EntityManager } from "@mikro-orm/core";
 import { coreModels } from "./models";
-import { createPluginRegistry, type HackKitPlugin } from "./plugins";
 import type { PermissionKey } from "./types";
 
 export type SeedRoleInput = {
@@ -15,11 +11,9 @@ export type SeedRoleInput = {
 };
 
 export type SeedRolesOptions = {
-	database: DatabaseAdapterInput;
-	plugins?: readonly HackKitPlugin[];
+	em: EntityManager;
 	roles: readonly SeedRoleInput[];
 	clock?: () => Date;
-	id?: () => string;
 };
 
 export type SeedRolesResult = {
@@ -27,26 +21,17 @@ export type SeedRolesResult = {
 	skippedRoleIds: string[];
 };
 
-const defaultId = () =>
-	globalThis.crypto?.randomUUID?.() ?? Math.random().toString(36).slice(2);
-
 export async function seedRoles(
 	options: SeedRolesOptions,
 ): Promise<SeedRolesResult> {
 	const now = options.clock ?? (() => new Date());
-	const registry = createPluginRegistry(options.plugins ?? []);
-	const database = isDatabaseAdapterFactory(options.database)
-		? options.database.create({
-				storage: registry.storage,
-				now,
-				id: options.id ?? defaultId,
-			})
-		: options.database;
+
+	const em = options.em;
 	const insertedRoleIds: string[] = [];
 	const skippedRoleIds: string[] = [];
 
 	for (const role of options.roles) {
-		const existing = await database.findOne(coreModels.role, {
+		const existing = await em.findOne(coreModels.role, {
 			id: role.id,
 		});
 		if (existing) {
@@ -55,11 +40,12 @@ export async function seedRoles(
 		}
 
 		const timestamp = now();
-		await database.insert(coreModels.role, {
+		em.create(coreModels.role, {
 			...role,
 			createdAt: timestamp,
 			updatedAt: timestamp,
 		});
+		await em.flush();
 		insertedRoleIds.push(role.id);
 	}
 
diff --git a/packages/core/src/settings.ts b/packages/core/src/settings.ts
index cc43fa01..ebaea054 100644
--- a/packages/core/src/settings.ts
+++ b/packages/core/src/settings.ts
@@ -32,9 +32,11 @@ export type HackathonSettingDefinition<TKey extends SettingKey = SettingKey> =
 	| NumberSettingDefinition<TKey>;
 
 export type SettingValueForDefinition<TDefinition> =
-	TDefinition extends BooleanSettingDefinition ? boolean
-		: TDefinition extends NumberSettingDefinition ? number
-		: SettingValue;
+	TDefinition extends BooleanSettingDefinition
+		? boolean
+		: TDefinition extends NumberSettingDefinition
+			? number
+			: SettingValue;
 
 export type ResolvedHackathonSetting<
 	TDefinition extends HackathonSettingDefinition = HackathonSettingDefinition,
@@ -74,7 +76,8 @@ export const coreSettings = [
 		type: "boolean",
 		defaultValue: false,
 		label: "Require organiser approval",
-		description: "Require organisers to approve hackers before they receive full participant access.",
+		description:
+			"Require organisers to approve hackers before they receive full participant access.",
 		category: "Registration",
 	}),
 	defineSetting({
@@ -85,7 +88,8 @@ export const coreSettings = [
 		min: 0,
 		unit: "hackers",
 		label: "Maximum registrations",
-		description: "Maximum number of hackers who may register. 0 means unlimited.",
+		description:
+			"Maximum number of hackers who may register. 0 means unlimited.",
 		category: "Registration",
 	}),
 	defineSetting({
@@ -96,7 +100,8 @@ export const coreSettings = [
 		min: 0,
 		unit: "hackers",
 		label: "Hackathon capacity",
-		description: "Maximum number of hackers who may be approved. 0 means unlimited.",
+		description:
+			"Maximum number of hackers who may be approved. 0 means unlimited.",
 		category: "Registration",
 	}),
 	defineSetting({
@@ -123,7 +128,8 @@ export const coreSettings = [
 		type: "boolean",
 		defaultValue: false,
 		label: "RSVP waitlist",
-		description: "Place hackers on an ordered waitlist after the RSVP limit is reached.",
+		description:
+			"Place hackers on an ordered waitlist after the RSVP limit is reached.",
 		category: "RSVP",
 	}),
 	defineSetting({
@@ -134,7 +140,8 @@ export const coreSettings = [
 		min: 1000,
 		unit: "milliseconds",
 		label: "Event Pass QR TTL",
-		description: "How long an Event Pass QR code remains valid, in milliseconds.",
+		description:
+			"How long an Event Pass QR code remains valid, in milliseconds.",
 		category: "Events",
 	}),
 ] as const;
@@ -144,9 +151,9 @@ export type CoreSettingValueMap = {
 	[Definition in CoreSettingDefinition as Definition["key"]]: SettingValueForDefinition<Definition>;
 };
 
-export function defineSetting<const TDefinition extends HackathonSettingDefinition>(
-	definition: TDefinition,
-): TDefinition {
+export function defineSetting<
+	const TDefinition extends HackathonSettingDefinition,
+>(definition: TDefinition): TDefinition {
 	return definition;
 }
 
@@ -160,8 +167,10 @@ export function validateSettingValue(
 	} else {
 		let numberSchema = z.number();
 		if (definition.integer) numberSchema = numberSchema.int();
-		if (definition.min !== undefined) numberSchema = numberSchema.min(definition.min);
-		if (definition.max !== undefined) numberSchema = numberSchema.max(definition.max);
+		if (definition.min !== undefined)
+			numberSchema = numberSchema.min(definition.min);
+		if (definition.max !== undefined)
+			numberSchema = numberSchema.max(definition.max);
 		schema = numberSchema;
 	}
 	const result = schema.safeParse(value);
diff --git a/packages/core/src/testing.ts b/packages/core/src/testing.ts
new file mode 100644
index 00000000..d2357241
--- /dev/null
+++ b/packages/core/src/testing.ts
@@ -0,0 +1,70 @@
+import { afterEach } from "vitest";
+import { SqliteDriver } from "@mikro-orm/sqlite";
+import {
+	initializeHackkit,
+	type InitializeHackkitOptions,
+	type HackKitScope,
+	type HackKitRuntime,
+} from "./runtime";
+import { HackKitUser } from "./models";
+import type { HackKitPlugin } from "./plugins";
+import type { EntityManager } from "@mikro-orm/core";
+
+const cleanups = new Set<() => Promise<void>>();
+afterEach(async () => {
+	await Promise.all([...cleanups].map((close) => close()));
+	cleanups.clear();
+});
+
+/** A real, isolated SQLite database for tests of Core and server plugins. */
+export async function createTestHackkit<
+	const TPlugins extends readonly HackKitPlugin[] = [],
+>(
+	options: Omit<InitializeHackkitOptions<TPlugins>, "database" | "auth"> = {},
+): Promise<TestHackkit<TPlugins>> {
+	let sequence = 0;
+	let tick = 0;
+	const runtime = await initializeHackkit({
+		clock: () => new Date(Date.UTC(2026, 4, 24, 12) + tick++ * 1000),
+		id: () => `id-${++sequence}`,
+		logger: { disabled: true },
+		...options,
+		database: { driver: SqliteDriver, dbName: ":memory:" },
+		auth: {
+			secret: "test-secret-that-is-at-least-32-characters",
+			baseURL: "http://localhost:3000",
+			emailAndPassword: { enabled: true },
+		},
+	});
+	cleanups.add(() => runtime.orm.close());
+	await runtime.orm.schema.create();
+	const scope = runtime.createScope();
+	return Object.assign(scope.hackkit, { em: scope.em, runtime });
+}
+
+/** Seed a known identity without hashing a password in every domain test. */
+export async function createTestUser(
+	context: { em: EntityManager },
+	input: {
+		authId: string;
+		email: string;
+		name: string;
+		profilePhotoUrl?: string;
+	},
+) {
+	context.em.create(HackKitUser, {
+		id: input.authId,
+		email: input.email,
+		name: input.name,
+		profilePhotoUrl: input.profilePhotoUrl,
+		createdAt: new Date("2026-05-24T12:00:00.000Z"),
+		updatedAt: new Date("2026-05-24T12:00:00.000Z"),
+	});
+	await context.em.flush();
+}
+
+export type TestHackkit<TPlugins extends readonly HackKitPlugin[] = []> =
+	HackKitScope<TPlugins>["hackkit"] & {
+		em: EntityManager;
+		runtime: HackKitRuntime<TPlugins>;
+	};
diff --git a/packages/core/src/types.ts b/packages/core/src/types.ts
index 2e9ca31f..cbbc018a 100644
--- a/packages/core/src/types.ts
+++ b/packages/core/src/types.ts
@@ -1,4 +1,4 @@
-import type { InferInsert, InferSelect } from "./database";
+import type { InferEntity, EntityDTO } from "@mikro-orm/core";
 import type { coreModels } from "./models";
 
 export type AuthId = string;
@@ -6,35 +6,22 @@ export type UserId = AuthId;
 export type RoleId = string;
 export type PermissionKey = `${string}.${string}`;
 
-export type User = InferSelect<typeof coreModels.user>;
-export type NewUser = InferInsert<typeof coreModels.user>;
-export type UserData = InferSelect<typeof coreModels.userData>;
-export type NewUserData = InferInsert<typeof coreModels.userData>;
-export type Hacker = InferSelect<typeof coreModels.hacker>;
-export type NewHacker = InferInsert<typeof coreModels.hacker>;
-export type Rsvp = InferSelect<typeof coreModels.rsvp>;
-export type NewRsvp = InferInsert<typeof coreModels.rsvp>;
-export type Role = InferSelect<typeof coreModels.role>;
-export type NewRole = InferInsert<typeof coreModels.role>;
-export type UserBan = InferSelect<typeof coreModels.userBan>;
-export type NewUserBan = InferInsert<typeof coreModels.userBan>;
-export type Event = InferSelect<typeof coreModels.event>;
-export type NewEvent = InferInsert<typeof coreModels.event>;
-export type EventScan = InferSelect<typeof coreModels.eventScan>;
-export type NewEventScan = InferInsert<typeof coreModels.eventScan>;
-export type HackathonSetting = InferSelect<typeof coreModels.setting>;
-export type NewHackathonSetting = InferInsert<typeof coreModels.setting>;
-export type NotificationIntent = InferSelect<
-	typeof coreModels.notificationIntent
+export type User = EntityDTO<InferEntity<typeof coreModels.user>>;
+export type UserData = EntityDTO<InferEntity<typeof coreModels.userData>>;
+export type Hacker = EntityDTO<InferEntity<typeof coreModels.hacker>>;
+export type Rsvp = EntityDTO<InferEntity<typeof coreModels.rsvp>>;
+export type Role = EntityDTO<InferEntity<typeof coreModels.role>>;
+export type UserBan = EntityDTO<InferEntity<typeof coreModels.userBan>>;
+export type Event = EntityDTO<InferEntity<typeof coreModels.event>>;
+export type EventScan = EntityDTO<InferEntity<typeof coreModels.eventScan>>;
+export type HackathonSetting = EntityDTO<
+	InferEntity<typeof coreModels.setting>
 >;
-export type NewNotificationIntent = InferInsert<
-	typeof coreModels.notificationIntent
+export type NotificationIntent = EntityDTO<
+	InferEntity<typeof coreModels.notificationIntent>
 >;
-export type NotificationDeliveryAttempt = InferSelect<
-	typeof coreModels.notificationDeliveryAttempt
->;
-export type NewNotificationDeliveryAttempt = InferInsert<
-	typeof coreModels.notificationDeliveryAttempt
+export type NotificationDeliveryAttempt = EntityDTO<
+	InferEntity<typeof coreModels.notificationDeliveryAttempt>
 >;
 
 export type AdminUserRecord = {
@@ -49,9 +36,8 @@ export type AdminUserRecord = {
 export type PublicUserProfile = {
 	user: Pick<
 		User,
-		| "authId"
-		| "firstName"
-		| "lastName"
+		| "id"
+		| "name"
 		| "profilePhotoUrl"
 		| "hackTag"
 		| "bio"
@@ -85,10 +71,9 @@ export type AdminOverview = {
 };
 
 export type AdminUserExportRow = {
-	authId: string;
+	id: User["id"];
 	email: string;
-	firstName: string;
-	lastName: string;
+	name: string;
 	hackTag: string;
 	role: string;
 	isApproved: boolean;
diff --git a/packages/core/src/user-data-options.ts b/packages/core/src/user-data-options.ts
index 98bf2a61..0136173f 100644
--- a/packages/core/src/user-data-options.ts
+++ b/packages/core/src/user-data-options.ts
@@ -158,11 +158,9 @@ export function createCompleteUserDataSchema(options: UserDataOptions) {
 		),
 		dietaryRestrictions: z
 			.array(
-				z
-					.string()
-					.refine((value) => dietaryValues.has(value), {
-						message: "Select a valid dietary restriction.",
-					}),
+				z.string().refine((value) => dietaryValues.has(value), {
+					message: "Select a valid dietary restriction.",
+				}),
 			)
 			.default([]),
 		accommodationNote: z.string().optional(),
diff --git a/packages/core/tsconfig.json b/packages/core/tsconfig.json
index 16e73196..f69ab276 100644
--- a/packages/core/tsconfig.json
+++ b/packages/core/tsconfig.json
@@ -2,15 +2,20 @@
   "extends": "../tsconfig/base.json",
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ES2022",
+    "module": "ESNext",
     "moduleResolution": "Bundler",
     "rootDir": "src",
     "outDir": "dist",
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false
+    "noEmit": true
   },
-  "include": ["src/**/*.ts"],
-  "exclude": ["dist", "node_modules"]
+  "include": [
+    "src/**/*.ts"
+  ],
+  "exclude": [
+    "dist",
+    "node_modules"
+  ]
 }
diff --git a/packages/core/tsup.config.ts b/packages/core/tsup.config.ts
new file mode 100644
index 00000000..ac0c4dea
--- /dev/null
+++ b/packages/core/tsup.config.ts
@@ -0,0 +1,8 @@
+import { defineConfig } from "tsup";
+
+export default defineConfig({
+	entry: ["src/index.ts", "src/client.ts", "src/testing.ts"],
+	format: ["cjs", "esm"],
+	dts: true,
+	external: ["vitest"],
+});
diff --git a/packages/db-drizzle/.gitignore b/packages/db-drizzle/.gitignore
deleted file mode 100644
index 1521c8b7..00000000
--- a/packages/db-drizzle/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-dist
diff --git a/packages/db-drizzle/package.json b/packages/db-drizzle/package.json
deleted file mode 100644
index a217557b..00000000
--- a/packages/db-drizzle/package.json
+++ /dev/null
@@ -1,49 +0,0 @@
-{
-  "name": "@hackkit/db-drizzle",
-  "version": "0.0.0",
-  "description": "Drizzle database adapters and native schema generation for HackKit",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./sqlite": {
-      "types": "./dist/sqlite.d.ts",
-      "import": "./dist/sqlite.js"
-    },
-    "./libsql": {
-      "types": "./dist/libsql.d.ts",
-      "import": "./dist/libsql.js"
-    },
-    "./postgres": {
-      "types": "./dist/postgres.d.ts",
-      "import": "./dist/postgres.js"
-    }
-  },
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "tsup src/index.ts src/sqlite.ts src/libsql.ts src/postgres.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts src/sqlite.ts src/libsql.ts src/postgres.ts --format cjs,esm --dts --watch",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run"
-  },
-  "dependencies": {
-    "@hackkit/core": "workspace:*",
-    "drizzle-orm": "^0.45.2"
-  },
-  "devDependencies": {
-    "@libsql/client": "^0.14.0",
-    "drizzle-kit": "^0.31.4",
-    "postgres": "^3.4.7",
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
-  },
-  "license": "MIT",
-  "private": true
-}
diff --git a/packages/db-drizzle/src/__tests__/libsql-adapter.test.ts b/packages/db-drizzle/src/__tests__/libsql-adapter.test.ts
deleted file mode 100644
index e7cf0304..00000000
--- a/packages/db-drizzle/src/__tests__/libsql-adapter.test.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import { createClient } from "@libsql/client";
-import { defineModel, field } from "@hackkit/core";
-import { drizzle } from "drizzle-orm/libsql";
-import { describe, expect, it } from "vitest";
-import { createDrizzleLibsqlAdapter } from "../libsql";
-
-describe("Drizzle libSQL database adapter", () => {
-	it("persists HackKit models through the public adapter factory", async () => {
-		const client = createClient({ url: ":memory:" });
-		await client.execute(
-			'CREATE TABLE "sample_note" ("id" TEXT PRIMARY KEY NOT NULL, "body" TEXT NOT NULL, "position" INTEGER NOT NULL)',
-		);
-		const note = defineModel("sample.note", {
-			fields: {
-				id: field.string().primaryKey().defaultId(),
-				body: field.string(),
-				position: field.integer(),
-			},
-		});
-		let idSequence = 0;
-		const database = createDrizzleLibsqlAdapter(drizzle(client)).create({
-			storage: { models: { note } },
-			now: () => new Date("2026-01-01T00:00:00.000Z"),
-			id: () => `note-${++idSequence}`,
-		});
-
-		await expect(
-			database.insert(note, { body: "First", position: 2 }),
-		).resolves.toEqual({ id: "note-1", body: "First", position: 2 });
-		await database.insert(note, { body: "Second", position: 1 });
-
-		await expect(
-			database.findMany(note, {
-				orderBy: { field: "position", direction: "asc" },
-			}),
-		).resolves.toEqual([
-			{ id: "note-2", body: "Second", position: 1 },
-			{ id: "note-1", body: "First", position: 2 },
-		]);
-
-		await expect(
-			database.update(note, { position: 2 }, { body: "Updated" }),
-		).resolves.toEqual([{ id: "note-1", body: "Updated", position: 2 }]);
-		await expect(database.delete(note, { position: 1 })).resolves.toBe(1);
-		await expect(
-			database.findOne(note, { position: 1 }),
-		).resolves.toBeNull();
-
-		client.close();
-	});
-});
diff --git a/packages/db-drizzle/src/__tests__/postgres-adapter.test.ts b/packages/db-drizzle/src/__tests__/postgres-adapter.test.ts
deleted file mode 100644
index b0e352f0..00000000
--- a/packages/db-drizzle/src/__tests__/postgres-adapter.test.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { join } from "node:path";
-import { defineModel, field } from "@hackkit/core";
-import { drizzle } from "drizzle-orm/postgres-js";
-import { migrate } from "drizzle-orm/postgres-js/migrator";
-import postgres from "postgres";
-import { describe, expect, it } from "vitest";
-import {
-	createDrizzlePostgresAdapter,
-	createDrizzlePostgresSchemaAdapter,
-} from "../postgres";
-
-const postgresUrl = process.env.POSTGRES_TEST_URL;
-
-describe.runIf(postgresUrl)("Drizzle PostgreSQL database adapter", () => {
-	it("applies native migrations and supports CRUD", async () => {
-		const client = postgres(postgresUrl!, { max: 1 });
-		const record = defineModel("sample.record", {
-			fields: {
-				id: field.string().primaryKey().defaultId(),
-				active: field.boolean(),
-				score: field.number(),
-				metadata: field.json<{ source: string }>(),
-				createdAt: field.date().defaultNow(),
-			},
-		});
-		const createdAt = new Date("2026-07-14T12:00:00.000Z");
-		let idSequence = 0;
-		const db = drizzle(client);
-
-		try {
-			await client.unsafe('DROP TABLE IF EXISTS "sample_record"');
-			await client.unsafe("DROP SCHEMA IF EXISTS drizzle CASCADE");
-			await migrate(db, {
-				migrationsFolder: join(
-					process.cwd(),
-					"test-fixtures/postgres/migrations",
-				),
-			});
-			const [generatedFile] =
-				await createDrizzlePostgresSchemaAdapter().generateSchemaFiles({
-					storage: { models: { record } },
-				});
-			await expect(
-				readFile(
-					join(process.cwd(), "test-fixtures/postgres/schema.ts"),
-					"utf8",
-				),
-			).resolves.toBe(generatedFile.content);
-
-			const database = createDrizzlePostgresAdapter(db).create({
-				storage: { models: { record } },
-				now: () => createdAt,
-				id: () => `record-${++idSequence}`,
-			});
-
-			await expect(
-				database.insert(record, {
-					active: true,
-					score: 9.5,
-					metadata: { source: "ci" },
-				}),
-			).resolves.toEqual({
-				id: "record-1",
-				active: true,
-				score: 9.5,
-				metadata: { source: "ci" },
-				createdAt,
-			});
-			await database.insert(record, {
-				active: false,
-				score: 2,
-				metadata: { source: "second" },
-			});
-
-			await expect(
-				database.findMany(record, {
-					orderBy: { field: "score", direction: "desc" },
-				}),
-			).resolves.toHaveLength(2);
-			await expect(
-				database.update(record, { id: "record-1" }, { score: 10.25 }),
-			).resolves.toMatchObject([{ id: "record-1", score: 10.25 }]);
-			await expect(
-				database.delete(record, { id: "record-2" }),
-			).resolves.toBe(1);
-			await expect(
-				database.findOne(record, { id: "record-2" }),
-			).resolves.toBeNull();
-		} finally {
-			await client.unsafe('DROP TABLE IF EXISTS "sample_record"');
-			await client.unsafe("DROP SCHEMA IF EXISTS drizzle CASCADE");
-			await client.end();
-		}
-	});
-});
diff --git a/packages/db-drizzle/src/__tests__/schema-generation.test.ts b/packages/db-drizzle/src/__tests__/schema-generation.test.ts
deleted file mode 100644
index 5ba5509a..00000000
--- a/packages/db-drizzle/src/__tests__/schema-generation.test.ts
+++ /dev/null
@@ -1,249 +0,0 @@
-import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { join } from "node:path";
-import { defineModel, field, type StorageRegistry } from "@hackkit/core";
-import ts from "typescript";
-import { describe, expect, it } from "vitest";
-import { createDrizzlePostgresSchemaAdapter } from "../postgres";
-import {
-	createDrizzleSqliteAdapter,
-	createDrizzleSqliteSchemaAdapter,
-} from "../sqlite";
-
-function createStorage(): StorageRegistry {
-	const user = defineModel("core.user", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			active: field.boolean().default(true),
-			createdAt: field.date().defaultNow(),
-			publishedAt: field
-				.date()
-				.default(new Date("2026-07-14T12:00:00.000Z")),
-			profile: field.json<{ nickname: string }>().optional(),
-		},
-	});
-	const entry = defineModel("sample.entry", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			userId: field
-				.string()
-				.references("core.user", "id", { onDelete: "cascade" }),
-			score: field.number(),
-			status: field
-				.enum(["draft", "published"] as const)
-				.default("draft"),
-		},
-		unique: [["userId", "status"]],
-		indexes: [["score"]],
-	});
-
-	return { models: { user, entry } };
-}
-
-async function expectGeneratedSchemaToCompile(source: string): Promise<void> {
-	const directory = await mkdtemp(join(process.cwd(), ".schema-compile-"));
-	const filePath = join(directory, "hackkit.ts");
-	try {
-		await writeFile(filePath, source, "utf8");
-		const program = ts.createProgram([filePath], {
-			target: ts.ScriptTarget.ES2022,
-			module: ts.ModuleKind.NodeNext,
-			moduleResolution: ts.ModuleResolutionKind.NodeNext,
-			noEmit: true,
-			skipLibCheck: true,
-			strict: true,
-		});
-		const diagnostics = ts.getPreEmitDiagnostics(program);
-		expect(
-			diagnostics.map((diagnostic) =>
-				ts.flattenDiagnosticMessageText(diagnostic.messageText, "\n"),
-			),
-		).toEqual([]);
-	} finally {
-		await rm(directory, { recursive: true, force: true });
-	}
-}
-
-describe("Drizzle native schema generation", () => {
-	it("generates deterministic SQLite schema source", async () => {
-		const [file] =
-			await createDrizzleSqliteSchemaAdapter().generateSchemaFiles({
-				storage: createStorage(),
-			});
-
-		expect(file.path).toBe("hackkit.ts");
-		expect(file.content).toContain(
-			'import { index, integer, real, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";',
-		);
-		expect(file.content).toContain(
-			'export const coreUser = sqliteTable("core_user"',
-		);
-		expect(file.content).toContain(
-			'references(() => coreUser.id, { onDelete: "cascade" })',
-		);
-		expect(file.content).toContain(
-			'integer("active", { mode: "boolean" }).notNull().default(true)',
-		);
-		expect(file.content).toContain(
-			'.default(new Date("2026-07-14T12:00:00.000Z"))',
-		);
-		expect(file.content).toContain(
-			'sample_entry_userId_status_uniq: uniqueIndex("sample_entry_userId_status_uniq")',
-		);
-		await expectGeneratedSchemaToCompile(file.content);
-	});
-
-	it("generates PostgreSQL schema with native PostgreSQL types", async () => {
-		const [file] =
-			await createDrizzlePostgresSchemaAdapter().generateSchemaFiles({
-				storage: createStorage(),
-			});
-
-		expect(file.path).toBe("hackkit.ts");
-		expect(file.content).toContain('from "drizzle-orm/pg-core"');
-		expect(file.content).toContain(
-			'export const coreUser = pgTable("core_user"',
-		);
-		expect(file.content).toContain(
-			'active: boolean("active").notNull().default(true)',
-		);
-		expect(file.content).toContain(
-			'createdAt: timestamp("createdAt", { withTimezone: true, mode: "date" }).notNull()',
-		);
-		expect(file.content).toContain('profile: jsonb("profile")');
-		expect(file.content).toContain(
-			'score: doublePrecision("score").notNull()',
-		);
-		await expectGeneratedSchemaToCompile(file.content);
-	});
-
-	it("keeps the committed PostgreSQL migration fixture on generated schema", async () => {
-		const record = defineModel("sample.record", {
-			fields: {
-				id: field.string().primaryKey().defaultId(),
-				active: field.boolean(),
-				score: field.number(),
-				metadata: field.json<{ source: string }>(),
-				createdAt: field.date().defaultNow(),
-			},
-		});
-		const [file] =
-			await createDrizzlePostgresSchemaAdapter().generateSchemaFiles({
-				storage: { models: { record } },
-			});
-
-		await expect(
-			readFile(
-				join(process.cwd(), "test-fixtures/postgres/schema.ts"),
-				"utf8",
-			),
-		).resolves.toBe(file.content);
-	});
-
-	it("rejects model keys that resolve to the same physical table", () => {
-		const first = defineModel("sample.entry.item", {
-			fields: { id: field.string().primaryKey() },
-		});
-		const second = defineModel("sample_entry.item", {
-			fields: { id: field.string().primaryKey() },
-		});
-		const storage = { models: { first, second } };
-
-		expect(() =>
-			createDrizzleSqliteSchemaAdapter().generateSchemaFiles({ storage }),
-		).toThrow("resolve to the same table 'sample_entry_item'");
-	});
-
-	it("removes plugin tables when they leave the storage registry", async () => {
-		const storage = createStorage();
-		const withoutPlugin = {
-			models: { user: storage.models.user },
-		};
-		const [file] =
-			await createDrizzleSqliteSchemaAdapter().generateSchemaFiles({
-				storage: withoutPlugin,
-			});
-
-		expect(file.content).toContain("export const coreUser");
-		expect(file.content).not.toContain("export const sampleEntry");
-	});
-
-	it("is stable when registry insertion order changes", async () => {
-		const storage = createStorage();
-		const reversed = {
-			models: Object.fromEntries(
-				Object.entries(storage.models).reverse(),
-			),
-		};
-		const adapter = createDrizzleSqliteSchemaAdapter();
-		const [first] = await adapter.generateSchemaFiles({ storage });
-		const [second] = await adapter.generateSchemaFiles({
-			storage: reversed,
-		});
-
-		expect(second.content).toBe(first.content);
-	});
-
-	it("escapes valid storage names that are not TypeScript identifiers", async () => {
-		const external = defineModel("my-plugin.entry", {
-			fields: {
-				id: field.string().primaryKey(),
-				"external-id": field.string(),
-			},
-			indexes: [["external-id"]],
-		});
-		const [file] =
-			await createDrizzleSqliteSchemaAdapter().generateSchemaFiles({
-				storage: { models: { external } },
-			});
-
-		expect(file.content).toContain("export const my_pluginEntry");
-		expect(file.content).toContain('"external-id": text("external-id")');
-		expect(file.content).toContain('table["external-id"]');
-		await expectGeneratedSchemaToCompile(file.content);
-	});
-
-	it("escapes physical names as TypeScript string literals", async () => {
-		const quoted = defineModel('quoted".entry\\path', {
-			fields: {
-				id: field.string().primaryKey(),
-				'external"id\\path\nline': field.string(),
-			},
-			indexes: [['external"id\\path\nline']],
-		});
-		const [file] =
-			await createDrizzleSqliteSchemaAdapter().generateSchemaFiles({
-				storage: { models: { quoted } },
-			});
-
-		expect(file.content).toContain('sqliteTable("quoted\\"_entry\\\\path"');
-		expect(file.content).toContain('text("external\\"id\\\\path\\nline")');
-		await expectGeneratedSchemaToCompile(file.content);
-	});
-
-	it("rejects distinct tables that resolve to the same schema export", () => {
-		const first = defineModel("sample.entry.item", {
-			fields: { id: field.string().primaryKey() },
-		});
-		const second = defineModel("sample.entryItem", {
-			fields: { id: field.string().primaryKey() },
-		});
-
-		expect(() =>
-			createDrizzleSqliteSchemaAdapter().generateSchemaFiles({
-				storage: { models: { first, second } },
-			}),
-		).toThrow("resolve to the same schema export 'sampleEntryItem'");
-	});
-
-	it("does not resolve the runtime database while generating schema", async () => {
-		let resolutions = 0;
-		const adapter = createDrizzleSqliteAdapter(() => {
-			resolutions += 1;
-			return {};
-		});
-
-		await adapter.schema!.generateSchemaFiles({ storage: createStorage() });
-
-		expect(resolutions).toBe(0);
-	});
-});
diff --git a/packages/db-drizzle/src/index.ts b/packages/db-drizzle/src/index.ts
deleted file mode 100644
index b62f3774..00000000
--- a/packages/db-drizzle/src/index.ts
+++ /dev/null
@@ -1 +0,0 @@
-export type { DrizzleDialect } from "./schema";
diff --git a/packages/db-drizzle/src/libsql.ts b/packages/db-drizzle/src/libsql.ts
deleted file mode 100644
index a657dda1..00000000
--- a/packages/db-drizzle/src/libsql.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-export {
-	createDrizzleSqliteAdapter as createDrizzleLibsqlAdapter,
-	createDrizzleSqliteSchemaAdapter as createDrizzleLibsqlSchemaAdapter,
-	toDrizzleTableExportName,
-	toDrizzleTableName,
-} from "./sqlite";
diff --git a/packages/db-drizzle/src/postgres.ts b/packages/db-drizzle/src/postgres.ts
deleted file mode 100644
index b4558e54..00000000
--- a/packages/db-drizzle/src/postgres.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import type { AnyField, PersistentModel } from "@hackkit/core";
-import {
-	boolean,
-	doublePrecision,
-	integer,
-	jsonb,
-	pgTable,
-	text,
-	timestamp,
-} from "drizzle-orm/pg-core";
-import { createDrizzleAdapterFactory } from "./runtime";
-import { createDrizzleSchemaAdapter } from "./schema";
-
-export function createDrizzlePostgresSchemaAdapter() {
-	return createDrizzleSchemaAdapter("drizzle-postgres", "postgres");
-}
-
-function toColumn(name: string, field: AnyField) {
-	let column: any;
-	switch (field.kind) {
-		case "string":
-		case "enum":
-			column = text(name);
-			break;
-		case "integer":
-			column = integer(name);
-			break;
-		case "number":
-			column = doublePrecision(name);
-			break;
-		case "boolean":
-			column = boolean(name);
-			break;
-		case "date":
-			column = timestamp(name, { withTimezone: true, mode: "date" });
-			break;
-		case "json":
-			column = jsonb(name);
-			break;
-	}
-	if (field.isPrimaryKey) column = column.primaryKey();
-	if (field.isUnique) column = column.unique();
-	if (!field.isOptional) column = column.notNull();
-	return column;
-}
-
-function createTable(model: PersistentModel) {
-	return pgTable(
-		model.key.replaceAll(".", "_"),
-		Object.fromEntries(
-			Object.entries(model.schema.fields).map(([name, field]) => [
-				name,
-				toColumn(name, field),
-			]),
-		),
-	) as never;
-}
-
-export function createDrizzlePostgresAdapter(
-	database: unknown | (() => unknown),
-) {
-	return createDrizzleAdapterFactory(
-		database,
-		createTable,
-		createDrizzlePostgresSchemaAdapter(),
-	);
-}
-
-export { toDrizzleTableExportName, toDrizzleTableName } from "./schema";
diff --git a/packages/db-drizzle/src/runtime.ts b/packages/db-drizzle/src/runtime.ts
deleted file mode 100644
index 9d5ed352..00000000
--- a/packages/db-drizzle/src/runtime.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import { and, asc, desc, eq } from "drizzle-orm";
-import type {
-	DatabaseAdapter,
-	DatabaseAdapterFactory,
-	DatabaseAdapterFactoryContext,
-	DatabaseSchemaAdapter,
-	InferInsert,
-	InferSelect,
-	Model,
-	ModelKey,
-	PersistentModel,
-} from "@hackkit/core";
-
-export type DrizzleTable = Record<string, unknown>;
-export type DrizzleTableFactory = (model: PersistentModel) => DrizzleTable;
-
-function applyDefaults<TModel extends Model>(
-	model: TModel,
-	value: InferInsert<TModel>,
-	context: DatabaseAdapterFactoryContext,
-): InferSelect<TModel> {
-	const row: Record<string, unknown> = { ...value };
-
-	for (const [name, field] of Object.entries(model.schema.fields)) {
-		if (row[name] !== undefined || !field.defaultValue) continue;
-		switch (field.defaultValue.kind) {
-			case "static":
-				row[name] = field.defaultValue.value;
-				break;
-			case "now":
-				row[name] = context.now();
-				break;
-			case "id":
-				row[name] = context.id();
-				break;
-		}
-	}
-
-	return row as InferSelect<TModel>;
-}
-
-function toWhere(table: DrizzleTable, where: Record<string, unknown>) {
-	const clauses = Object.entries(where).map(([key, value]) =>
-		eq(table[key] as never, value),
-	);
-	if (clauses.length === 0) return undefined;
-	if (clauses.length === 1) return clauses[0];
-	return and(...clauses);
-}
-
-export function createDrizzleAdapterFactory(
-	database: unknown | (() => unknown),
-	createTable: DrizzleTableFactory,
-	schema: DatabaseSchemaAdapter,
-): DatabaseAdapterFactory {
-	return {
-		schema,
-		create(context) {
-			const db: any =
-				typeof database === "function" ? database() : database;
-			const tables = Object.fromEntries(
-				Object.values(context.storage.models).map((model) => [
-					model.key,
-					createTable(model),
-				]),
-			) as Record<ModelKey, DrizzleTable>;
-
-			const adapter: DatabaseAdapter = {
-				async insert(model, value) {
-					const [inserted] = await db
-						.insert(tables[model.key])
-						.values(applyDefaults(model, value, context))
-						.returning();
-					return inserted as InferSelect<typeof model>;
-				},
-
-				async findOne(model, where) {
-					const [row] = await adapter.findMany(model, {
-						where,
-						limit: 1,
-					});
-					return row ?? null;
-				},
-
-				async findMany(model, options) {
-					const table = tables[model.key];
-					let query = db.select().from(table);
-					const condition = options?.where
-						? toWhere(
-								table,
-								options.where as Record<string, unknown>,
-							)
-						: undefined;
-					if (condition) query = query.where(condition);
-					if (options?.orderBy) {
-						const column = table[String(options.orderBy.field)];
-						query = query.orderBy(
-							options.orderBy.direction === "desc"
-								? desc(column as never)
-								: asc(column as never),
-						);
-					}
-					if (options?.limit !== undefined)
-						query = query.limit(options.limit);
-					return (await query) as InferSelect<typeof model>[];
-				},
-
-				async update(model, where, patch) {
-					const table = tables[model.key];
-					let query = db.update(table).set(patch);
-					const condition = toWhere(
-						table,
-						where as Record<string, unknown>,
-					);
-					if (condition) query = query.where(condition);
-					return (await query.returning()) as InferSelect<
-						typeof model
-					>[];
-				},
-
-				async delete(model, where) {
-					const table = tables[model.key];
-					let query = db.delete(table);
-					const condition = toWhere(
-						table,
-						where as Record<string, unknown>,
-					);
-					if (condition) query = query.where(condition);
-					const deleted = await query.returning();
-					return deleted.length;
-				},
-			};
-
-			return adapter;
-		},
-	};
-}
diff --git a/packages/db-drizzle/src/schema.ts b/packages/db-drizzle/src/schema.ts
deleted file mode 100644
index 44b2d83c..00000000
--- a/packages/db-drizzle/src/schema.ts
+++ /dev/null
@@ -1,320 +0,0 @@
-import type {
-	AnyField,
-	DatabaseSchemaAdapter,
-	ModelKey,
-	PersistentModel,
-	ReferenceAction,
-	StorageRegistry,
-} from "@hackkit/core";
-
-export type DrizzleDialect = "sqlite" | "postgres";
-
-type CompiledReference = {
-	tableExportName: string;
-	field: string;
-	onDelete?: ReferenceAction;
-	onUpdate?: ReferenceAction;
-};
-
-type CompiledColumn = {
-	name: string;
-	field: AnyField;
-	reference?: CompiledReference;
-};
-
-type CompiledIndex = {
-	name: string;
-	columns: readonly string[];
-	unique: boolean;
-};
-
-type CompiledTable = {
-	tableName: string;
-	exportName: string;
-	columns: CompiledColumn[];
-	indexes: CompiledIndex[];
-};
-
-export function toDrizzleTableName(modelKey: ModelKey): string {
-	return modelKey.replaceAll(".", "_");
-}
-
-export function toDrizzleTableExportName(modelKey: ModelKey): string {
-	const [namespace = "", ...parts] = modelKey.split(".");
-	const candidate = [namespace, ...parts]
-		.map((part, index) =>
-			index === 0 ? part : part.charAt(0).toUpperCase() + part.slice(1),
-		)
-		.join("");
-	return toIdentifier(candidate);
-}
-
-function toIdentifier(value: string): string {
-	const sanitized = value.replace(/[^a-zA-Z0-9_$]/g, "_");
-	return /^[a-zA-Z_$]/.test(sanitized) ? sanitized : `_${sanitized}`;
-}
-
-function isIdentifier(value: string): boolean {
-	return /^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value);
-}
-
-function renderPropertyKey(value: string): string {
-	return isIdentifier(value) ? value : JSON.stringify(value);
-}
-
-function renderPropertyAccess(object: string, property: string): string {
-	return isIdentifier(property)
-		? `${object}.${property}`
-		: `${object}[${JSON.stringify(property)}]`;
-}
-
-function toIndexName(
-	tableName: string,
-	columns: readonly string[],
-	unique: boolean,
-): string {
-	return `${tableName}_${columns.join("_")}_${unique ? "uniq" : "idx"}`;
-}
-
-function toDrizzleReferenceAction(action: ReferenceAction): string {
-	switch (action) {
-		case "setNull":
-			return "set null";
-		case "noAction":
-			return "no action";
-		default:
-			return action;
-	}
-}
-
-function sortModelsByReferences(storage: StorageRegistry): PersistentModel[] {
-	const byKey = new Map(
-		Object.values(storage.models).map((model) => [model.key, model]),
-	);
-	const visited = new Set<ModelKey>();
-	const visiting = new Set<ModelKey>();
-	const sorted: PersistentModel[] = [];
-
-	function visit(model: PersistentModel) {
-		if (visited.has(model.key) || visiting.has(model.key)) return;
-		visiting.add(model.key);
-		const referencedModels = Object.values(model.schema.fields)
-			.flatMap((field) => {
-				const referenced = field.reference
-					? byKey.get(field.reference.model)
-					: undefined;
-				return referenced ? [referenced] : [];
-			})
-			.sort((left, right) => left.key.localeCompare(right.key));
-		for (const referenced of referencedModels) {
-			if (referenced && referenced.key !== model.key) visit(referenced);
-		}
-		visiting.delete(model.key);
-		visited.add(model.key);
-		sorted.push(model);
-	}
-
-	for (const model of [...byKey.values()].sort((left, right) =>
-		left.key.localeCompare(right.key),
-	)) {
-		visit(model);
-	}
-	return sorted;
-}
-
-function compileTables(storage: StorageRegistry): CompiledTable[] {
-	const tableOwners = new Map<string, ModelKey>();
-	const exportOwners = new Map<string, ModelKey>();
-
-	return sortModelsByReferences(storage).map((model) => {
-		const tableName = toDrizzleTableName(model.key);
-		const exportName = toDrizzleTableExportName(model.key);
-		const existingOwner = tableOwners.get(tableName);
-		if (existingOwner) {
-			throw new Error(
-				`Models '${existingOwner}' and '${model.key}' resolve to the same table '${tableName}'.`,
-			);
-		}
-		tableOwners.set(tableName, model.key);
-		const existingExportOwner = exportOwners.get(exportName);
-		if (existingExportOwner) {
-			throw new Error(
-				`Models '${existingExportOwner}' and '${model.key}' resolve to the same schema export '${exportName}'.`,
-			);
-		}
-		exportOwners.set(exportName, model.key);
-
-		const columns = Object.entries(model.schema.fields).map(
-			([name, field]) => {
-				if (field.reference && !storage.models[field.reference.model]) {
-					const targetExists = Object.values(storage.models).some(
-						(candidate) => candidate.key === field.reference?.model,
-					);
-					if (!targetExists) {
-						throw new Error(
-							`Model '${model.key}' references unknown model '${field.reference.model}'.`,
-						);
-					}
-				}
-
-				return {
-					name,
-					field,
-					reference: field.reference
-						? {
-								tableExportName: toDrizzleTableExportName(
-									field.reference.model,
-								),
-								field: field.reference.field,
-								onDelete: field.reference.onDelete,
-								onUpdate: field.reference.onUpdate,
-							}
-						: undefined,
-				};
-			},
-		);
-
-		const indexes: CompiledIndex[] = [
-			...(model.schema.unique ?? []).map((columns) => ({
-				name: toIndexName(tableName, columns, true),
-				columns,
-				unique: true,
-			})),
-			...(model.schema.indexes ?? []).map((columns) => ({
-				name: toIndexName(tableName, columns, false),
-				columns,
-				unique: false,
-			})),
-		];
-
-		return {
-			tableName,
-			exportName,
-			columns,
-			indexes,
-		};
-	});
-}
-
-function renderDefault(field: AnyField): string | undefined {
-	if (field.defaultValue?.kind !== "static") return undefined;
-	const value = field.defaultValue.value;
-	const source =
-		field.kind === "date" && value instanceof Date
-			? `new Date(${JSON.stringify(value.toISOString())})`
-			: JSON.stringify(value);
-	return `.default(${source})`;
-}
-
-function renderReference(reference: CompiledReference): string {
-	const options = [
-		reference.onDelete
-			? `onDelete: "${toDrizzleReferenceAction(reference.onDelete)}"`
-			: undefined,
-		reference.onUpdate
-			? `onUpdate: "${toDrizzleReferenceAction(reference.onUpdate)}"`
-			: undefined,
-	].filter(Boolean);
-	const optionsSource =
-		options.length > 0 ? `, { ${options.join(", ")} }` : "";
-	return `.references(() => ${renderPropertyAccess(reference.tableExportName, reference.field)}${optionsSource})`;
-}
-
-function renderColumnFactory(
-	field: AnyField,
-	name: string,
-	dialect: DrizzleDialect,
-) {
-	const physicalName = JSON.stringify(name);
-	if (dialect === "sqlite") {
-		switch (field.kind) {
-			case "string":
-			case "enum":
-				return `text(${physicalName})`;
-			case "integer":
-				return `integer(${physicalName})`;
-			case "number":
-				return `real(${physicalName})`;
-			case "boolean":
-				return `integer(${physicalName}, { mode: "boolean" })`;
-			case "date":
-				return `integer(${physicalName}, { mode: "timestamp" })`;
-			case "json":
-				return `text(${physicalName}, { mode: "json" })`;
-		}
-	}
-
-	switch (field.kind) {
-		case "string":
-		case "enum":
-			return `text(${physicalName})`;
-		case "integer":
-			return `integer(${physicalName})`;
-		case "number":
-			return `doublePrecision(${physicalName})`;
-		case "boolean":
-			return `boolean(${physicalName})`;
-		case "date":
-			return `timestamp(${physicalName}, { withTimezone: true, mode: "date" })`;
-		case "json":
-			return `jsonb(${physicalName})`;
-	}
-}
-
-function renderTable(table: CompiledTable, dialect: DrizzleDialect): string {
-	const columns = table.columns.map((column) => {
-		let source = renderColumnFactory(column.field, column.name, dialect);
-		if (column.field.isPrimaryKey) source += ".primaryKey()";
-		if (!column.field.isOptional) source += ".notNull()";
-		if (column.field.isUnique) source += ".unique()";
-		if (column.reference) source += renderReference(column.reference);
-		source += renderDefault(column.field) ?? "";
-		return `\t${renderPropertyKey(column.name)}: ${source}`;
-	});
-	const indexes = table.indexes.map((definition) => {
-		const factory = definition.unique ? "uniqueIndex" : "index";
-		const indexedColumns = definition.columns
-			.map((column) => renderPropertyAccess("table", column))
-			.join(", ");
-		return `\t${renderPropertyKey(definition.name)}: ${factory}(${JSON.stringify(definition.name)}).on(${indexedColumns})`;
-	});
-	const extraConfig =
-		indexes.length > 0 ? `, (table) => ({\n${indexes.join(",\n")}\n})` : "";
-	const tableFactory = dialect === "sqlite" ? "sqliteTable" : "pgTable";
-	return `export const ${table.exportName} = ${tableFactory}(${JSON.stringify(table.tableName)}, {\n${columns.join(",\n")}\n}${extraConfig});\n`;
-}
-
-function importsFor(dialect: DrizzleDialect): string {
-	return dialect === "sqlite"
-		? 'import { index, integer, real, sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";'
-		: 'import { boolean, doublePrecision, index, integer, jsonb, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";';
-}
-
-export function compileDrizzleSchema(
-	storage: StorageRegistry,
-	dialect: DrizzleDialect,
-): string {
-	const tables = compileTables(storage);
-	return [
-		importsFor(dialect),
-		"",
-		...tables.map((table) => renderTable(table, dialect)),
-	].join("\n");
-}
-
-export function createDrizzleSchemaAdapter(
-	id: string,
-	dialect: DrizzleDialect,
-): DatabaseSchemaAdapter {
-	return {
-		id,
-		generateSchemaFiles({ storage }) {
-			return [
-				{
-					path: "hackkit.ts",
-					content: compileDrizzleSchema(storage, dialect),
-				},
-			];
-		},
-	};
-}
diff --git a/packages/db-drizzle/src/sqlite.ts b/packages/db-drizzle/src/sqlite.ts
deleted file mode 100644
index f90c3f82..00000000
--- a/packages/db-drizzle/src/sqlite.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import type { AnyField, PersistentModel } from "@hackkit/core";
-import { integer, real, sqliteTable, text } from "drizzle-orm/sqlite-core";
-import { createDrizzleAdapterFactory } from "./runtime";
-import { createDrizzleSchemaAdapter } from "./schema";
-
-export function createDrizzleSqliteSchemaAdapter() {
-	return createDrizzleSchemaAdapter("drizzle-sqlite", "sqlite");
-}
-
-function toColumn(name: string, field: AnyField) {
-	let column: any;
-	switch (field.kind) {
-		case "string":
-		case "enum":
-			column = text(name);
-			break;
-		case "integer":
-			column = integer(name);
-			break;
-		case "number":
-			column = real(name);
-			break;
-		case "boolean":
-			column = integer(name, { mode: "boolean" });
-			break;
-		case "date":
-			column = integer(name, { mode: "timestamp" });
-			break;
-		case "json":
-			column = text(name, { mode: "json" });
-			break;
-	}
-	if (field.isPrimaryKey) column = column.primaryKey();
-	if (field.isUnique) column = column.unique();
-	if (!field.isOptional) column = column.notNull();
-	return column;
-}
-
-function createTable(model: PersistentModel) {
-	return sqliteTable(
-		model.key.replaceAll(".", "_"),
-		Object.fromEntries(
-			Object.entries(model.schema.fields).map(([name, field]) => [
-				name,
-				toColumn(name, field),
-			]),
-		),
-	) as never;
-}
-
-export function createDrizzleSqliteAdapter(
-	database: unknown | (() => unknown),
-) {
-	return createDrizzleAdapterFactory(
-		database,
-		createTable,
-		createDrizzleSqliteSchemaAdapter(),
-	);
-}
-
-export { toDrizzleTableExportName, toDrizzleTableName } from "./schema";
diff --git a/packages/db-drizzle/test-fixtures/postgres/drizzle.config.ts b/packages/db-drizzle/test-fixtures/postgres/drizzle.config.ts
deleted file mode 100644
index 80dafbbc..00000000
--- a/packages/db-drizzle/test-fixtures/postgres/drizzle.config.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-
-export default defineConfig({
-	schema: "./test-fixtures/postgres/schema.ts",
-	out: "./test-fixtures/postgres/migrations",
-	dialect: "postgresql",
-	dbCredentials: {
-		url:
-			process.env.POSTGRES_TEST_URL ??
-			"postgres://postgres:postgres@localhost:5432/hackkit",
-	},
-});
diff --git a/packages/db-drizzle/test-fixtures/postgres/migrations/0000_init.sql b/packages/db-drizzle/test-fixtures/postgres/migrations/0000_init.sql
deleted file mode 100644
index cb5587fc..00000000
--- a/packages/db-drizzle/test-fixtures/postgres/migrations/0000_init.sql
+++ /dev/null
@@ -1,7 +0,0 @@
-CREATE TABLE "sample_record" (
-	"id" text PRIMARY KEY NOT NULL,
-	"active" boolean NOT NULL,
-	"score" double precision NOT NULL,
-	"metadata" jsonb NOT NULL,
-	"createdAt" timestamp with time zone NOT NULL
-);
diff --git a/packages/db-drizzle/test-fixtures/postgres/migrations/meta/0000_snapshot.json b/packages/db-drizzle/test-fixtures/postgres/migrations/meta/0000_snapshot.json
deleted file mode 100644
index e2910303..00000000
--- a/packages/db-drizzle/test-fixtures/postgres/migrations/meta/0000_snapshot.json
+++ /dev/null
@@ -1,62 +0,0 @@
-{
-  "id": "2d001932-8b73-4315-8adb-7edaf9821725",
-  "prevId": "00000000-0000-0000-0000-000000000000",
-  "version": "7",
-  "dialect": "postgresql",
-  "tables": {
-    "public.sample_record": {
-      "name": "sample_record",
-      "schema": "",
-      "columns": {
-        "id": {
-          "name": "id",
-          "type": "text",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "active": {
-          "name": "active",
-          "type": "boolean",
-          "primaryKey": false,
-          "notNull": true
-        },
-        "score": {
-          "name": "score",
-          "type": "double precision",
-          "primaryKey": false,
-          "notNull": true
-        },
-        "metadata": {
-          "name": "metadata",
-          "type": "jsonb",
-          "primaryKey": false,
-          "notNull": true
-        },
-        "createdAt": {
-          "name": "createdAt",
-          "type": "timestamp with time zone",
-          "primaryKey": false,
-          "notNull": true
-        }
-      },
-      "indexes": {},
-      "foreignKeys": {},
-      "compositePrimaryKeys": {},
-      "uniqueConstraints": {},
-      "policies": {},
-      "checkConstraints": {},
-      "isRLSEnabled": false
-    }
-  },
-  "enums": {},
-  "schemas": {},
-  "sequences": {},
-  "roles": {},
-  "policies": {},
-  "views": {},
-  "_meta": {
-    "columns": {},
-    "schemas": {},
-    "tables": {}
-  }
-}
\ No newline at end of file
diff --git a/packages/db-drizzle/test-fixtures/postgres/migrations/meta/_journal.json b/packages/db-drizzle/test-fixtures/postgres/migrations/meta/_journal.json
deleted file mode 100644
index 8cbe8452..00000000
--- a/packages/db-drizzle/test-fixtures/postgres/migrations/meta/_journal.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  "version": "7",
-  "dialect": "postgresql",
-  "entries": [
-    {
-      "idx": 0,
-      "version": "7",
-      "when": 1784085219647,
-      "tag": "0000_init",
-      "breakpoints": true
-    }
-  ]
-}
\ No newline at end of file
diff --git a/packages/db-drizzle/test-fixtures/postgres/schema.ts b/packages/db-drizzle/test-fixtures/postgres/schema.ts
deleted file mode 100644
index fb809a36..00000000
--- a/packages/db-drizzle/test-fixtures/postgres/schema.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { boolean, doublePrecision, index, integer, jsonb, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
-
-export const sampleRecord = pgTable("sample_record", {
-	id: text("id").primaryKey().notNull(),
-	active: boolean("active").notNull(),
-	score: doublePrecision("score").notNull(),
-	metadata: jsonb("metadata").notNull(),
-	createdAt: timestamp("createdAt", { withTimezone: true, mode: "date" }).notNull()
-});
diff --git a/packages/db-drizzle/tsconfig.json b/packages/db-drizzle/tsconfig.json
deleted file mode 100644
index 16e73196..00000000
--- a/packages/db-drizzle/tsconfig.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-  "extends": "../tsconfig/base.json",
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ES2022",
-    "moduleResolution": "Bundler",
-    "rootDir": "src",
-    "outDir": "dist",
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
-    "noEmit": false
-  },
-  "include": ["src/**/*.ts"],
-  "exclude": ["dist", "node_modules"]
-}
diff --git a/packages/next/README.md b/packages/next/README.md
index 230c469f..fbe4924d 100644
--- a/packages/next/README.md
+++ b/packages/next/README.md
@@ -1,117 +1,42 @@
 # `@hackkit/next`
 
-Next.js integration for HackKit Web Apps. This package is the single composition root for runtime setup, page guards, Core mutations, and HackKit UI provider actions.
+Next.js integration for Core authentication, request scopes, page guards, server actions, and HackKit UI.
 
-Canonical walkthrough: [`docs/guides/next-integration.md`](../../docs/guides/next-integration.md). Reference app: [`apps/web`](../../apps/web).
+## Runtime setup
 
-## Integration path
+`createHackkitRuntimeFromConfig({ config, afterCurrentUser? })` returns a host with a shared `core` promise and a `getRuntime` function. Register the function with `setHackkitRuntime(host.getRuntime)`. Use [the reference app runtime](../../apps/web/lib/runtime.ts) as the integration example.
 
-Wire a HackKit Web App in four steps. Do not rebuild guards or action maps in the app.
+The host initializes one Core ORM and Better Auth instance. Each request or action resolves its session from Next headers and creates a fresh EntityManager and domain API scope. React caches the runtime only within a server render. Never store a request runtime, actor, EntityManager, or settings cache in an application singleton.
 
-### 1. Create and register the runtime
+`config.database` contains native MikroORM driver options. `config.auth` contains Better Auth options except `database`, which Core owns. `@hackkit/next` adds Better Auth's cookie integration; [the app auth route](../../apps/web/app/api/auth/[...all]/route.ts) delegates to Core's auth handler.
 
-```ts
-// lib/runtime.ts
-import "server-only";
-import {
-	createHackkitRuntimeFromConfig,
-	setHackkitRuntime,
-} from "@hackkit/next";
+`getCurrentUser` reads the existing HackKit profile and authoritative auth email. It does not create or overwrite profiles. `afterCurrentUser` optionally performs app-specific work after a profile is loaded.
 
-const runtimePromise = createHackkitRuntimeFromConfig({
-	config: appConfig,
-	auth: authAdapter,
-	afterCurrentUser: async (user, hackkit) => {
-		// optional app-specific work (e.g. owner allowlist)
-	},
-});
+## UI and routes
 
-setHackkitRuntime(runtimePromise);
+Pass `hackKitUIActions` to `HackKitUIProvider`. Named server actions resolve the registered runtime and call its mutations. Keep route overrides serializable; custom route-builder functions belong in a client navigation adapter.
 
-export async function getRuntime() {
-	return runtimePromise;
-}
+Use `runtime.pageGuards` in layouts. Common guards include `requireOnboardingAccess`, `requireParticipantAccess`, `requireApprovalPendingAccess`, `requirePermission`, and `requireNotBanned`.
 
-export async function getPageGuards() {
-	return (await getRuntime()).pageGuards;
-}
-```
-
-`appConfig.database` contains the explicit `DatabaseAdapterFactory`; the Next integration does not assume or wrap a database dialect.
-
-`createHackkitRuntime` / `createHackkitRuntimeFromConfig` owns:
-
--   HackKit Core init
--   `mutations` via `createHackKitMutations`
--   `pageGuards` via `createPageGuards` (with runtime `getCurrentUser` / settings cache)
--   Auth helpers (`getAuthId`, `getCurrentUser`, `getSettingValue`)
-
-### 2. Pass `hackKitUIActions` to HackKit UI
-
-```tsx
-// app/providers.tsx
-import { hackKitUIActions } from "@hackkit/next";
-import { HackKitUIProvider } from "@hackkit/ui";
-
-export function Providers({ children }: { children: React.ReactNode }) {
-	return (
-		<HackKitUIProvider actions={hackKitUIActions}>
-			{children}
-		</HackKitUIProvider>
-	);
-}
-```
-
-Do not hand-maintain a local Core action map. Named server actions live inside `@hackkit/next` and delegate to `runtime.mutations`.
-
-Do not pass route maps that contain builder functions from a Server Component — they are not serializable. Omit `routes` to use client-side defaults, pass only string overrides, or supply a client `navigation` adapter for custom admin builders. Server-only helpers (for example onboarding step links) may still import `DEFAULT_HACKKIT_UI_ROUTES` / an app route map.
-
-### 3. Protect routes with runtime-owned page guards
-
-```tsx
-// app/onboarding/layout.tsx
-import { getPageGuards } from "@/lib/runtime";
-
-export default async function OnboardingLayout({ children }) {
-	const guards = await getPageGuards();
-	await guards.requireOnboardingAccess();
-	return children;
-}
-```
-
-Common guards: `requireOnboardingAccess`, `requireParticipantAccess`, `requireApprovalPendingAccess`, `requirePermission`, `requireNotBanned`, `requireHackerRegistrationOpenForNewHacker`.
-
-Do not call `createPageGuards` in the app — use `runtime.pageGuards` / `getPageGuards()`.
-
-### 4. Sync plugin actions separately
-
-Plugin server actions stay generated by `hackkit plugin sync` (for example `app/hackkit-plugin-actions.ts`). They use the same registered runtime via `getHackkitRuntime()` / `getRuntime()`.
+Plugin actions are generated separately by `hackkit plugin sync`. They use each plugin's `/actions` entrypoint and resolve the same request runtime. Server plugin entrypoints remain usable by the CLI without importing Next.
 
 ## Public API
 
-| Export                                                    | Role                                                  |
-| --------------------------------------------------------- | ----------------------------------------------------- |
-| `createHackkitRuntime` / `createHackkitRuntimeFromConfig` | Composition root                                      |
-| `setHackkitRuntime` / `getHackkitRuntime`                 | Module singleton for server actions                   |
-| `hackKitUIActions`                                        | Provider action map (`satisfies HackKitUIActions`)    |
-| `createHackKitMutations`                                  | Core → UI mutation bridge (used by the runtime)       |
-| `createPageGuards`                                        | Low-level guard factory (prefer runtime-owned guards) |
-| `actionSuccess` / `actionFailure`                         | Shared action result helpers                          |
+| Export                                    | Role                                                       |
+| ----------------------------------------- | ---------------------------------------------------------- |
+| `createHackkitRuntimeFromConfig`          | Initializes shared resources and a request runtime factory |
+| `createHackkitRuntime`                    | Creates one request runtime from an initialized Core host  |
+| `setHackkitRuntime` / `getHackkitRuntime` | Registers and resolves the request factory                 |
+| `hackKitUIActions`                        | UI provider action map                                     |
+| `createHackKitMutations`                  | Domain-to-UI mutation bridge used by runtime               |
+| `createPageGuards`                        | Guard factory used by runtime                              |
+| `actionSuccess` / `actionFailure`         | Shared action result helpers                               |
 
 ## Adding a Core mutation
 
 1. Add the method to `HackKitUIActions` in `@hackkit/ui`.
-2. Implement it in `createHackKitMutations` (`src/mutations.ts`).
-3. Add a thin `"use server"` wrapper in `src/actions.ts`.
-4. Include it in `hackKitUIActions` (`src/action-map.ts`).
-
-App-owned bridge files should not need changes. Package tests assert key parity across the UI contract, mutations, and provider map.
-
-## Verify
+2. Implement it in `createHackKitMutations`.
+3. Add a thin server action in `src/actions.ts`.
+4. Include it in `hackKitUIActions` in `src/action-map.ts`.
 
-```bash
-pnpm --filter @hackkit/next test
-pnpm --filter @hackkit/next typecheck
-pnpm --filter web typecheck
-pnpm --filter web build
-```
+Package tests check action-map parity, guard behavior, session isolation, anonymous requests, and profile preservation. Run `pnpm --filter @hackkit/next test` and `pnpm --filter @hackkit/next typecheck` after building dependencies.
diff --git a/packages/next/package.json b/packages/next/package.json
index 99a21ccb..bbab38b1 100644
--- a/packages/next/package.json
+++ b/packages/next/package.json
@@ -23,16 +23,19 @@
   "dependencies": {
     "@hackkit/config": "workspace:*",
     "@hackkit/core": "workspace:*",
-    "@hackkit/ui": "workspace:*"
+    "@hackkit/ui": "workspace:*",
+    "better-auth": "1.7.6"
   },
   "peerDependencies": {
     "next": ">=14",
     "react": ">=18"
   },
   "devDependencies": {
+    "@types/node": "22.18.6",
     "next": "14.2.35",
-    "typescript": "5.5.3",
+    "typescript": "5.9.3",
     "vitest": "^3.2.4",
+    "@types/react": "18.3.3",
     "tsup": "^8.5.1"
   },
   "license": "MIT",
diff --git a/packages/next/src/__tests__/action-actor.test.ts b/packages/next/src/__tests__/action-actor.test.ts
new file mode 100644
index 00000000..08325d96
--- /dev/null
+++ b/packages/next/src/__tests__/action-actor.test.ts
@@ -0,0 +1,42 @@
+import { expect, it } from "vitest";
+import { CorePermission, coreModels } from "@hackkit/core";
+import { createTestHackkit, createTestUser } from "@hackkit/core/testing";
+import { createHackKitMutations } from "../mutations";
+
+it("does not let a submitted actor ID grant a caller administrator permissions", async () => {
+	const hackkit = await createTestHackkit();
+	for (const authId of ["owner", "caller"]) {
+		await createTestUser(hackkit, {
+			authId,
+			email: `${authId}@example.com`,
+			name: `${authId} Test`,
+		});
+	}
+	hackkit.em.create(coreModels.role, {
+		id: "owner-role",
+		name: "Owner",
+		position: 0,
+		permissions: [CorePermission.SuperAdmin],
+	});
+	const owner = await hackkit.em.findOneOrFail(coreModels.user, {
+		id: "owner",
+	});
+	owner.roleId = "owner-role";
+	await hackkit.em.flush();
+	const mutations = createHackKitMutations({
+		hackkit,
+		getAuthId: async () => "caller",
+		getSettingValue: hackkit.settings.getValue,
+	});
+	const submitted = {
+		actorAuthId: "owner",
+		name: "Forged role",
+		position: 10,
+		permissions: [],
+		color: "#ffffff",
+	};
+	expect(await mutations.createRole(submitted)).toMatchObject({ ok: false });
+	expect(
+		await hackkit.em.count(coreModels.role, { name: "Forged role" }),
+	).toBe(0);
+});
diff --git a/packages/next/src/__tests__/page-guards.test.ts b/packages/next/src/__tests__/page-guards.test.ts
index 75dd8531..5cb46820 100644
--- a/packages/next/src/__tests__/page-guards.test.ts
+++ b/packages/next/src/__tests__/page-guards.test.ts
@@ -1,11 +1,13 @@
+import {
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "@hackkit/core/testing";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 import {
 	CorePermission,
 	CoreSetting,
 	coreModels,
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
 	seedRoles,
 	type HackKit,
 } from "@hackkit/core";
@@ -28,28 +30,9 @@ vi.mock("next/navigation", () => ({
 
 import { createPageGuards } from "../page-guards";
 
-function createTestHackkit() {
-	const registry = createPluginRegistry();
-	let timestamp = 0;
-	const now = () =>
-		new Date(
-			`2026-05-24T12:00:${String(timestamp++).padStart(2, "0")}.000Z`,
-		);
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	return Object.assign(createHackkit({ database: db, clock: now, id }), {
-		database: db,
-	});
-}
-
-async function seedOwner(hackkit: ReturnType<typeof createTestHackkit>) {
+async function seedOwner(hackkit: TestHackkit) {
 	await seedRoles({
-		database: hackkit.database,
+		em: hackkit.em,
 		roles: [
 			{
 				id: "core.owner",
@@ -59,20 +42,23 @@ async function seedOwner(hackkit: ReturnType<typeof createTestHackkit>) {
 			},
 		],
 	});
-	await hackkit.users.ensureUser({
+	await createTestUser(hackkit, {
 		authId: "admin-auth",
 		email: "admin@example.com",
-		firstName: "Ad",
-		lastName: "Min",
+		name: "Ad Min",
 	});
-	await hackkit.database.update(
+	await hackkit.em.nativeUpdate(
 		coreModels.user,
-		{ authId: "admin-auth" },
+		{ id: "admin-auth" },
 		{ roleId: "core.owner", updatedAt: new Date() },
 	);
 }
 
-async function setSetting(hackkit: HackKit, key: CoreSetting, value: boolean) {
+async function setSetting(
+	hackkit: TestHackkit,
+	key: CoreSetting,
+	value: boolean,
+) {
 	await hackkit.settings.set({
 		actorAuthId: "admin-auth",
 		key,
@@ -80,12 +66,15 @@ async function setSetting(hackkit: HackKit, key: CoreSetting, value: boolean) {
 	});
 }
 
-async function ensureUser(hackkit: HackKit, authId: string, hackTag?: string) {
-	await hackkit.users.ensureUser({
+async function createFixtureUser(
+	hackkit: TestHackkit,
+	authId: string,
+	hackTag?: string,
+) {
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: authId,
-		lastName: "User",
+		name: `${authId} User`,
 	});
 	if (hackTag) {
 		await hackkit.users.claimHackTag({
@@ -96,7 +85,7 @@ async function ensureUser(hackkit: HackKit, authId: string, hackTag?: string) {
 	return (await hackkit.users.getUser(authId))!;
 }
 
-async function completeUserData(hackkit: HackKit, authId: string) {
+async function completeUserData(hackkit: TestHackkit, authId: string) {
 	await hackkit.userData.completeUserData({
 		authId,
 		age: 20,
@@ -111,9 +100,9 @@ async function completeUserData(hackkit: HackKit, authId: string) {
 	});
 }
 
-async function registerHacker(hackkit: HackKit, authId: string) {
+async function registerHacker(hackkit: TestHackkit, authId: string) {
 	await hackkit.hackers.registerHacker({
-		authId,
+		userId: authId,
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "undergraduate",
@@ -123,22 +112,22 @@ async function registerHacker(hackkit: HackKit, authId: string) {
 }
 
 async function seedCompletedUnapprovedHacker(
-	hackkit: HackKit,
+	hackkit: TestHackkit,
 	authId: string,
 	hackTag: string,
 ) {
 	await setSetting(hackkit, CoreSetting.RequireApproval, true);
-	await ensureUser(hackkit, authId, hackTag);
+	await createFixtureUser(hackkit, authId, hackTag);
 	await completeUserData(hackkit, authId);
 	await registerHacker(hackkit, authId);
 }
 
 async function seedApprovedParticipant(
-	hackkit: HackKit,
+	hackkit: TestHackkit,
 	authId: string,
 	hackTag: string,
 ) {
-	await ensureUser(hackkit, authId, hackTag);
+	await createFixtureUser(hackkit, authId, hackTag);
 	await completeUserData(hackkit, authId);
 	await registerHacker(hackkit, authId);
 }
@@ -148,17 +137,17 @@ function expectRedirect(promise: Promise<unknown>, to: string) {
 }
 
 describe("createPageGuards", () => {
-	let hackkit: HackKit;
+	let hackkit: TestHackkit;
 
 	beforeEach(async () => {
 		redirectMock.mockClear();
 		notFoundMock.mockClear();
-		hackkit = createTestHackkit();
+		hackkit = await createTestHackkit();
 		await seedOwner(hackkit);
 	});
 
 	it("redirects incomplete onboarding to the next step", async () => {
-		await ensureUser(hackkit, "user-1", "alice");
+		await createFixtureUser(hackkit, "user-1", "alice");
 		const guards = createPageGuards(hackkit, async () => "user-1");
 
 		await expectRedirect(
@@ -185,13 +174,13 @@ describe("createPageGuards", () => {
 
 		const guards = createPageGuards(hackkit, async () => "user-3");
 		const state = await guards.requireParticipantAccess();
-		expect(state.user.authId).toBe("user-3");
+		expect(state.user.id).toBe("user-3");
 		expect(state.user.isApproved).toBe(true);
-		expect(state.hacker.authId).toBe("user-3");
+		expect(state.hacker.userId).toBe("user-3");
 	});
 
 	it("redirects banned users to suspended", async () => {
-		await ensureUser(hackkit, "user-4", "dan");
+		await createFixtureUser(hackkit, "user-4", "dan");
 		await hackkit.users.banUser({
 			actorAuthId: "admin-auth",
 			targetAuthId: "user-4",
@@ -203,7 +192,7 @@ describe("createPageGuards", () => {
 	});
 
 	it("redirects new hackers when registration is closed", async () => {
-		await ensureUser(hackkit, "user-5", "erin");
+		await createFixtureUser(hackkit, "user-5", "erin");
 		await completeUserData(hackkit, "user-5");
 		await setSetting(hackkit, CoreSetting.RegistrationOpen, false);
 
@@ -228,7 +217,7 @@ describe("createPageGuards", () => {
 		});
 
 		const user = await guards.requireApprovedUser();
-		expect(user.authId).toBe("user-6");
+		expect(user.id).toBe("user-6");
 		expect(getCurrentUser).toHaveBeenCalled();
 	});
 
diff --git a/packages/next/src/__tests__/runtime.test.ts b/packages/next/src/__tests__/runtime.test.ts
new file mode 100644
index 00000000..a483780f
--- /dev/null
+++ b/packages/next/src/__tests__/runtime.test.ts
@@ -0,0 +1,66 @@
+import { expect, it, vi } from "vitest";
+import { createTestHackkit } from "@hackkit/core/testing";
+
+const requestHeaders = vi.hoisted(() => vi.fn<() => Headers>());
+vi.mock("next/headers", () => ({ headers: requestHeaders }));
+vi.mock("next/navigation", () => ({
+	redirect: (path: string): never => {
+		throw new Error(`REDIRECT:${path}`);
+	},
+}));
+
+import { createHackkitRuntime } from "../runtime";
+
+it("binds concurrent requests to separate users and never overwrites edited profiles", async () => {
+	const { runtime: core } = await createTestHackkit();
+	const cookies: string[] = [];
+	for (const name of ["Alice", "Bob"]) {
+		const response = await core.auth.api.signUpEmail({
+			body: {
+				name,
+				email: `${name.toLowerCase()}@example.com`,
+				password: "a sufficiently long password",
+			},
+			asResponse: true,
+		});
+		expect(response.status).toBe(200);
+		cookies.push(response.headers.get("set-cookie")!);
+	}
+	requestHeaders.mockReturnValueOnce(new Headers({ cookie: cookies[0] }));
+	requestHeaders.mockReturnValueOnce(new Headers({ cookie: cookies[1] }));
+	const [alice, bob] = await Promise.all([
+		createHackkitRuntime({ core }),
+		createHackkitRuntime({ core }),
+	]);
+	const aliceId = await alice.getAuthId();
+	const bobId = await bob.getAuthId();
+	expect(aliceId).not.toBe(bobId);
+	expect(alice.hackkit).not.toBe(bob.hackkit);
+	await alice.hackkit.users.updateProfile({
+		authId: aliceId,
+		name: "Alicia",
+		bio: "Saved profile",
+	});
+	expect(await bob.getCurrentUser()).toMatchObject({
+		id: bobId,
+		name: "Bob",
+	});
+	requestHeaders.mockReturnValueOnce(new Headers({ cookie: cookies[0] }));
+	const nextRequest = await createHackkitRuntime({ core });
+	const profile = await nextRequest.getCurrentUser();
+	expect(profile).toMatchObject({
+		id: aliceId,
+		name: "Alicia",
+		bio: "Saved profile",
+	});
+	expect(Object.getPrototypeOf(profile)).toBe(Object.prototype);
+	expect(profile).not.toHaveProperty("password");
+	expect(profile).not.toHaveProperty("session");
+});
+
+it("redirects an anonymous authenticated operation without creating an identity", async () => {
+	const { runtime: core } = await createTestHackkit();
+	requestHeaders.mockReturnValueOnce(new Headers());
+	const request = await createHackkitRuntime({ core });
+	await expect(request.getCurrentUser()).rejects.toThrow("REDIRECT:/sign-in");
+});
diff --git a/packages/next/src/actions.ts b/packages/next/src/actions.ts
index d2561b3b..71b9f0f4 100644
--- a/packages/next/src/actions.ts
+++ b/packages/next/src/actions.ts
@@ -8,9 +8,11 @@ async function callMutation<K extends keyof HackKitUIActions>(
 	...args: Parameters<HackKitUIActions[K]>
 ): Promise<Awaited<ReturnType<HackKitUIActions[K]>>> {
 	const mutations = (await getHackkitRuntime()).mutations;
-	return (mutations[name] as (...actionArgs: typeof args) => ReturnType<
-		HackKitUIActions[K]
-	>)(...args) as Awaited<ReturnType<HackKitUIActions[K]>>;
+	return (
+		mutations[name] as (
+			...actionArgs: typeof args
+		) => ReturnType<HackKitUIActions[K]>
+	)(...args) as Awaited<ReturnType<HackKitUIActions[K]>>;
 }
 
 export async function completeUserData(
diff --git a/packages/next/src/index.ts b/packages/next/src/index.ts
index 9669fa9a..8f59c32c 100644
--- a/packages/next/src/index.ts
+++ b/packages/next/src/index.ts
@@ -8,6 +8,7 @@ export type {
 	CreateHackkitRuntimeFromConfigOptions,
 	CreateHackkitRuntimeOptions,
 	HackkitRuntime,
+	HackkitRuntimeHost,
 } from "./runtime";
 export { actionFailure, actionSuccess } from "@hackkit/ui/actions";
 export type { HackKitActionResult } from "@hackkit/ui/actions";
diff --git a/packages/next/src/mutations.ts b/packages/next/src/mutations.ts
index b1779acc..b33c158d 100644
--- a/packages/next/src/mutations.ts
+++ b/packages/next/src/mutations.ts
@@ -52,10 +52,11 @@ export type CreateHackKitMutationsOptions = {
 	hackkit: HackKit;
 	getAuthId: () => Promise<string>;
 	getSettingValue: (key: SettingKey) => Promise<SettingValue>;
-	invalidateSettingsCache?: () => void;
 };
 
-export function createHackKitMutations(runtime: HackkitRuntime): HackKitUIActions;
+export function createHackKitMutations(
+	runtime: HackkitRuntime,
+): HackKitUIActions;
 export function createHackKitMutations(
 	options: CreateHackKitMutationsOptions,
 ): HackKitUIActions;
@@ -67,15 +68,20 @@ export function createHackKitMutations(
 				hackkit: optionsOrRuntime.hackkit,
 				getAuthId: optionsOrRuntime.getAuthId,
 				getSettingValue: optionsOrRuntime.getSettingValue,
-				invalidateSettingsCache: optionsOrRuntime.invalidateSettingsCache,
 			}
 		: optionsOrRuntime;
-	const { hackkit, getAuthId, getSettingValue, invalidateSettingsCache } = options;
+	const { hackkit, getAuthId, getSettingValue } = options;
 	const now = () => new Date();
 
 	async function resolveTargetFromQr(rawQr: string) {
-		const eventPassQrTtlMs = await getSettingValue(CoreSetting.EventPassQrTtlMs);
-		return resolveEventPassTargetAuthId(rawQr, now(), Number(eventPassQrTtlMs));
+		const eventPassQrTtlMs = await getSettingValue(
+			CoreSetting.EventPassQrTtlMs,
+		);
+		return resolveEventPassTargetAuthId(
+			rawQr,
+			now(),
+			Number(eventPassQrTtlMs),
+		);
 	}
 
 	return {
@@ -120,14 +126,17 @@ export function createHackKitMutations(
 
 		async registerHacker(values: HackerRegistrationFormValues) {
 			try {
-				const authId = await getAuthId();
+				const userId = await getAuthId();
 				await hackkit.hackers.registerHacker({
 					...values,
-					authId,
+					userId,
 				});
 				return actionSuccess();
 			} catch (error) {
-				return actionFailure(error, "Could not complete hacker registration.");
+				return actionFailure(
+					error,
+					"Could not complete hacker registration.",
+				);
 			}
 		},
 
@@ -200,7 +209,10 @@ export function createHackKitMutations(
 
 				return actionSuccess({ user, priorScans });
 			} catch (error) {
-				return actionFailure(error, "Could not read Event Pass QR code.");
+				return actionFailure(
+					error,
+					"Could not read Event Pass QR code.",
+				);
 			}
 		},
 
@@ -246,8 +258,10 @@ export function createHackKitMutations(
 		async setSettings(values) {
 			try {
 				const actorAuthId = await getAuthId();
-				const settings = await hackkit.settings.setMany({ actorAuthId, values });
-				invalidateSettingsCache?.();
+				const settings = await hackkit.settings.setMany({
+					actorAuthId,
+					values,
+				});
 				return actionSuccess(settings);
 			} catch (error) {
 				return actionFailure(error, "Could not save settings.");
@@ -257,8 +271,10 @@ export function createHackKitMutations(
 		async resetSetting(key) {
 			try {
 				const actorAuthId = await getAuthId();
-				const setting = await hackkit.settings.reset({ actorAuthId, key });
-				invalidateSettingsCache?.();
+				const setting = await hackkit.settings.reset({
+					actorAuthId,
+					key,
+				});
 				return actionSuccess(setting);
 			} catch (error) {
 				return actionFailure(error, "Could not reset setting.");
@@ -291,7 +307,10 @@ export function createHackKitMutations(
 		async cancelRsvp(targetAuthId: string) {
 			try {
 				const actorAuthId = await getAuthId();
-				const rsvp = await hackkit.rsvp.cancel({ actorAuthId, targetAuthId });
+				const rsvp = await hackkit.rsvp.cancel({
+					actorAuthId,
+					targetAuthId,
+				});
 				return actionSuccess(rsvp);
 			} catch (error) {
 				return actionFailure(error, "Could not cancel RSVP.");
@@ -302,8 +321,8 @@ export function createHackKitMutations(
 			try {
 				const actorAuthId = await getAuthId();
 				const rsvp = await hackkit.rsvp.setStatus({
-					actorAuthId,
 					...input,
+					actorAuthId,
 				});
 				return actionSuccess(rsvp);
 			} catch (error) {
@@ -314,7 +333,10 @@ export function createHackKitMutations(
 		async promoteRsvp(targetAuthId?: string) {
 			try {
 				const actorAuthId = await getAuthId();
-				const rsvp = await hackkit.rsvp.promote({ actorAuthId, targetAuthId });
+				const rsvp = await hackkit.rsvp.promote({
+					actorAuthId,
+					targetAuthId,
+				});
 				return actionSuccess(rsvp);
 			} catch (error) {
 				return actionFailure(error, "Could not promote RSVP.");
@@ -377,8 +399,8 @@ export function createHackKitMutations(
 			try {
 				const actorAuthId = await getAuthId();
 				const role = await hackkit.roles.createRole({
-					actorAuthId,
 					...input,
+					actorAuthId,
 				});
 				return actionSuccess(role);
 			} catch (error) {
@@ -390,8 +412,8 @@ export function createHackKitMutations(
 			try {
 				const actorAuthId = await getAuthId();
 				const role = await hackkit.roles.updateRole({
-					actorAuthId,
 					...input,
+					actorAuthId,
 				});
 				return actionSuccess(role);
 			} catch (error) {
diff --git a/packages/next/src/page-guards.ts b/packages/next/src/page-guards.ts
index 2f622167..f5013fff 100644
--- a/packages/next/src/page-guards.ts
+++ b/packages/next/src/page-guards.ts
@@ -37,7 +37,8 @@ export function createPageGuards(
 	const onForbidden = options.onForbidden ?? "notFound";
 	const redirectTo = options.redirectTo ?? "/dashboard";
 	const approvalRedirectTo = options.approvalRedirectTo ?? "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/i/approval";
-	const onboardingRedirectTo = options.onboardingRedirectTo ?? "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/onboarding/hacktag";
+	const onboardingRedirectTo =
+		options.onboardingRedirectTo ?? "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/onboarding/hacktag";
 	const registrationClosedRedirectTo =
 		options.registrationClosedRedirectTo ?? "/registration-closed";
 	const suspendedRedirectTo = options.suspendedRedirectTo ?? "/suspended";
@@ -65,7 +66,9 @@ export function createPageGuards(
 			: hackkit.settings.getValue(key);
 	}
 
-	async function requireNotBannedForAuthId(authId: string): Promise<UserBan | null> {
+	async function requireNotBannedForAuthId(
+		authId: string,
+	): Promise<UserBan | null> {
 		const ban = await hackkit.users.getUserBan(authId);
 		if (ban) redirect(suspendedRedirectTo);
 		return null;
@@ -77,25 +80,27 @@ export function createPageGuards(
 
 	async function requireApprovedUser(): Promise<User> {
 		const user = await getCurrentUser();
-		await requireNotBannedForAuthId(user.authId);
+		await requireNotBannedForAuthId(user.id);
 		if (!user.isApproved) redirect(approvalRedirectTo);
 		return user;
 	}
 
 	async function requireCompletedOnboarding(): Promise<CompetitorOnboardingState> {
 		const user = await getCurrentUser();
-		await requireNotBannedForAuthId(user.authId);
+		await requireNotBannedForAuthId(user.id);
 
 		if (!user.hackTag) redirect(onboardingRedirectTo);
 
 		const [userData, hacker] = await Promise.all([
-			hackkit.userData.getUserData(user.authId),
-			hackkit.hackers.getHacker(user.authId),
+			hackkit.userData.getUserData(user.id),
+			hackkit.hackers.getHacker(user.id),
 		]);
 
 		if (!userData) redirect("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/onboarding/user-data");
 		if (!hacker) {
-			const registrationOpen = await getSettingValue(CoreSetting.RegistrationOpen);
+			const registrationOpen = await getSettingValue(
+				CoreSetting.RegistrationOpen,
+			);
 			if (!registrationOpen) redirect(registrationClosedRedirectTo);
 			redirect("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/onboarding/hacker");
 		}
@@ -111,12 +116,12 @@ export function createPageGuards(
 
 	async function requireOnboardingAccess(): Promise<User> {
 		const user = await getCurrentUser();
-		await requireNotBannedForAuthId(user.authId);
+		await requireNotBannedForAuthId(user.id);
 
 		if (!user.hackTag) return user;
 		const [userData, hacker] = await Promise.all([
-			hackkit.userData.getUserData(user.authId),
-			hackkit.hackers.getHacker(user.authId),
+			hackkit.userData.getUserData(user.id),
+			hackkit.hackers.getHacker(user.id),
 		]);
 
 		if (!userData || !hacker) return user;
@@ -150,7 +155,9 @@ export function createPageGuards(
 			const authId = await getAuthId();
 			const existing = await hackkit.hackers.getHacker(authId);
 			if (existing) return;
-			const registrationOpen = await getSettingValue(CoreSetting.RegistrationOpen);
+			const registrationOpen = await getSettingValue(
+				CoreSetting.RegistrationOpen,
+			);
 			if (registrationOpen) return;
 			redirect(registrationClosedRedirectTo);
 		},
diff --git a/packages/next/src/runtime.ts b/packages/next/src/runtime.ts
index e8ff3f00..ecc0b829 100644
--- a/packages/next/src/runtime.ts
+++ b/packages/next/src/runtime.ts
@@ -1,41 +1,28 @@
 import {
-	createHackkit,
-	type AuthAdapter,
-	type DatabaseAdapterInput,
+	initializeHackkit,
+	HackKitError,
 	type HackKit,
-	type HackKitPlugin,
+	type HackKitRuntime as CoreRuntime,
 	type SettingKey,
 	type SettingValue,
 	type User,
 } from "@hackkit/core";
 import { resolveHackkitConfig, type HackkitConfig } from "@hackkit/config";
-import type { EventTypesInput, UserDataOptionsInput } from "@hackkit/core";
-import type { GroupsInput } from "@hackkit/core";
-import type { HackKitLoggerOptions } from "@hackkit/core";
 import type { HackKitUIActions } from "@hackkit/ui";
+import { headers } from "next/headers";
 import { redirect } from "next/navigation";
+import { nextCookies } from "better-auth/next-js";
+import { cache } from "react";
 import { createHackKitMutations } from "./mutations";
 import { createPageGuards, type PageGuards } from "./page-guards";
 
 export type CreateHackkitRuntimeOptions = {
-	database: DatabaseAdapterInput;
-	auth: AuthAdapter;
-	plugins?: readonly HackKitPlugin[];
-	userDataOptions?: UserDataOptionsInput;
-	eventTypes?: EventTypesInput;
-	groups?: GroupsInput;
-	logger?: HackKitLoggerOptions;
-	defaultCompetitorRoleId?: string;
-	/**
-	 * App-specific work after the runtime resolves the current user.
-	 * Runs for both `runtime.getCurrentUser` and the runtime-owned page guards.
-	 */
+	core: CoreRuntime;
 	afterCurrentUser?: (user: User, hackkit: HackKit) => Promise<void>;
 };
 
 export type CreateHackkitRuntimeFromConfigOptions = {
 	config: HackkitConfig;
-	auth: AuthAdapter;
 	afterCurrentUser?: CreateHackkitRuntimeOptions["afterCurrentUser"];
 };
 
@@ -43,72 +30,50 @@ export type HackkitRuntime = {
 	hackkit: HackKit;
 	mutations: HackKitUIActions;
 	pageGuards: PageGuards;
-	getAuthId: () => Promise<string>;
-	getCurrentUser: () => Promise<User>;
-	getSettingValue: (key: SettingKey) => Promise<SettingValue>;
-	invalidateSettingsCache: () => void;
+	getAuthId(): Promise<string>;
+	getCurrentUser(): Promise<User>;
+	getSettingValue(key: SettingKey): Promise<SettingValue>;
 };
 
+export type HackkitRuntimeHost = {
+	core: Promise<CoreRuntime>;
+	getRuntime(): Promise<HackkitRuntime>;
+};
+
+/** Bind domain operations to this request's session and fresh EntityManager. */
 export async function createHackkitRuntime(
 	options: CreateHackkitRuntimeOptions,
 ): Promise<HackkitRuntime> {
-	const hackkit = createHackkit({
-		database: options.database,
-		plugins: options.plugins,
-		userDataOptions: options.userDataOptions,
-		eventTypes: options.eventTypes,
-		groups: options.groups,
-		logger: options.logger,
-		defaultCompetitorRoleId: options.defaultCompetitorRoleId,
+	const session = await options.core.auth.api.getSession({
+		headers: await headers(),
 	});
-
-	async function requireSession() {
-		const session = await options.auth.getSession();
-		if (!session) redirect("/sign-in");
-		return session;
-	}
+	const { hackkit } = options.core.createScope(session?.user.id);
 
 	async function getAuthId(): Promise<string> {
-		return options.auth.toAuthId(await requireSession());
+		if (!session) redirect("/sign-in");
+		return session.user.id;
 	}
 
 	async function getCurrentUser(): Promise<User> {
-		const session = await requireSession();
-		const identity = options.auth.getIdentity(session);
-		const user = await hackkit.users.ensureUser({
-			authId: options.auth.toAuthId(session),
-			...identity,
-		});
-		if (options.afterCurrentUser) {
-			await options.afterCurrentUser(user, hackkit);
-		}
+		const user = await hackkit.users.getUser(await getAuthId());
+		if (!user)
+			throw new HackKitError("NOT_FOUND", "User profile not found.");
+		await options.afterCurrentUser?.(user, hackkit);
 		return user;
 	}
 
-	const settingsCache = new Map<SettingKey, Promise<SettingValue>>();
-	function invalidateSettingsCache() {
-		settingsCache.clear();
+	function getSettingValue(key: SettingKey) {
+		return hackkit.settings.getValue(key);
 	}
-	function getSettingValue(key: SettingKey): Promise<SettingValue> {
-		const cached = settingsCache.get(key);
-		if (cached) return cached;
-		const value = hackkit.settings.getValue(key);
-		settingsCache.set(key, value);
-		return value;
-	}
-
 	const mutations = createHackKitMutations({
 		hackkit,
 		getAuthId,
 		getSettingValue,
-		invalidateSettingsCache,
 	});
-
 	const pageGuards = createPageGuards(hackkit, getAuthId, {
 		getCurrentUser,
 		getSettingValue,
 	});
-
 	return {
 		hackkit,
 		mutations,
@@ -116,38 +81,43 @@ export async function createHackkitRuntime(
 		getAuthId,
 		getCurrentUser,
 		getSettingValue,
-		invalidateSettingsCache,
 	};
 }
 
+/** Initialize shared resources once; React caches only within a server render. */
 export function createHackkitRuntimeFromConfig(
 	options: CreateHackkitRuntimeFromConfigOptions,
-): Promise<HackkitRuntime> {
+): HackkitRuntimeHost {
 	const config = resolveHackkitConfig(options.config);
-	return createHackkitRuntime({
-		database: config.database,
-		auth: options.auth,
-		plugins: config.plugins,
-		userDataOptions: config.userDataOptions,
-		eventTypes: config.eventTypes,
-		groups: config.groups,
-		logger: config.logger,
-		defaultCompetitorRoleId: config.defaultCompetitorRoleId,
-		afterCurrentUser: options.afterCurrentUser,
+	const core = initializeHackkit({
+		...config,
+		auth: {
+			...config.auth,
+			plugins: [...(config.auth.plugins ?? []), nextCookies()],
+		},
 	});
+	const getRuntime = cache(async () =>
+		createHackkitRuntime({
+			core: await core,
+			afterCurrentUser: options.afterCurrentUser,
+		}),
+	);
+	return { core, getRuntime };
 }
 
-let runtimePromise: Promise<HackkitRuntime> | null = null;
+let runtimeProvider: (() => Promise<HackkitRuntime>) | undefined;
 
-export function setHackkitRuntime(promise: Promise<HackkitRuntime>): void {
-	runtimePromise = promise;
+/** Register a factory, never a request's runtime or EntityManager. */
+export function setHackkitRuntime(
+	provider: () => Promise<HackkitRuntime>,
+): void {
+	runtimeProvider = provider;
 }
 
 export async function getHackkitRuntime(): Promise<HackkitRuntime> {
-	if (!runtimePromise) {
+	if (!runtimeProvider)
 		throw new Error(
 			"HackKit runtime is not initialized. Call setHackkitRuntime() from your app runtime module.",
 		);
-	}
-	return runtimePromise;
+	return runtimeProvider();
 }
diff --git a/packages/next/tsconfig.json b/packages/next/tsconfig.json
index c61df106..ebb5d87c 100644
--- a/packages/next/tsconfig.json
+++ b/packages/next/tsconfig.json
@@ -2,13 +2,14 @@
   "extends": "../tsconfig/base.json",
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ES2022",
+    "module": "ESNext",
     "moduleResolution": "Bundler",
     "outDir": "./dist",
     "rootDir": "./src",
     "declaration": true,
     "declarationMap": true,
-    "sourceMap": true
+    "sourceMap": true,
+    "noEmit": true
   },
   "include": ["src/**/*.ts"],
   "exclude": ["node_modules", "dist", "src/**/__tests__/**"]
diff --git a/packages/plugin-discord/app/discord/page.tsx b/packages/plugin-discord/app/discord/page.tsx
index 15f97940..a637c8f8 100644
--- a/packages/plugin-discord/app/discord/page.tsx
+++ b/packages/plugin-discord/app/discord/page.tsx
@@ -1,3 +1,4 @@
+import { notFound } from "next/navigation";
 import { getHackkitRuntime } from "@hackkit/next";
 import type { DiscordApi } from "../../src/api";
 import { syncDiscordMemberRoles } from "@/app/hackkit-plugin-actions";
@@ -6,9 +7,10 @@ export const dynamic = "force-dynamic";
 
 export default async function DiscordPage() {
 	const runtime = await getHackkitRuntime();
+	if (!runtime.hackkit.isPluginEnabled("discord")) notFound();
 	const currentUser = await runtime.getCurrentUser();
 	const discord = runtime.hackkit.plugins.discord as DiscordApi;
-	const member = await discord.getMember(currentUser.authId);
+	const member = await discord.getMember(currentUser.id);
 
 	return (
 		<main className="min-h-screen bg-muted/30 px-6 py-10">
@@ -19,8 +21,8 @@ export default async function DiscordPage() {
 						Discord account
 					</h1>
 					<p className="text-muted-foreground">
-						Link Discord to receive participant and Group roles in the event
-						server.
+						Link Discord to receive participant and Group roles in
+						the event server.
 					</p>
 				</div>
 
@@ -28,20 +30,26 @@ export default async function DiscordPage() {
 					{member ? (
 						<div className="space-y-4">
 							<div>
-								<h2 className="text-xl font-semibold">Linked</h2>
+								<h2 className="text-xl font-semibold">
+									Linked
+								</h2>
 								<p className="mt-1 text-sm text-muted-foreground">
-									@{member.username} is linked to this HackKit account.
+									@{member.username} is linked to this HackKit
+									account.
 								</p>
 								{member.lastRoleSyncAt ? (
 									<p className="mt-1 text-xs text-muted-foreground">
-										Last role sync: {member.lastRoleSyncAt.toLocaleString()}
+										Last role sync:{" "}
+										{member.lastRoleSyncAt.toLocaleString()}
 									</p>
 								) : null}
 							</div>
-							<form action={async () => {
-								"use server";
-								await syncDiscordMemberRoles();
-							}}>
+							<form
+								action={async () => {
+									"use server";
+									await syncDiscordMemberRoles();
+								}}
+							>
 								<button
 									type="submit"
 									className="rounded-md bg-primary px-4 py-2 text-sm font-medium text-primary-foreground hover:bg-primary/90"
@@ -52,9 +60,12 @@ export default async function DiscordPage() {
 						</div>
 					) : (
 						<div>
-							<h2 className="text-xl font-semibold">Not linked</h2>
+							<h2 className="text-xl font-semibold">
+								Not linked
+							</h2>
 							<p className="mt-1 text-sm text-muted-foreground">
-								Use the verification button in Discord to generate a secure link.
+								Use the verification button in Discord to
+								generate a secure link.
 							</p>
 						</div>
 					)}
diff --git a/packages/plugin-discord/app/discord/verify/page.tsx b/packages/plugin-discord/app/discord/verify/page.tsx
index 1adbcc98..f47954be 100644
--- a/packages/plugin-discord/app/discord/verify/page.tsx
+++ b/packages/plugin-discord/app/discord/verify/page.tsx
@@ -15,14 +15,15 @@ export default async function DiscordVerifyPage({
 	if (!code || Array.isArray(code)) notFound();
 
 	const runtime = await getHackkitRuntime();
+	if (!runtime.hackkit.isPluginEnabled("discord")) notFound();
 	const currentUser = await runtime.getCurrentUser();
 	const [hacker, discord] = await Promise.all([
-		runtime.hackkit.hackers.getHacker(currentUser.authId),
+		runtime.hackkit.hackers.getHacker(currentUser.id),
 		Promise.resolve(runtime.hackkit.plugins.discord as DiscordApi),
 	]);
 	if (!currentUser.isApproved || !hacker) redirect("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/i/approval");
 
-	const existingMember = await discord.getMember(currentUser.authId);
+	const existingMember = await discord.getMember(currentUser.id);
 	if (existingMember) redirect("/discord");
 
 	const verification = await discord.getVerification(code);
@@ -31,9 +32,12 @@ export default async function DiscordVerifyPage({
 		return (
 			<main className="flex min-h-screen items-center justify-center px-6">
 				<div className="max-w-md rounded-lg border bg-card p-6 text-center shadow-sm">
-					<h1 className="text-xl font-semibold">Verification expired</h1>
+					<h1 className="text-xl font-semibold">
+						Verification expired
+					</h1>
 					<p className="mt-2 text-sm text-muted-foreground">
-						Use the Discord verification button again to generate a new link.
+						Use the Discord verification button again to generate a
+						new link.
 					</p>
 				</div>
 			</main>
diff --git a/packages/plugin-discord/package.json b/packages/plugin-discord/package.json
index fb42c8a4..910ae7f1 100644
--- a/packages/plugin-discord/package.json
+++ b/packages/plugin-discord/package.json
@@ -8,7 +8,7 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./src/index.ts",
+      "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./app/discord/page": {
@@ -19,7 +19,12 @@
       "types": "./app/discord/verify/page.tsx",
       "default": "./app/discord/verify/page.tsx"
     },
-    "./app/*": "./app/*"
+    "./app/*": "./app/*",
+    "./actions": {
+      "types": "./dist/actions.d.ts",
+      "import": "./dist/actions.js",
+      "default": "./dist/actions.js"
+    }
   },
   "files": [
     "dist",
@@ -27,8 +32,8 @@
     "app"
   ],
   "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
+    "build": "tsup",
+    "dev": "tsup --watch",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run"
   },
@@ -37,7 +42,8 @@
     "@hackkit/next": "workspace:*",
     "@hackkit/ui": "workspace:*",
     "sonner": "^1.5.0",
-    "zod": "^3.25.67"
+    "zod": "^3.25.67",
+    "@mikro-orm/core": "7.2.1"
   },
   "peerDependencies": {
     "next": ">=14",
@@ -47,9 +53,9 @@
   "devDependencies": {
     "@types/react": "18.3.3",
     "@types/react-dom": "18.3.0",
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/plugin-discord/src/__tests__/discord.test.ts b/packages/plugin-discord/src/__tests__/discord.test.ts
index 2a44eb3e..403efc4a 100644
--- a/packages/plugin-discord/src/__tests__/discord.test.ts
+++ b/packages/plugin-discord/src/__tests__/discord.test.ts
@@ -1,17 +1,17 @@
-import { describe, expect, it } from "vitest";
 import {
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-	type HackKitPlugin,
-} from "@hackkit/core";
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "@hackkit/core/testing";
+import { describe, expect, it } from "vitest";
+
 import {
 	discordPlugin,
 	type DiscordApi,
 	type DiscordRoleSyncInput,
 } from "../index";
 
-function createDiscordHackkit() {
+async function createDiscordHackkit() {
 	const syncInputs: DiscordRoleSyncInput[] = [];
 	const plugin = discordPlugin({
 		guildId: "guild-1",
@@ -19,39 +19,29 @@ function createDiscordHackkit() {
 		participantRole: { id: "participant-role" },
 		roleSyncProvider: {
 			async syncRoles(input) {
+				expect(hackkit.em.isInTransaction()).toBe(false);
 				syncInputs.push(input);
 			},
 		},
 	});
-	const registry = createPluginRegistry([plugin as unknown as HackKitPlugin]);
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	const hackkit = createHackkit({
-		database: db,
-		plugins: [plugin as unknown as HackKitPlugin],
-		clock: now,
-		id,
+	const hackkit = await createTestHackkit({
+		plugins: [plugin],
 		groups: [{ id: "alpha", label: "Alpha", discordRoleId: "alpha-role" }],
 	});
 	return {
 		hackkit,
-		discord: hackkit.plugins.discord as unknown as DiscordApi,
+		discord: hackkit.plugins.discord,
 		syncInputs,
 	};
 }
 
-async function seedApprovedHacker(hackkit: ReturnType<typeof createHackkit>) {
-	await hackkit.users.ensureUser({
+async function seedApprovedHacker(
+	hackkit: TestHackkit<readonly [ReturnType<typeof discordPlugin>]>,
+) {
+	await createTestUser(hackkit, {
 		authId: "hacker-auth",
 		email: "hacker@example.com",
-		firstName: "Hazel",
-		lastName: "Hacker",
+		name: "Hazel Hacker",
 	});
 	await hackkit.userData.completeUserData({
 		authId: "hacker-auth",
@@ -66,7 +56,7 @@ async function seedApprovedHacker(hackkit: ReturnType<typeof createHackkit>) {
 		isEmailable: true,
 	});
 	await hackkit.hackers.registerHacker({
-		authId: "hacker-auth",
+		userId: "hacker-auth",
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "Undergraduate",
@@ -78,7 +68,7 @@ async function seedApprovedHacker(hackkit: ReturnType<typeof createHackkit>) {
 
 describe("discord plugin", () => {
 	it("links a pending verification and syncs participant and group roles", async () => {
-		const { hackkit, discord, syncInputs } = createDiscordHackkit();
+		const { hackkit, discord, syncInputs } = await createDiscordHackkit();
 		await seedApprovedHacker(hackkit);
 
 		const verification = await discord.createVerification({
@@ -114,3 +104,34 @@ describe("discord plugin", () => {
 		});
 	});
 });
+
+it("consumes a verification code once across concurrent requests", async () => {
+	const { hackkit, discord, syncInputs } = await createDiscordHackkit();
+	await seedApprovedHacker(hackkit);
+	await discord.createVerification({
+		code: "race",
+		discordUserId: "discord-race",
+		username: "racer",
+	});
+	const results = await Promise.allSettled(
+		[1, 2].map(() =>
+			hackkit.runtime
+				.createScope()
+				.hackkit.plugins.discord.confirmVerification({
+					authId: "hacker-auth",
+					code: "race",
+				}),
+		),
+	);
+	expect(
+		results.filter((result) => result.status === "fulfilled"),
+	).toHaveLength(1);
+	expect(
+		results.find((result) => result.status === "rejected"),
+	).toMatchObject({ reason: { code: "INVALID_OPERATION" } });
+	expect(syncInputs).toHaveLength(1);
+	expect(await discord.getVerification("race")).toMatchObject({
+		status: "accepted",
+		authId: "hacker-auth",
+	});
+});
diff --git a/packages/plugin-discord/src/actions.ts b/packages/plugin-discord/src/actions.ts
index 99c4264f..4f6e21b3 100644
--- a/packages/plugin-discord/src/actions.ts
+++ b/packages/plugin-discord/src/actions.ts
@@ -7,11 +7,13 @@ export type ConfirmDiscordVerificationInput = {
 };
 
 export function createDiscordActions(runtime: HackkitRuntime) {
-	const discord = runtime.hackkit.plugins.discord as unknown as DiscordApi;
-
 	return {
-		async confirmDiscordVerification(values: ConfirmDiscordVerificationInput) {
+		async confirmDiscordVerification(
+			values: ConfirmDiscordVerificationInput,
+		) {
 			try {
+				const discord = runtime.hackkit.plugins
+					.discord as unknown as DiscordApi;
 				const authId = await runtime.getAuthId();
 				const member = await discord.confirmVerification({
 					authId,
@@ -25,6 +27,8 @@ export function createDiscordActions(runtime: HackkitRuntime) {
 
 		async syncDiscordMemberRoles() {
 			try {
+				const discord = runtime.hackkit.plugins
+					.discord as unknown as DiscordApi;
 				const authId = await runtime.getAuthId();
 				const attempt = await discord.syncMemberRoles({ authId });
 				return actionSuccess(attempt);
diff --git a/packages/plugin-discord/src/api.ts b/packages/plugin-discord/src/api.ts
index f479dcd6..3c60c205 100644
--- a/packages/plugin-discord/src/api.ts
+++ b/packages/plugin-discord/src/api.ts
@@ -1,6 +1,8 @@
+import { wrap } from "@mikro-orm/core";
 import {
 	coreModels,
 	HackKitError,
+	withOperationLock,
 	type AuthId,
 	type HackKitPluginContext,
 	type HackkitGroup,
@@ -27,7 +29,9 @@ export type DiscordRoleSyncInput = {
 };
 
 export type DiscordRoleSyncProvider = {
-	syncRoles(input: DiscordRoleSyncInput): Promise<{ externalId?: string } | void>;
+	syncRoles(
+		input: DiscordRoleSyncInput,
+	): Promise<{ externalId?: string } | void>;
 };
 
 export type DiscordPluginOptions = {
@@ -68,7 +72,8 @@ function addMs(date: Date, ms: number): Date {
 
 function roleRefsEqual(left: DiscordRoleRef, right: DiscordRoleRef): boolean {
 	return Boolean(
-		(left.id && left.id === right.id) || (left.name && left.name === right.name),
+		(left.id && left.id === right.id) ||
+			(left.name && left.name === right.name),
 	);
 }
 
@@ -105,21 +110,27 @@ export function createDiscordApi(
 	context: HackKitPluginContext,
 	options: DiscordPluginOptions,
 ) {
-	const { database } = context;
+	const { em } = context;
 	const ttlMs = options.verificationTtlMs ?? defaultVerificationTtlMs;
 
 	async function getMember(authId: AuthId): Promise<DiscordMember | null> {
-		return database.findOne(discordModels.member, { authId });
+		const member = await em.findOne(discordModels.member, { authId });
+		return member ? wrap(member).toObject() : null;
 	}
 
-	async function buildRoleSyncPlan(authId: AuthId): Promise<DiscordRoleSyncPlan> {
+	async function buildRoleSyncPlan(
+		authId: AuthId,
+	): Promise<DiscordRoleSyncPlan> {
 		const [member, user, hacker] = await Promise.all([
 			getMember(authId),
-			database.findOne(coreModels.user, { authId }),
-			database.findOne(coreModels.hacker, { authId }),
+			em.findOne(coreModels.user, { id: authId }),
+			em.findOne(coreModels.hacker, { userId: authId }),
 		]);
 		if (!member) {
-			throw new HackKitError("NOT_FOUND", "Discord account is not linked.");
+			throw new HackKitError(
+				"NOT_FOUND",
+				"Discord account is not linked.",
+			);
 		}
 		if (!user) {
 			throw new HackKitError("NOT_FOUND", "User not found.");
@@ -127,7 +138,8 @@ export function createDiscordApi(
 
 		const roleRefs: DiscordRoleRef[] = [];
 		appendRole(roleRefs, options.participantRole);
-		if (user.roleId) appendRole(roleRefs, options.roleMappings?.[user.roleId]);
+		if (user.roleId)
+			appendRole(roleRefs, options.roleMappings?.[user.roleId]);
 		const assignedGroup = context.groups.find(
 			(candidate) => candidate.id === hacker?.group,
 		);
@@ -136,8 +148,10 @@ export function createDiscordApi(
 		return {
 			member,
 			roleIds: roleRefs.flatMap((role) => (role.id ? [role.id] : [])),
-			roleNames: roleRefs.flatMap((role) => (role.name ? [role.name] : [])),
-			nickname: `${user.firstName} ${user.lastName}`.trim(),
+			roleNames: roleRefs.flatMap((role) =>
+				role.name ? [role.name] : [],
+			),
+			nickname: user.name,
 		};
 	}
 
@@ -146,15 +160,19 @@ export function createDiscordApi(
 		status: DiscordRoleSyncAttempt["status"];
 		error?: string;
 	}): Promise<DiscordRoleSyncAttempt> {
-		return database.insert(discordModels.roleSyncAttempt, {
-			authId: input.plan.member.authId,
-			discordUserId: input.plan.member.discordUserId,
-			guildId: input.plan.member.guildId,
-			status: input.status,
-			roleIds: input.plan.roleIds,
-			roleNames: input.plan.roleNames,
-			error: input.error,
-		});
+		{
+			const created = em.create(discordModels.roleSyncAttempt, {
+				authId: input.plan.member.authId,
+				discordUserId: input.plan.member.discordUserId,
+				guildId: input.plan.member.guildId,
+				status: input.status,
+				roleIds: input.plan.roleIds,
+				roleNames: input.plan.roleNames,
+				error: input.error,
+			});
+			await em.flush();
+			return wrap(created).toObject();
+		}
 	}
 
 	return {
@@ -163,10 +181,13 @@ export function createDiscordApi(
 		): Promise<DiscordVerification & { verificationUrl: string }> {
 			const guildId = input.guildId ?? options.guildId;
 			if (guildId !== options.guildId) {
-				throw new HackKitError("FORBIDDEN", "Discord guild is not configured.");
+				throw new HackKitError(
+					"FORBIDDEN",
+					"Discord guild is not configured.",
+				);
 			}
 			const now = new Date();
-			const verification = await database.insert(discordModels.verification, {
+			const verification = em.create(discordModels.verification, {
 				code: input.code,
 				discordUserId: input.discordUserId,
 				guildId,
@@ -176,14 +197,23 @@ export function createDiscordApi(
 				expiresAt: addMs(now, ttlMs),
 				createdAt: now,
 			});
+			await em.flush();
 			return {
-				...verification,
-				verificationUrl: toVerificationUrl(options.verificationBaseUrl, input.code),
+				...wrap(verification).toObject(),
+				verificationUrl: toVerificationUrl(
+					options.verificationBaseUrl,
+					input.code,
+				),
 			};
 		},
 
-		async getVerification(code: string): Promise<DiscordVerification | null> {
-			return database.findOne(discordModels.verification, { code });
+		async getVerification(
+			code: string,
+		): Promise<DiscordVerification | null> {
+			const verification = await em.findOne(discordModels.verification, {
+				code,
+			});
+			return verification ? wrap(verification).toObject() : null;
 		},
 
 		getMember,
@@ -191,83 +221,87 @@ export function createDiscordApi(
 		async confirmVerification(
 			input: ConfirmDiscordVerificationInput,
 		): Promise<DiscordMember> {
-			const verification = await database.findOne(discordModels.verification, {
-				code: input.code,
-			});
-			if (!verification) {
-				throw new HackKitError("NOT_FOUND", "Discord verification was not found.");
-			}
-			if (verification.status !== "pending") {
-				throw new HackKitError(
-					"INVALID_OPERATION",
-					"Discord verification is no longer pending.",
-				);
-			}
-			const now = new Date();
-			if (isExpired(verification, now)) {
-				await database.update(
-					discordModels.verification,
-					{ code: input.code },
-					{ status: "expired" },
-				);
-				throw new HackKitError("INVALID_OPERATION", "Discord verification expired.");
-			}
-			const [user, hacker] = await Promise.all([
-				database.findOne(coreModels.user, { authId: input.authId }),
-				database.findOne(coreModels.hacker, { authId: input.authId }),
-			]);
-			if (!user) throw new HackKitError("NOT_FOUND", "User not found.");
-			if (!user.isApproved || !hacker) {
-				throw new HackKitError(
-					"FORBIDDEN",
-					"Only approved Hackers can link Discord.",
-				);
-			}
-
-			const existingDiscordUser = await database.findOne(discordModels.member, {
-				discordUserId: verification.discordUserId,
-			});
-			if (
-				existingDiscordUser &&
-				existingDiscordUser.authId !== input.authId
-			) {
-				await database.update(
-					discordModels.verification,
-					{ code: input.code },
-					{ status: "rejected" },
-				);
-				throw new HackKitError(
-					"CONFLICT",
-					"Discord account is already linked to another user.",
-				);
-			}
-
-			const existing = await getMember(input.authId);
-			const memberValue = {
-				authId: input.authId,
-				discordUserId: verification.discordUserId,
-				guildId: verification.guildId,
-				username: verification.username,
-				avatarHash: verification.avatarHash,
-				verifiedAt: existing?.verifiedAt ?? now,
-				updatedAt: now,
-			};
-			const member = existing
-				? (
-						await database.update(
-							discordModels.member,
-							{ authId: input.authId },
-							memberValue,
-						)
-					)[0] ?? existing
-				: await database.insert(discordModels.member, memberValue);
-			await database.update(
-				discordModels.verification,
-				{ code: input.code },
-				{ status: "accepted", authId: input.authId, acceptedAt: now },
+			const result = await withOperationLock(
+				em,
+				"discord.verification",
+				async () => {
+					const verification = await em.findOne(
+						discordModels.verification,
+						{ code: input.code },
+					);
+					if (!verification)
+						throw new HackKitError(
+							"NOT_FOUND",
+							"Discord verification was not found.",
+						);
+					if (verification.status !== "pending")
+						throw new HackKitError(
+							"INVALID_OPERATION",
+							"Discord verification is no longer pending.",
+						);
+					const now = new Date();
+					if (isExpired(verification, now)) {
+						verification.status = "expired";
+						await em.flush();
+						return {
+							error: new HackKitError(
+								"INVALID_OPERATION",
+								"Discord verification expired.",
+							),
+						};
+					}
+					const [user, hacker] = await Promise.all([
+						em.findOne(coreModels.user, { id: input.authId }),
+						em.findOne(coreModels.hacker, { userId: input.authId }),
+					]);
+					if (!user)
+						throw new HackKitError("NOT_FOUND", "User not found.");
+					if (!user.isApproved || !hacker)
+						throw new HackKitError(
+							"FORBIDDEN",
+							"Only approved Hackers can link Discord.",
+						);
+					const linked = await em.findOne(discordModels.member, {
+						discordUserId: verification.discordUserId,
+					});
+					if (linked && linked.authId !== input.authId) {
+						verification.status = "rejected";
+						await em.flush();
+						return {
+							error: new HackKitError(
+								"CONFLICT",
+								"Discord account is already linked to another user.",
+							),
+						};
+					}
+					const existing = await em.findOne(discordModels.member, {
+						authId: input.authId,
+					});
+					const values = {
+						authId: input.authId,
+						discordUserId: verification.discordUserId,
+						guildId: verification.guildId,
+						username: verification.username,
+						avatarHash: verification.avatarHash,
+						verifiedAt: existing?.verifiedAt ?? now,
+						updatedAt: now,
+					};
+					const member = existing
+						? em.assign(existing, values)
+						: em.create(discordModels.member, values);
+					em.assign(verification, {
+						status: "accepted",
+						authId: input.authId,
+						acceptedAt: now,
+					});
+					await em.flush();
+					return { member: wrap(member).toObject() };
+				},
 			);
+			if (result.error) throw result.error;
+			// The link and consumed code have committed before contacting Discord.
 			await this.syncMemberRoles({ authId: input.authId });
-			return member;
+			return result.member;
 		},
 
 		async buildRoleSyncPlan(input: {
@@ -292,17 +326,30 @@ export function createDiscordApi(
 					roleNames: plan.roleNames,
 					nickname: plan.nickname,
 				});
-				await database.update(
-					discordModels.member,
-					{ authId: plan.member.authId },
-					{ lastRoleSyncAt: new Date(), updatedAt: new Date() },
-				);
+				{
+					const updatedRows = await em.find(discordModels.member, {
+						authId: plan.member.authId,
+					});
+					for (const row of updatedRows)
+						em.assign(
+							row,
+							{
+								lastRoleSyncAt: new Date(),
+								updatedAt: new Date(),
+							},
+							{ ignoreUndefined: true },
+						);
+					await em.flush();
+				}
 				return recordRoleSyncAttempt({ plan, status: "synced" });
 			} catch (error) {
 				return recordRoleSyncAttempt({
 					plan,
 					status: "failed",
-					error: error instanceof Error ? error.message : "Role sync failed.",
+					error:
+						error instanceof Error
+							? error.message
+							: "Role sync failed.",
 				});
 			}
 		},
diff --git a/packages/plugin-discord/src/components/discord-verify-form.tsx b/packages/plugin-discord/src/components/discord-verify-form.tsx
index 9df89c77..a100787a 100644
--- a/packages/plugin-discord/src/components/discord-verify-form.tsx
+++ b/packages/plugin-discord/src/components/discord-verify-form.tsx
@@ -43,13 +43,15 @@ export function DiscordVerifyForm({
 			className="space-y-4 rounded-lg border bg-card p-6 shadow-sm"
 		>
 			<div className="space-y-2">
-				<p className="text-sm font-medium text-primary">Discord verification</p>
+				<p className="text-sm font-medium text-primary">
+					Discord verification
+				</p>
 				<h1 className="text-2xl font-bold tracking-tight">
 					Link @{username}?
 				</h1>
 				<p className="text-sm text-muted-foreground">
-					This links your Discord account to your approved Hacker profile and
-					syncs your participant, role, and Group roles.
+					This links your Discord account to your approved Hacker
+					profile and syncs your participant, role, and Group roles.
 				</p>
 			</div>
 			<Button type="submit" disabled={pending}>
diff --git a/packages/plugin-discord/src/index.ts b/packages/plugin-discord/src/index.ts
index 74d2039c..69170cbe 100644
--- a/packages/plugin-discord/src/index.ts
+++ b/packages/plugin-discord/src/index.ts
@@ -1,24 +1,25 @@
 import type { HackKitPlugin } from "@hackkit/core";
-import {
-	createDiscordApi,
-	type DiscordPluginOptions,
-} from "./api";
+import { createDiscordApi, type DiscordPluginOptions } from "./api";
 import { discordModels } from "./models";
 
 export function discordPlugin(
-	options: DiscordPluginOptions,
+	options: DiscordPluginOptions | (() => DiscordPluginOptions),
 ): HackKitPlugin<"discord", ReturnType<typeof createDiscordApi>> {
+	let resolvedOptions: DiscordPluginOptions | undefined;
 	return {
 		id: "discord",
 		packageName: "@hackkit/plugin-discord",
 		actionFactory: "createDiscordActions",
 		actionNames: ["confirmDiscordVerification", "syncDiscordMemberRoles"],
-		models: discordModels,
-		setup: (context) => createDiscordApi(context, options),
+		entities: Object.values(discordModels),
+		setup: (context) => {
+			resolvedOptions ??=
+				typeof options === "function" ? options() : options;
+			return createDiscordApi(context, resolvedOptions);
+		},
 	};
 }
 
-export { createDiscordActions } from "./actions";
 export { createDiscordApi } from "./api";
 export { discordModels } from "./models";
 export { createDiscordHttpRoleSyncProvider } from "./providers";
diff --git a/packages/plugin-discord/src/models.ts b/packages/plugin-discord/src/models.ts
index 2f31e1ad..19aa99b9 100644
--- a/packages/plugin-discord/src/models.ts
+++ b/packages/plugin-discord/src/models.ts
@@ -1,66 +1,111 @@
-import { defineModel, field } from "@hackkit/core";
+import {
+	defineEntity,
+	p,
+	type EntityDTO,
+	type InferEntity,
+} from "@mikro-orm/core";
+import { HackKitUser } from "@hackkit/core";
+
+export const DiscordVerification = defineEntity({
+	name: "DiscordVerification",
+	tableName: "discord_verification",
+	properties: {
+		code: p.string().primary(),
+		discordUserId: p.string(),
+		guildId: p.string(),
+		username: p.string(),
+		avatarHash: p.string().nullable(),
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.nullable()
+				.deleteRule("set null"),
+		status: p
+			.enum(["pending", "accepted", "rejected", "expired"] as const)
+			.default("pending"),
+		expiresAt: p.datetime(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+		acceptedAt: p.datetime().nullable(),
+	},
+	indexes: [
+		{ properties: ["discordUserId"] },
+		{ properties: ["guildId"] },
+		{ properties: ["authId"] },
+		{ properties: ["status"] },
+		{ properties: ["createdAt"] },
+	],
+});
+
+export const DiscordMember = defineEntity({
+	name: "DiscordMember",
+	tableName: "discord_member",
+	properties: {
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.primary()
+				.deleteRule("cascade"),
+		discordUserId: p.string().unique(),
+		guildId: p.string(),
+		username: p.string(),
+		avatarHash: p.string().nullable(),
+		verifiedAt: p.datetime().onCreate(() => new Date()),
+		updatedAt: p
+			.datetime()
+			.onCreate(() => new Date())
+			.onUpdate(() => new Date()),
+		lastRoleSyncAt: p.datetime().nullable(),
+	},
+	indexes: [
+		{ properties: ["discordUserId"] },
+		{ properties: ["guildId"] },
+		{ properties: ["updatedAt"] },
+	],
+});
+
+export const DiscordRoleSyncAttempt = defineEntity({
+	name: "DiscordRoleSyncAttempt",
+	tableName: "discord_role_sync_attempt",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
+				.deleteRule("cascade"),
+		discordUserId: p.string(),
+		guildId: p.string(),
+		status: p.enum(["synced", "failed", "skipped"] as const),
+		roleIds: p.json<string[]>().default([]),
+		roleNames: p.json<string[]>().default([]),
+		error: p.text().nullable(),
+		createdAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["authId"] },
+		{ properties: ["discordUserId"] },
+		{ properties: ["status"] },
+		{ properties: ["createdAt"] },
+	],
+});
 
 export const discordModels = {
-	verification: defineModel("discord.verification", {
-		fields: {
-			code: field.string().primaryKey(),
-			discordUserId: field.string(),
-			guildId: field.string(),
-			username: field.string(),
-			avatarHash: field.string().optional(),
-			authId: field
-				.string()
-				.optional()
-				.references("core.user", "authId", { onDelete: "setNull" }),
-			status: field
-				.enum(["pending", "accepted", "rejected", "expired"] as const)
-				.default("pending"),
-			expiresAt: field.date(),
-			createdAt: field.date().defaultNow(),
-			acceptedAt: field.date().optional(),
-		},
-		indexes: [["discordUserId"], ["guildId"], ["authId"], ["status"], ["createdAt"]],
-	}),
-	member: defineModel("discord.member", {
-		fields: {
-			authId: field
-				.string()
-				.primaryKey()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			discordUserId: field.string().unique(),
-			guildId: field.string(),
-			username: field.string(),
-			avatarHash: field.string().optional(),
-			verifiedAt: field.date().defaultNow(),
-			updatedAt: field.date().defaultNow(),
-			lastRoleSyncAt: field.date().optional(),
-		},
-		indexes: [["discordUserId"], ["guildId"], ["updatedAt"]],
-	}),
-	roleSyncAttempt: defineModel("discord.roleSyncAttempt", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			authId: field
-				.string()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			discordUserId: field.string(),
-			guildId: field.string(),
-			status: field.enum(["synced", "failed", "skipped"] as const),
-			roleIds: field.json<string[]>().default([]),
-			roleNames: field.json<string[]>().default([]),
-			error: field.string().optional(),
-			createdAt: field.date().defaultNow(),
-		},
-		indexes: [["authId"], ["discordUserId"], ["status"], ["createdAt"]],
-	}),
+	verification: DiscordVerification,
+	member: DiscordMember,
+	roleSyncAttempt: DiscordRoleSyncAttempt,
 } as const;
-
-export type DiscordVerification = import("@hackkit/core").InferSelect<
-	typeof discordModels.verification
->;
-export type DiscordMember = import("@hackkit/core").InferSelect<
-	typeof discordModels.member
+export type DiscordVerification = EntityDTO<
+	InferEntity<typeof DiscordVerification>
 >;
-export type DiscordRoleSyncAttempt = import("@hackkit/core").InferSelect<
-	typeof discordModels.roleSyncAttempt
+export type DiscordMember = EntityDTO<InferEntity<typeof DiscordMember>>;
+export type DiscordRoleSyncAttempt = EntityDTO<
+	InferEntity<typeof DiscordRoleSyncAttempt>
 >;
diff --git a/packages/plugin-discord/src/providers.ts b/packages/plugin-discord/src/providers.ts
index 45162ea1..1c23ccf1 100644
--- a/packages/plugin-discord/src/providers.ts
+++ b/packages/plugin-discord/src/providers.ts
@@ -28,10 +28,17 @@ export function createDiscordHttpRoleSyncProvider(
 				body: JSON.stringify(input),
 			});
 			if (!response.ok) {
-				throw new Error(`Discord role sync failed with ${response.status}.`);
+				throw new Error(
+					`Discord role sync failed with ${response.status}.`,
+				);
 			}
 			const body = await response.json().catch(() => undefined);
-			if (body && typeof body === "object" && "success" in body && !body.success) {
+			if (
+				body &&
+				typeof body === "object" &&
+				"success" in body &&
+				!body.success
+			) {
 				throw new Error("Discord role sync provider returned failure.");
 			}
 			return body && typeof body === "object" && "externalId" in body
diff --git a/packages/plugin-discord/tsconfig.json b/packages/plugin-discord/tsconfig.json
index 796f004c..a97b9588 100644
--- a/packages/plugin-discord/tsconfig.json
+++ b/packages/plugin-discord/tsconfig.json
@@ -6,7 +6,7 @@
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false
+    "noEmit": true
   },
   "include": ["src/**/*.ts", "src/**/*.tsx"],
   "exclude": ["dist", "node_modules", "src/**/__tests__/**"]
diff --git a/packages/plugin-discord/tsup.config.ts b/packages/plugin-discord/tsup.config.ts
new file mode 100644
index 00000000..72c19c95
--- /dev/null
+++ b/packages/plugin-discord/tsup.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from "tsup";
+
+export default defineConfig({
+	entry: ["src/index.ts", "src/actions.ts"],
+	format: ["cjs", "esm"],
+	dts: true,
+});
diff --git a/packages/plugin-notifications-email/package.json b/packages/plugin-notifications-email/package.json
index 3ac2d568..e03f7635 100644
--- a/packages/plugin-notifications-email/package.json
+++ b/packages/plugin-notifications-email/package.json
@@ -8,7 +8,8 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./src/index.ts"
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
     }
   },
   "files": [
@@ -25,9 +26,10 @@
     "@hackkit/core": "workspace:*"
   },
   "devDependencies": {
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "@types/node": "22.18.6",
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/plugin-notifications-email/src/__tests__/email-notifications.test.ts b/packages/plugin-notifications-email/src/__tests__/email-notifications.test.ts
index a18a45eb..cc7b0ae4 100644
--- a/packages/plugin-notifications-email/src/__tests__/email-notifications.test.ts
+++ b/packages/plugin-notifications-email/src/__tests__/email-notifications.test.ts
@@ -1,18 +1,17 @@
-import { describe, expect, it } from "vitest";
 import {
-	CoreNotificationKind,
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-	type HackKitPlugin,
-} from "@hackkit/core";
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "@hackkit/core/testing";
+import { describe, expect, it } from "vitest";
+import { CoreNotificationKind } from "@hackkit/core";
 import {
 	emailNotificationsPlugin,
 	type EmailMessage,
 	type EmailNotificationsApi,
 } from "../index";
 
-function createTestHackkit() {
+async function createEmailHackkit() {
 	const sent: EmailMessage[] = [];
 	const plugin = emailNotificationsPlugin({
 		from: "HackKit <hello@example.com>",
@@ -26,37 +25,24 @@ function createTestHackkit() {
 			},
 		},
 	});
-	const registry = createPluginRegistry([plugin as unknown as HackKitPlugin]);
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	const hackkit = createHackkit({
-		database: db,
-		plugins: [plugin as unknown as HackKitPlugin],
-		clock: now,
-		id,
+	const hackkit = await createTestHackkit({
+		plugins: [plugin],
 	});
 	return {
 		hackkit,
-		notificationsEmail:
-			hackkit.plugins.notificationsEmail as unknown as EmailNotificationsApi,
+		notificationsEmail: hackkit.plugins.notificationsEmail,
 		sent,
 	};
 }
 
 describe("email notifications plugin", () => {
 	it("delivers pending intents to resolved user email addresses", async () => {
-		const { hackkit, notificationsEmail, sent } = createTestHackkit();
-		await hackkit.users.ensureUser({
+		const { hackkit, notificationsEmail, sent } =
+			await createEmailHackkit();
+		await createTestUser(hackkit, {
 			authId: "hacker-auth",
 			email: "hacker@example.com",
-			firstName: "Hack",
-			lastName: "Er",
+			name: "Hack Er",
 		});
 		const intent = await hackkit.notifications.queueIntent({
 			kind: CoreNotificationKind.UserApproved,
@@ -84,3 +70,23 @@ describe("email notifications plugin", () => {
 		]);
 	});
 });
+
+it("lazily resolves provider options once and skips them while disabled", async () => {
+	let resolutions = 0;
+	const plugin = emailNotificationsPlugin(() => {
+		resolutions++;
+		return {
+			from: "HackKit <test@example.com>",
+			baseUrl: "http://localhost:3000",
+		};
+	});
+	const disabled = await createTestHackkit({
+		plugins: [{ ...plugin, enabled: false }],
+	});
+	expect(disabled.isPluginEnabled("notificationsEmail")).toBe(false);
+	expect(resolutions).toBe(0);
+	const enabled = await createTestHackkit({ plugins: [plugin] });
+	enabled.runtime.createScope();
+	expect(enabled.isPluginEnabled("notificationsEmail")).toBe(true);
+	expect(resolutions).toBe(1);
+});
diff --git a/packages/plugin-notifications-email/src/api.ts b/packages/plugin-notifications-email/src/api.ts
index aa5e7134..b0433070 100644
--- a/packages/plugin-notifications-email/src/api.ts
+++ b/packages/plugin-notifications-email/src/api.ts
@@ -1,4 +1,4 @@
-import { coreModels, type HackKitPluginContext } from "@hackkit/core";
+import { type HackKitPluginContext } from "@hackkit/core";
 import type {
 	NotificationChannel,
 	NotificationDeliveryResult,
@@ -51,13 +51,15 @@ async function defaultRecipientResolver(
 ): Promise<EmailRecipient | null> {
 	const authId =
 		intent.recipientAuthId ??
-		(typeof intent.payload.authId === "string" ? intent.payload.authId : undefined);
+		(typeof intent.payload.authId === "string"
+			? intent.payload.authId
+			: undefined);
 	if (!authId) return null;
-	const user = await context.database.findOne(coreModels.user, { authId });
+	const user = await context.getUser(authId);
 	if (!user) return null;
 	return {
 		email: user.email,
-		name: `${user.firstName} ${user.lastName}`.trim(),
+		name: user.name,
 	};
 }
 
@@ -71,7 +73,8 @@ export function createEmailNotificationsApi(
 	options: EmailNotificationsPluginOptions,
 ) {
 	const templates = mergeEmailTemplates(options.templates);
-	const resolveRecipient = options.resolveRecipient ?? defaultRecipientResolver;
+	const resolveRecipient =
+		options.resolveRecipient ?? defaultRecipientResolver;
 
 	const channel: NotificationChannel = {
 		id: "email",
diff --git a/packages/plugin-notifications-email/src/index.ts b/packages/plugin-notifications-email/src/index.ts
index d3e153b0..74ced4e8 100644
--- a/packages/plugin-notifications-email/src/index.ts
+++ b/packages/plugin-notifications-email/src/index.ts
@@ -5,12 +5,22 @@ import {
 } from "./api";
 
 export function emailNotificationsPlugin(
-	options: EmailNotificationsPluginOptions,
-): HackKitPlugin<"notificationsEmail", ReturnType<typeof createEmailNotificationsApi>> {
+	options:
+		| EmailNotificationsPluginOptions
+		| (() => EmailNotificationsPluginOptions),
+): HackKitPlugin<
+	"notificationsEmail",
+	ReturnType<typeof createEmailNotificationsApi>
+> {
+	let resolvedOptions: EmailNotificationsPluginOptions | undefined;
 	return {
 		id: "notificationsEmail",
 		packageName: "@hackkit/plugin-notifications-email",
-		setup: (context) => createEmailNotificationsApi(context, options),
+		setup: (context) => {
+			resolvedOptions ??=
+				typeof options === "function" ? options() : options;
+			return createEmailNotificationsApi(context, resolvedOptions);
+		},
 	};
 }
 
diff --git a/packages/plugin-notifications-email/src/providers.ts b/packages/plugin-notifications-email/src/providers.ts
index df3f116f..30d5377f 100644
--- a/packages/plugin-notifications-email/src/providers.ts
+++ b/packages/plugin-notifications-email/src/providers.ts
@@ -41,14 +41,19 @@ export function createResendEmailProvider(
 					}),
 				},
 			);
-			const body = parseResendResponse(await response.json().catch(() => ({})));
+			const body = parseResendResponse(
+				await response.json().catch(() => ({})),
+			);
 			if (!response.ok) {
 				throw new Error(
 					body.error?.message ??
 						`Resend email request failed with ${response.status}.`,
 				);
 			}
-			return { id: body.id, metadata: { providerStatus: response.status } };
+			return {
+				id: body.id,
+				metadata: { providerStatus: response.status },
+			};
 		},
 	};
 }
@@ -112,7 +117,11 @@ class SmtpClient {
 	static connect(options: SmtpEmailProviderOptions): Promise<SmtpClient> {
 		const port = options.port ?? (options.secure ? 465 : 587);
 		const socket = options.secure
-			? tls.connect({ host: options.host, port, servername: options.host })
+			? tls.connect({
+					host: options.host,
+					port,
+					servername: options.host,
+				})
 			: net.connect({ host: options.host, port });
 		return new Promise((resolve, reject) => {
 			socket.once("error", reject);
@@ -149,7 +158,10 @@ class SmtpClient {
 		});
 	}
 
-	async command(command: string, expected: readonly number[]): Promise<string> {
+	async command(
+		command: string,
+		expected: readonly number[],
+	): Promise<string> {
 		this.socket.write(`${command}\r\n`);
 		const response = await this.readResponse();
 		const code = Number(response.slice(0, 3));
@@ -166,7 +178,9 @@ class SmtpClient {
 		});
 		return new Promise((resolve, reject) => {
 			secureSocket.once("error", reject);
-			secureSocket.once("secureConnect", () => resolve(new SmtpClient(secureSocket)));
+			secureSocket.once("secureConnect", () =>
+				resolve(new SmtpClient(secureSocket)),
+			);
 		});
 	}
 }
@@ -191,8 +205,14 @@ export function createSmtpEmailProvider(
 				await client.command(encodeBase64(options.username), [334]);
 				await client.command(encodeBase64(options.password), [235]);
 			}
-			await client.command(`MAIL FROM:<${normalizeAddress(message.from)}>`, [250]);
-			await client.command(`RCPT TO:<${normalizeAddress(message.to)}>`, [250, 251]);
+			await client.command(
+				`MAIL FROM:<${normalizeAddress(message.from)}>`,
+				[250],
+			);
+			await client.command(
+				`RCPT TO:<${normalizeAddress(message.to)}>`,
+				[250, 251],
+			);
 			await client.command("DATA", [354]);
 			await client.command(`${buildSmtpMessage(message)}\r\n.`, [250]);
 			await client.command("QUIT", [221]);
diff --git a/packages/plugin-notifications-email/src/templates.ts b/packages/plugin-notifications-email/src/templates.ts
index 76ce2464..37da373d 100644
--- a/packages/plugin-notifications-email/src/templates.ts
+++ b/packages/plugin-notifications-email/src/templates.ts
@@ -25,7 +25,10 @@ export type EmailTemplateMap = Partial<
 	Record<NotificationKind, EmailTemplateRenderer>
 >;
 
-function getString(payload: Record<string, unknown>, key: string): string | undefined {
+function getString(
+	payload: Record<string, unknown>,
+	key: string,
+): string | undefined {
 	const value = payload[key];
 	return typeof value === "string" ? value : undefined;
 }
@@ -50,7 +53,9 @@ export const defaultEmailTemplates: EmailTemplateMap = {
 	[CoreNotificationKind.RsvpWaitlisted]: ({ appName, payload }) => {
 		const position = payload.position;
 		const positionText =
-			typeof position === "number" ? ` You are currently #${position} on the waitlist.` : "";
+			typeof position === "number"
+				? ` You are currently #${position} on the waitlist.`
+				: "";
 		return {
 			subject: `You're on the ${appName} waitlist`,
 			text: `You have been added to the ${appName} RSVP waitlist.${positionText}`,
diff --git a/packages/plugin-notifications-email/tsconfig.json b/packages/plugin-notifications-email/tsconfig.json
index 4fd29383..52156cca 100644
--- a/packages/plugin-notifications-email/tsconfig.json
+++ b/packages/plugin-notifications-email/tsconfig.json
@@ -2,14 +2,14 @@
   "extends": "../tsconfig/base.json",
   "compilerOptions": {
     "target": "ES2022",
-    "module": "ES2022",
+    "module": "ESNext",
     "moduleResolution": "Bundler",
     "rootDir": "src",
     "outDir": "dist",
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false,
+    "noEmit": true,
     "lib": ["ES2022", "DOM"]
   },
   "include": ["src/**/*.ts"],
diff --git a/packages/plugin-teams/app/invites/page.tsx b/packages/plugin-teams/app/invites/page.tsx
index 4ed50162..d8e80271 100644
--- a/packages/plugin-teams/app/invites/page.tsx
+++ b/packages/plugin-teams/app/invites/page.tsx
@@ -1,5 +1,5 @@
 import { getHackkitRuntime } from "@hackkit/next";
-import { redirect } from "next/navigation";
+import { notFound, redirect } from "next/navigation";
 import type { TeamsApi } from "../../src/api";
 import { respondToInvite } from "@/app/hackkit-plugin-actions";
 import { TeamInvites } from "../../src/components/team-invites";
@@ -8,11 +8,12 @@ export const dynamic = "force-dynamic";
 
 export default async function InvitesPage() {
 	const runtime = await getHackkitRuntime();
+	if (!runtime.hackkit.isPluginEnabled("teams")) notFound();
 	const teams = runtime.hackkit.plugins.teams as TeamsApi;
 	const currentUser = await runtime.getCurrentUser();
 	const [hacker, invites] = await Promise.all([
-		runtime.hackkit.hackers.getHacker(currentUser.authId),
-		teams.listPendingInvites(currentUser.authId),
+		runtime.hackkit.hackers.getHacker(currentUser.id),
+		teams.listPendingInvites(currentUser.id),
 	]);
 
 	if (!hacker && invites.length === 0) {
@@ -24,13 +25,18 @@ export default async function InvitesPage() {
 			<div className="mx-auto flex max-w-3xl flex-col gap-6">
 				<div className="space-y-2">
 					<p className="text-sm font-medium text-primary">Teams</p>
-					<h1 className="text-3xl font-bold tracking-tight">Team invites</h1>
+					<h1 className="text-3xl font-bold tracking-tight">
+						Team invites
+					</h1>
 					<p className="text-muted-foreground">
 						Review and respond to pending team invitations.
 					</p>
 				</div>
 
-				<TeamInvites invites={invites} respondToInvite={respondToInvite} />
+				<TeamInvites
+					invites={invites}
+					respondToInvite={respondToInvite}
+				/>
 			</div>
 		</main>
 	);
diff --git a/packages/plugin-teams/app/teams/page.tsx b/packages/plugin-teams/app/teams/page.tsx
index 1a229a79..32419932 100644
--- a/packages/plugin-teams/app/teams/page.tsx
+++ b/packages/plugin-teams/app/teams/page.tsx
@@ -1,5 +1,5 @@
 import { getHackkitRuntime } from "@hackkit/next";
-import { redirect } from "next/navigation";
+import { notFound, redirect } from "next/navigation";
 import type { TeamsApi } from "../../src/api";
 import {
 	createTeam,
@@ -14,19 +14,20 @@ export const dynamic = "force-dynamic";
 
 export default async function TeamsPage() {
 	const runtime = await getHackkitRuntime();
+	if (!runtime.hackkit.isPluginEnabled("teams")) notFound();
 	const teams = runtime.hackkit.plugins.teams as TeamsApi;
 	const currentUser = await runtime.getCurrentUser();
-	const hacker = await runtime.hackkit.hackers.getHacker(currentUser.authId);
+	const hacker = await runtime.hackkit.hackers.getHacker(currentUser.id);
 
 	if (!hacker) {
 		redirect("/register");
 	}
 
-	const team = await teams.getTeamForAuthId(currentUser.authId);
+	const team = await teams.getTeamForAuthId(currentUser.id);
 	const teamInvites =
-		team && team.ownerAuthId === currentUser.authId
+		team && team.ownerAuthId === currentUser.id
 			? await teams.listTeamInvites({
-					actorAuthId: currentUser.authId,
+					actorAuthId: currentUser.id,
 					teamId: team.id,
 				})
 			: [];
@@ -36,7 +37,9 @@ export default async function TeamsPage() {
 			<div className="mx-auto flex max-w-3xl flex-col gap-6">
 				<div className="space-y-2">
 					<p className="text-sm font-medium text-primary">Teams</p>
-					<h1 className="text-3xl font-bold tracking-tight">Your team</h1>
+					<h1 className="text-3xl font-bold tracking-tight">
+						Your team
+					</h1>
 					<p className="text-muted-foreground">
 						Create or manage your hackathon competition team.
 					</p>
diff --git a/packages/plugin-teams/package.json b/packages/plugin-teams/package.json
index 34c424aa..a605dee5 100644
--- a/packages/plugin-teams/package.json
+++ b/packages/plugin-teams/package.json
@@ -8,7 +8,7 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./src/index.ts",
+      "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
     "./app/teams/page": {
@@ -19,7 +19,12 @@
       "types": "./app/invites/page.tsx",
       "default": "./app/invites/page.tsx"
     },
-    "./app/*": "./app/*"
+    "./app/*": "./app/*",
+    "./actions": {
+      "types": "./dist/actions.d.ts",
+      "import": "./dist/actions.js",
+      "default": "./dist/actions.js"
+    }
   },
   "files": [
     "dist",
@@ -27,8 +32,8 @@
     "app"
   ],
   "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
+    "build": "tsup",
+    "dev": "tsup --watch",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run"
   },
@@ -37,7 +42,8 @@
     "@hackkit/next": "workspace:*",
     "@hackkit/ui": "workspace:*",
     "sonner": "^1.5.0",
-    "zod": "^3.25.67"
+    "zod": "^3.25.67",
+    "@mikro-orm/core": "7.2.1"
   },
   "peerDependencies": {
     "next": ">=14",
@@ -47,9 +53,9 @@
   "devDependencies": {
     "@types/react": "18.3.3",
     "@types/react-dom": "18.3.0",
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3",
-    "vitest": "^3.2.4"
+    "typescript": "5.9.3",
+    "vitest": "^3.2.4",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/plugin-teams/src/__tests__/teams.test.ts b/packages/plugin-teams/src/__tests__/teams.test.ts
index 98425eed..52675a87 100644
--- a/packages/plugin-teams/src/__tests__/teams.test.ts
+++ b/packages/plugin-teams/src/__tests__/teams.test.ts
@@ -1,43 +1,31 @@
-import { describe, expect, it } from "vitest";
+import { createTeamsActions } from "../actions";
 import {
-	createHackkit,
-	createInMemoryDatabaseAdapterFromStorage,
-	createPluginRegistry,
-	type HackKitPlugin,
-} from "@hackkit/core";
-import type { TeamsApi } from "../api";
+	createTestHackkit,
+	createTestUser,
+	type TestHackkit,
+} from "@hackkit/core/testing";
+import { describe, expect, it } from "vitest";
+
+import { teamsModels } from "../models";
 import { teamsPlugin } from "../index";
 
-function createTeamsHackkit() {
+async function createTeamsHackkit() {
 	const plugin = teamsPlugin();
-	const registry = createPluginRegistry([plugin as unknown as HackKitPlugin]);
-	const now = () => new Date("2026-05-24T12:00:00.000Z");
-	let counter = 0;
-	const id = () => `id-${++counter}`;
-	const db = createInMemoryDatabaseAdapterFromStorage(
-		registry.storage,
-		now,
-		id,
-	);
-	const hackkit = createHackkit({
-		database: db,
-		plugins: [plugin as unknown as HackKitPlugin],
-		clock: now,
-		id,
+	const hackkit = await createTestHackkit({
+		plugins: [plugin],
 	});
-	return { hackkit, teams: hackkit.plugins.teams as unknown as TeamsApi };
+	return { hackkit, teams: hackkit.plugins.teams };
 }
 
 async function seedUserWithHackTag(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit<readonly [ReturnType<typeof teamsPlugin>]>,
 	authId: string,
 	hackTag: string,
 ) {
-	await hackkit.users.ensureUser({
+	await createTestUser(hackkit, {
 		authId,
 		email: `${authId}@example.com`,
-		firstName: "Test",
-		lastName: "User",
+		name: "Test User",
 	});
 	await hackkit.userData.completeUserData({
 		authId,
@@ -55,16 +43,16 @@ async function seedUserWithHackTag(
 }
 
 async function seedHacker(
-	hackkit: ReturnType<typeof createHackkit>,
+	hackkit: TestHackkit<readonly [ReturnType<typeof teamsPlugin>]>,
 	authId: string,
 	hackTag?: string,
 ) {
-	await hackkit.users.ensureUser({
-		authId,
-		email: `${authId}@example.com`,
-		firstName: "Test",
-		lastName: "User",
-	});
+	if (!(await hackkit.users.getUser(authId)))
+		await createTestUser(hackkit, {
+			authId,
+			email: `${authId}@example.com`,
+			name: "Test User",
+		});
 	await hackkit.userData.completeUserData({
 		authId,
 		age: 20,
@@ -78,7 +66,7 @@ async function seedHacker(
 		isEmailable: true,
 	});
 	await hackkit.hackers.registerHacker({
-		authId,
+		userId: authId,
 		university: "Test U",
 		major: "CS",
 		levelOfStudy: "undergraduate",
@@ -92,7 +80,7 @@ async function seedHacker(
 
 describe("teams plugin", () => {
 	it("creates a team and adds the owner as a member", async () => {
-		const { hackkit, teams } = createTeamsHackkit();
+		const { hackkit, teams } = await createTeamsHackkit();
 		await seedHacker(hackkit, "owner-auth", "owner");
 
 		const team = await teams.createTeam({
@@ -107,7 +95,7 @@ describe("teams plugin", () => {
 	});
 
 	it("accepts an invite and enforces one team per hacker", async () => {
-		const { hackkit, teams } = createTeamsHackkit();
+		const { hackkit, teams } = await createTeamsHackkit();
 		await seedHacker(hackkit, "owner-auth", "owner");
 		await seedHacker(hackkit, "member-auth", "member");
 
@@ -152,7 +140,7 @@ describe("teams plugin", () => {
 	});
 
 	it("allows inviting a user before hacker registration", async () => {
-		const { hackkit, teams } = createTeamsHackkit();
+		const { hackkit, teams } = await createTeamsHackkit();
 		await seedHacker(hackkit, "owner-auth", "owner");
 		await seedUserWithHackTag(hackkit, "pending-auth", "pending");
 
@@ -176,7 +164,8 @@ describe("teams plugin", () => {
 				accept: true,
 			}),
 		).rejects.toMatchObject({
-			message: "Complete hacker registration before accepting a team invite.",
+			message:
+				"Complete hacker registration before accepting a team invite.",
 		});
 
 		await seedHacker(hackkit, "pending-auth");
@@ -188,3 +177,109 @@ describe("teams plugin", () => {
 		expect(joined).toMatchObject({ id: team.id });
 	});
 });
+
+it("creates only one team when the same owner submits concurrently", async () => {
+	const { hackkit } = await createTeamsHackkit();
+	await seedHacker(hackkit, "owner-auth", "owner");
+	const results = await Promise.allSettled(
+		["first", "second"].map((tag) =>
+			hackkit.runtime.createScope().hackkit.plugins.teams.createTeam({
+				actorAuthId: "owner-auth",
+				name: tag,
+				tag,
+			}),
+		),
+	);
+	expect(
+		results.filter((result) => result.status === "fulfilled"),
+	).toHaveLength(1);
+	const em = hackkit.runtime.createScope().em;
+	expect(await em.count(teamsModels.team, {})).toBe(1);
+	expect(await em.count(teamsModels.member, {})).toBe(1);
+});
+
+it("keeps the final team place and losing invite consistent across concurrent joins", async () => {
+	const { hackkit, teams } = await createTeamsHackkit();
+	await seedHacker(hackkit, "owner-auth", "owner");
+	const team = await teams.createTeam({
+		actorAuthId: "owner-auth",
+		name: "Race",
+		tag: "race",
+	});
+	const invites = [];
+	for (const authId of ["a", "b", "c", "d"]) {
+		await seedHacker(hackkit, authId, authId);
+		invites.push(
+			await teams.inviteToTeam({
+				actorAuthId: "owner-auth",
+				teamId: team.id,
+				inviteeAuthId: authId,
+			}),
+		);
+	}
+	const results = await Promise.allSettled(
+		invites.map((invite) =>
+			hackkit.runtime
+				.createScope()
+				.hackkit.plugins.teams.respondToInvite({
+					actorAuthId: invite.inviteeAuthId,
+					inviteId: invite.id,
+					accept: true,
+				}),
+		),
+	);
+	expect(
+		results.filter((result) => result.status === "fulfilled"),
+	).toHaveLength(3);
+	const em = hackkit.runtime.createScope().em;
+	expect(await em.count(teamsModels.member, { teamId: team.id })).toBe(4);
+	expect(
+		await em.count(teamsModels.invite, {
+			teamId: team.id,
+			status: "accepted",
+		}),
+	).toBe(3);
+	expect(
+		await em.count(teamsModels.invite, {
+			teamId: team.id,
+			status: "pending",
+		}),
+	).toBe(1);
+});
+
+it("uses the session actor as team owner even when the submission supplies another actor", async () => {
+	const { hackkit } = await createTeamsHackkit();
+	await seedHacker(hackkit, "caller", "caller");
+	await seedHacker(hackkit, "other", "other");
+	const actions = createTeamsActions({
+		hackkit,
+		getAuthId: async () => "caller",
+	});
+	const submitted = {
+		name: "Session team",
+		tag: "session-team",
+		actorAuthId: "other",
+	};
+	const result = await actions.createTeam(submitted);
+	expect(result).toMatchObject({ ok: true, data: { ownerAuthId: "caller" } });
+});
+
+it("returns a structured error from generated actions when Teams is disabled", async () => {
+	const hackkit = await createTestHackkit({
+		plugins: [{ ...teamsPlugin(), enabled: false }],
+	});
+	const actions = createTeamsActions({
+		hackkit,
+		getAuthId: async () => "caller",
+	});
+	expect(
+		await actions.createTeam({
+			name: "Disabled team",
+			tag: "disabled-team",
+		}),
+	).toMatchObject({
+		ok: false,
+		message: "HackKit plugin 'teams' is disabled.",
+	});
+	expect(await hackkit.em.count(teamsModels.team, {})).toBe(0);
+});
diff --git a/packages/plugin-teams/src/actions.ts b/packages/plugin-teams/src/actions.ts
index 9420bb0f..8c984786 100644
--- a/packages/plugin-teams/src/actions.ts
+++ b/packages/plugin-teams/src/actions.ts
@@ -22,16 +22,18 @@ export type RemoveMemberInput = {
 
 import type { TeamsApi } from "./api";
 
-export function createTeamsActions(runtime: HackkitRuntime) {
-	const teams = runtime.hackkit.plugins.teams as unknown as TeamsApi;
-
+export function createTeamsActions(
+	runtime: Pick<HackkitRuntime, "hackkit" | "getAuthId">,
+) {
 	return {
 		async createTeam(values: CreateTeamInput) {
 			try {
+				const teams = runtime.hackkit.plugins
+					.teams as unknown as TeamsApi;
 				const actorAuthId = await runtime.getAuthId();
 				const team = await teams.createTeam({
-					actorAuthId,
 					...values,
+					actorAuthId,
 				});
 				return actionSuccess(team);
 			} catch (error) {
@@ -41,10 +43,12 @@ export function createTeamsActions(runtime: HackkitRuntime) {
 
 		async inviteToTeam(values: InviteToTeamInput) {
 			try {
+				const teams = runtime.hackkit.plugins
+					.teams as unknown as TeamsApi;
 				const actorAuthId = await runtime.getAuthId();
 				const invite = await teams.inviteToTeam({
-					actorAuthId,
 					...values,
+					actorAuthId,
 				});
 				return actionSuccess(invite);
 			} catch (error) {
@@ -54,10 +58,12 @@ export function createTeamsActions(runtime: HackkitRuntime) {
 
 		async respondToInvite(values: RespondToInviteInput) {
 			try {
+				const teams = runtime.hackkit.plugins
+					.teams as unknown as TeamsApi;
 				const actorAuthId = await runtime.getAuthId();
 				const result = await teams.respondToInvite({
-					actorAuthId,
 					...values,
+					actorAuthId,
 				});
 				return actionSuccess(result);
 			} catch (error) {
@@ -67,6 +73,8 @@ export function createTeamsActions(runtime: HackkitRuntime) {
 
 		async leaveTeam() {
 			try {
+				const teams = runtime.hackkit.plugins
+					.teams as unknown as TeamsApi;
 				const actorAuthId = await runtime.getAuthId();
 				await teams.leaveTeam({ actorAuthId });
 				return actionSuccess();
@@ -77,6 +85,8 @@ export function createTeamsActions(runtime: HackkitRuntime) {
 
 		async removeMember(values: RemoveMemberInput) {
 			try {
+				const teams = runtime.hackkit.plugins
+					.teams as unknown as TeamsApi;
 				const actorAuthId = await runtime.getAuthId();
 				await teams.removeMember({
 					actorAuthId,
diff --git a/packages/plugin-teams/src/api.ts b/packages/plugin-teams/src/api.ts
index 5c029828..ebf269ed 100644
--- a/packages/plugin-teams/src/api.ts
+++ b/packages/plugin-teams/src/api.ts
@@ -1,7 +1,13 @@
-import { coreModels, HackKitError } from "@hackkit/core";
+import { wrap } from "@mikro-orm/core";
+import { coreModels, HackKitError, withOperationLock } from "@hackkit/core";
 import type { AuthId, User } from "@hackkit/core";
 import type { HackKitPluginContext } from "@hackkit/core";
-import { teamsModels, type Team, type TeamInvite, type TeamMember } from "./models";
+import {
+	teamsModels,
+	type Team,
+	type TeamInvite,
+	type TeamMember,
+} from "./models";
 import { TeamsSetting } from "./settings";
 
 export type TeamWithMembers = Team & {
@@ -16,7 +22,9 @@ async function requireHacker(
 	authId: AuthId,
 	message = "Only Hackers can participate in teams.",
 ): Promise<void> {
-	const hacker = await context.database.findOne(coreModels.hacker, { authId });
+	const hacker = await context.em.findOne(coreModels.hacker, {
+		userId: authId,
+	});
 	if (!hacker) {
 		throw new HackKitError("INVALID_OPERATION", message);
 	}
@@ -26,14 +34,14 @@ async function getMemberForAuthId(
 	context: HackKitPluginContext,
 	authId: AuthId,
 ): Promise<TeamMember | null> {
-	return context.database.findOne(teamsModels.member, { authId });
+	return context.em.findOne(teamsModels.member, { authId });
 }
 
 async function getTeamOrThrow(
 	context: HackKitPluginContext,
 	teamId: string,
 ): Promise<Team> {
-	const team = await context.database.findOne(teamsModels.team, { id: teamId });
+	const team = await context.em.findOne(teamsModels.team, { id: teamId });
 	if (!team) {
 		throw new HackKitError("NOT_FOUND", "Team not found.");
 	}
@@ -46,10 +54,7 @@ async function assertNotOnTeam(
 ): Promise<void> {
 	const member = await getMemberForAuthId(context, authId);
 	if (member) {
-		throw new HackKitError(
-			"CONFLICT",
-			"User is already on a team.",
-		);
+		throw new HackKitError("CONFLICT", "User is already on a team.");
 	}
 }
 
@@ -61,26 +66,32 @@ async function resolveInviteeAuthId(
 	if (!target.hackTag?.trim()) {
 		throw new HackKitError("INVALID_OPERATION", "Invitee is required.");
 	}
-	const user = await context.database.findOne(coreModels.user, {
+	const user = await context.em.findOne(coreModels.user, {
 		hackTag: target.hackTag.trim().toLowerCase(),
 	});
 	if (!user) {
-		throw new HackKitError("NOT_FOUND", "User with that HackTag was not found.");
+		throw new HackKitError(
+			"NOT_FOUND",
+			"User with that HackTag was not found.",
+		);
 	}
-	return user.authId;
+	return user.id;
 }
 
 async function assertTeamHasRoom(
 	context: HackKitPluginContext,
 	teamId: string,
 ): Promise<void> {
-	const maximumTeamSize = await context.getSettingValue(TeamsSetting.MaximumTeamSize);
+	const maximumTeamSize = await context.getSettingValue(
+		TeamsSetting.MaximumTeamSize,
+	);
 	if (typeof maximumTeamSize !== "number" || maximumTeamSize === 0) return;
-	const members = await context.database.findMany(teamsModels.member, {
-		where: { teamId },
-	});
+	const members = await context.em.find(teamsModels.member, { teamId });
 	if (members.length >= maximumTeamSize) {
-		throw new HackKitError("INVALID_OPERATION", "Maximum team size has been reached.");
+		throw new HackKitError(
+			"INVALID_OPERATION",
+			"Maximum team size has been reached.",
+		);
 	}
 }
 
@@ -88,26 +99,28 @@ async function hydrateTeam(
 	context: HackKitPluginContext,
 	team: Team,
 ): Promise<TeamWithMembers> {
-	const members = await context.database.findMany(teamsModels.member, {
-		where: { teamId: team.id },
-		orderBy: { field: "joinedAt", direction: "asc" },
-	});
+	const members = await context.em.find(
+		teamsModels.member,
+		{ teamId: team.id },
+		{ orderBy: { joinedAt: "asc" } },
+	);
 	const users = await Promise.all(
 		members.map(async (member) => {
-			const user = await context.database.findOne(coreModels.user, {
-				authId: member.authId,
-			});
+			const user = await context.getUser(member.authId);
 			if (!user) {
-				throw new HackKitError("NOT_FOUND", "Team member user not found.");
+				throw new HackKitError(
+					"NOT_FOUND",
+					"Team member user not found.",
+				);
 			}
-			return { ...member, user };
+			return { ...wrap(member).toObject(), user };
 		}),
 	);
-	return { ...team, members: users };
+	return { ...wrap(team).toObject(), members: users };
 }
 
 export function createTeamsApi(context: HackKitPluginContext) {
-	const { database, registry } = context;
+	const { em, registry } = context;
 
 	return {
 		async createTeam(input: {
@@ -115,31 +128,43 @@ export function createTeamsApi(context: HackKitPluginContext) {
 			name: string;
 			tag: string;
 		}): Promise<TeamWithMembers> {
-			await requireHacker(context, input.actorAuthId);
-			await assertNotOnTeam(context, input.actorAuthId);
+			return withOperationLock(em, "teams.membership", async () => {
+				await requireHacker(context, input.actorAuthId);
+				await assertNotOnTeam(context, input.actorAuthId);
 
-			const normalizedTag = input.tag.trim().toLowerCase();
-			if (!normalizedTag) {
-				throw new HackKitError("INVALID_OPERATION", "Team tag is required.");
-			}
+				const normalizedTag = input.tag.trim().toLowerCase();
+				if (!normalizedTag) {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						"Team tag is required.",
+					);
+				}
 
-			const existingTag = await database.findOne(teamsModels.team, {
-				tag: normalizedTag,
-			});
-			if (existingTag) {
-				throw new HackKitError("CONFLICT", "Team tag is already taken.");
-			}
+				const existingTag = await em.findOne(teamsModels.team, {
+					tag: normalizedTag,
+				});
+				if (existingTag) {
+					throw new HackKitError(
+						"CONFLICT",
+						"Team tag is already taken.",
+					);
+				}
 
-			const team = await database.insert(teamsModels.team, {
-				name: input.name.trim(),
-				tag: normalizedTag,
-				ownerAuthId: input.actorAuthId,
-			});
-			await database.insert(teamsModels.member, {
-				teamId: team.id,
-				authId: input.actorAuthId,
+				const team = em.create(teamsModels.team, {
+					name: input.name.trim(),
+					tag: normalizedTag,
+					ownerAuthId: input.actorAuthId,
+				});
+				await em.flush();
+				{
+					em.create(teamsModels.member, {
+						teamId: team.id,
+						authId: input.actorAuthId,
+					});
+					await em.flush();
+				}
+				return hydrateTeam(context, team);
 			});
-			return hydrateTeam(context, team);
 		},
 
 		async inviteToTeam(input: {
@@ -148,40 +173,49 @@ export function createTeamsApi(context: HackKitPluginContext) {
 			inviteeAuthId?: AuthId;
 			hackTag?: string;
 		}): Promise<TeamInvite> {
-			const team = await getTeamOrThrow(context, input.teamId);
-			if (team.ownerAuthId !== input.actorAuthId) {
-				throw new HackKitError(
-					"FORBIDDEN",
-					"Only the team owner can send invites.",
-				);
-			}
+			return withOperationLock(em, "teams.membership", async () => {
+				const team = await getTeamOrThrow(context, input.teamId);
+				if (team.ownerAuthId !== input.actorAuthId) {
+					throw new HackKitError(
+						"FORBIDDEN",
+						"Only the team owner can send invites.",
+					);
+				}
 
-			const inviteeAuthId = await resolveInviteeAuthId(context, input);
-			if (inviteeAuthId === input.actorAuthId) {
-				throw new HackKitError(
-					"INVALID_OPERATION",
-					"You cannot invite yourself.",
+				const inviteeAuthId = await resolveInviteeAuthId(
+					context,
+					input,
 				);
-			}
+				if (inviteeAuthId === input.actorAuthId) {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						"You cannot invite yourself.",
+					);
+				}
 
-			await assertNotOnTeam(context, inviteeAuthId);
+				await assertNotOnTeam(context, inviteeAuthId);
 
-			const existingInvite = await database.findOne(teamsModels.invite, {
-				teamId: input.teamId,
-				inviteeAuthId,
-				status: "pending",
-			});
-			if (existingInvite) {
-				throw new HackKitError(
-					"CONFLICT",
-					"An invite is already pending for this user.",
-				);
-			}
+				const existingInvite = await em.findOne(teamsModels.invite, {
+					teamId: input.teamId,
+					inviteeAuthId,
+					status: "pending",
+				});
+				if (existingInvite) {
+					throw new HackKitError(
+						"CONFLICT",
+						"An invite is already pending for this user.",
+					);
+				}
 
-			return database.insert(teamsModels.invite, {
-				teamId: input.teamId,
-				inviteeAuthId,
-				status: "pending",
+				{
+					const created = em.create(teamsModels.invite, {
+						teamId: input.teamId,
+						inviteeAuthId,
+						status: "pending",
+					});
+					await em.flush();
+					return wrap(created).toObject();
+				}
 			});
 		},
 
@@ -190,115 +224,156 @@ export function createTeamsApi(context: HackKitPluginContext) {
 			inviteId: string;
 			accept: boolean;
 		}): Promise<TeamInvite | TeamWithMembers> {
-			const invite = await database.findOne(teamsModels.invite, {
-				id: input.inviteId,
-			});
-			if (!invite) {
-				throw new HackKitError("NOT_FOUND", "Invite not found.");
-			}
-			if (invite.inviteeAuthId !== input.actorAuthId) {
-				throw new HackKitError(
-					"FORBIDDEN",
-					"You can only respond to your own invites.",
-				);
-			}
-			if (invite.status !== "pending") {
-				throw new HackKitError(
-					"INVALID_OPERATION",
-					"Invite has already been responded to.",
-				);
-			}
+			return withOperationLock(em, "teams.membership", async () => {
+				const invite = await em.findOne(teamsModels.invite, {
+					id: input.inviteId,
+				});
+				if (!invite) {
+					throw new HackKitError("NOT_FOUND", "Invite not found.");
+				}
+				if (invite.inviteeAuthId !== input.actorAuthId) {
+					throw new HackKitError(
+						"FORBIDDEN",
+						"You can only respond to your own invites.",
+					);
+				}
+				if (invite.status !== "pending") {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						"Invite has already been responded to.",
+					);
+				}
 
-			if (!input.accept) {
-				const [updated] = await database.update(
-					teamsModels.invite,
-					{ id: invite.id },
-					{ status: "declined" },
-				);
-				return updated ?? { ...invite, status: "declined" };
-			}
+				if (!input.accept) {
+					const updated = await em.findOne(teamsModels.invite, {
+						id: invite.id,
+					});
+					if (updated) {
+						em.assign(
+							updated,
+							{ status: "declined" },
+							{ ignoreUndefined: true },
+						);
+						await em.flush();
+					}
+					return wrap(updated ?? invite).toObject();
+				}
 
-			await requireHacker(
-				context,
-				input.actorAuthId,
-				"Complete hacker registration before accepting a team invite.",
-			);
-			await assertNotOnTeam(context, input.actorAuthId);
+				await requireHacker(
+					context,
+					input.actorAuthId,
+					"Complete hacker registration before accepting a team invite.",
+				);
+				await assertNotOnTeam(context, input.actorAuthId);
 
-			await assertTeamHasRoom(context, invite.teamId);
-			await database.insert(teamsModels.member, {
-				teamId: invite.teamId,
-				authId: input.actorAuthId,
+				await assertTeamHasRoom(context, invite.teamId);
+				{
+					em.create(teamsModels.member, {
+						teamId: invite.teamId,
+						authId: input.actorAuthId,
+					});
+					await em.flush();
+				}
+				{
+					const updatedRows = await em.find(teamsModels.invite, {
+						id: invite.id,
+					});
+					for (const row of updatedRows)
+						em.assign(
+							row,
+							{ status: "accepted" },
+							{ ignoreUndefined: true },
+						);
+					await em.flush();
+				}
+				const team = await getTeamOrThrow(context, invite.teamId);
+				return hydrateTeam(context, team);
 			});
-			await database.update(
-				teamsModels.invite,
-				{ id: invite.id },
-				{ status: "accepted" },
-			);
-			const team = await getTeamOrThrow(context, invite.teamId);
-			return hydrateTeam(context, team);
 		},
 
 		async leaveTeam(input: { actorAuthId: AuthId }): Promise<void> {
-			const member = await getMemberForAuthId(context, input.actorAuthId);
-			if (!member) {
-				throw new HackKitError("NOT_FOUND", "You are not on a team.");
-			}
-			const team = await getTeamOrThrow(context, member.teamId);
-			if (team.ownerAuthId === input.actorAuthId) {
-				throw new HackKitError(
-					"INVALID_OPERATION",
-					"Team owners cannot leave their team.",
+			return withOperationLock(em, "teams.membership", async () => {
+				const member = await getMemberForAuthId(
+					context,
+					input.actorAuthId,
 				);
-			}
-			await database.delete(teamsModels.member, { id: member.id });
+				if (!member) {
+					throw new HackKitError(
+						"NOT_FOUND",
+						"You are not on a team.",
+					);
+				}
+				const team = await getTeamOrThrow(context, member.teamId);
+				if (team.ownerAuthId === input.actorAuthId) {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						"Team owners cannot leave their team.",
+					);
+				}
+				await em.nativeDelete(teamsModels.member, { id: member.id });
+			});
 		},
 
 		async removeMember(input: {
 			actorAuthId: AuthId;
 			memberAuthId: AuthId;
 		}): Promise<void> {
-			const member = await getMemberForAuthId(context, input.memberAuthId);
-			if (!member) {
-				throw new HackKitError("NOT_FOUND", "Team member not found.");
-			}
-			const team = await getTeamOrThrow(context, member.teamId);
-			if (team.ownerAuthId !== input.actorAuthId) {
-				throw new HackKitError(
-					"FORBIDDEN",
-					"Only the team owner can remove members.",
-				);
-			}
-			if (member.authId === team.ownerAuthId) {
-				throw new HackKitError(
-					"INVALID_OPERATION",
-					"The team owner cannot be removed.",
+			return withOperationLock(em, "teams.membership", async () => {
+				const member = await getMemberForAuthId(
+					context,
+					input.memberAuthId,
 				);
-			}
-			await database.delete(teamsModels.member, { id: member.id });
+				if (!member) {
+					throw new HackKitError(
+						"NOT_FOUND",
+						"Team member not found.",
+					);
+				}
+				const team = await getTeamOrThrow(context, member.teamId);
+				if (team.ownerAuthId !== input.actorAuthId) {
+					throw new HackKitError(
+						"FORBIDDEN",
+						"Only the team owner can remove members.",
+					);
+				}
+				if (member.authId === team.ownerAuthId) {
+					throw new HackKitError(
+						"INVALID_OPERATION",
+						"The team owner cannot be removed.",
+					);
+				}
+				await em.nativeDelete(teamsModels.member, { id: member.id });
+			});
 		},
 
-		async getTeamForAuthId(authId: AuthId): Promise<TeamWithMembers | null> {
+		async getTeamForAuthId(
+			authId: AuthId,
+		): Promise<TeamWithMembers | null> {
 			const member = await getMemberForAuthId(context, authId);
 			if (!member) return null;
 			const team = await getTeamOrThrow(context, member.teamId);
 			return hydrateTeam(context, team);
 		},
 
-		async listTeamMembers(teamId: string): Promise<(TeamMember & { user: User })[]> {
+		async listTeamMembers(
+			teamId: string,
+		): Promise<(TeamMember & { user: User })[]> {
 			const team = await getTeamOrThrow(context, teamId);
 			return (await hydrateTeam(context, team)).members;
 		},
 
 		async listPendingInvites(authId: AuthId): Promise<PendingTeamInvite[]> {
-			const invites = await database.findMany(teamsModels.invite, {
-				where: { inviteeAuthId: authId, status: "pending" },
-				orderBy: { field: "createdAt", direction: "desc" },
-			});
+			const invites = await em.find(
+				teamsModels.invite,
+				{ inviteeAuthId: authId, status: "pending" },
+				{ orderBy: { createdAt: "desc" } },
+			);
 			return Promise.all(
 				invites.map(async (invite) => ({
-					...invite,
-					team: await getTeamOrThrow(context, invite.teamId),
+					...wrap(invite).toObject(),
+					team: wrap(
+						await getTeamOrThrow(context, invite.teamId),
+					).toObject(),
 				})),
 			);
 		},
@@ -314,22 +389,21 @@ export function createTeamsApi(context: HackKitPluginContext) {
 					"Only the team owner can view team invites.",
 				);
 			}
-			const invites = await database.findMany(teamsModels.invite, {
-				where: { teamId: input.teamId },
-				orderBy: { field: "createdAt", direction: "desc" },
-			});
+			const invites = await em.find(
+				teamsModels.invite,
+				{ teamId: input.teamId },
+				{ orderBy: { createdAt: "desc" } },
+			);
 			return Promise.all(
 				invites.map(async (invite) => {
-					const invitee = await database.findOne(coreModels.user, {
-						authId: invite.inviteeAuthId,
-					});
+					const invitee = await context.getUser(invite.inviteeAuthId);
 					if (!invitee) {
 						throw new HackKitError(
 							"NOT_FOUND",
 							"Invited user not found.",
 						);
 					}
-					return { ...invite, invitee };
+					return { ...wrap(invite).toObject(), invitee };
 				}),
 			);
 		},
diff --git a/packages/plugin-teams/src/components/team-dashboard.tsx b/packages/plugin-teams/src/components/team-dashboard.tsx
index 67358d36..0f35c224 100644
--- a/packages/plugin-teams/src/components/team-dashboard.tsx
+++ b/packages/plugin-teams/src/components/team-dashboard.tsx
@@ -6,20 +6,14 @@ import { toast } from "sonner";
 import type { User } from "@hackkit/core";
 import type { HackKitActionResult } from "@hackkit/ui";
 import { Button } from "@hackkit/ui";
-import type {
-	InviteToTeamInput,
-	RemoveMemberInput,
-} from "../actions";
+import type { InviteToTeamInput, RemoveMemberInput } from "../actions";
 import type { TeamInviteWithInvitee, TeamWithMembers } from "../api";
 
-const INVITE_STATUS_LABEL: Record<
-	TeamInviteWithInvitee["status"],
-	string
-> = {
-	pending: "Pending",
-	accepted: "Accepted",
-	declined: "Declined",
-};
+const INVITE_STATUS_LABEL = new Map<TeamInviteWithInvitee["status"], string>([
+	["pending", "Pending"],
+	["accepted", "Accepted"],
+	["declined", "Declined"],
+]);
 
 function formatInviteSentAt(createdAt: Date | string): string {
 	const date = createdAt instanceof Date ? createdAt : new Date(createdAt);
@@ -54,7 +48,7 @@ export function TeamDashboard({
 	const router = useRouter();
 	const [hackTag, setHackTag] = React.useState("");
 	const [pending, setPending] = React.useState<string | null>(null);
-	const isOwner = team.ownerAuthId === currentUser.authId;
+	const isOwner = team.ownerAuthId === currentUser.id;
 
 	async function handleInvite(event: React.FormEvent<HTMLFormElement>) {
 		event.preventDefault();
@@ -98,7 +92,9 @@ export function TeamDashboard({
 		<div className="space-y-6">
 			<div className="rounded-lg border bg-card p-6 shadow-sm">
 				<p className="text-sm font-medium text-primary">Your team</p>
-				<h1 className="text-3xl font-bold tracking-tight">{team.name}</h1>
+				<h1 className="text-3xl font-bold tracking-tight">
+					{team.name}
+				</h1>
 				<p className="text-muted-foreground">@{team.tag}</p>
 			</div>
 
@@ -112,13 +108,15 @@ export function TeamDashboard({
 						>
 							<div>
 								<p className="font-medium">
-									{member.user.firstName} {member.user.lastName}
+									{member.user.name}
 								</p>
 								<p className="text-sm text-muted-foreground">
 									{member.user.hackTag
 										? `@${member.user.hackTag}`
 										: member.user.email}
-									{member.authId === team.ownerAuthId ? " · Owner" : ""}
+									{member.authId === team.ownerAuthId
+										? " · Owner"
+										: ""}
 								</p>
 							</div>
 							{isOwner && member.authId !== team.ownerAuthId ? (
@@ -156,8 +154,7 @@ export function TeamDashboard({
 									>
 										<div>
 											<p className="font-medium">
-												{invite.invitee.firstName}{" "}
-												{invite.invitee.lastName}
+												{invite.invitee.name}
 											</p>
 											<p className="text-sm text-muted-foreground">
 												{invite.invitee.hackTag
@@ -165,19 +162,25 @@ export function TeamDashboard({
 													: invite.invitee.email}
 											</p>
 											<p className="text-xs text-muted-foreground">
-												Sent {formatInviteSentAt(invite.createdAt)}
+												Sent{" "}
+												{formatInviteSentAt(
+													invite.createdAt,
+												)}
 											</p>
 										</div>
 										<span
 											className={
 												invite.status === "pending"
 													? "inline-flex w-fit rounded-full bg-amber-500/15 px-2.5 py-0.5 text-xs font-medium text-amber-700 dark:text-amber-400"
-													: invite.status === "accepted"
+													: invite.status ===
+														  "accepted"
 														? "inline-flex w-fit rounded-full bg-emerald-500/15 px-2.5 py-0.5 text-xs font-medium text-emerald-700 dark:text-emerald-400"
 														: "inline-flex w-fit rounded-full bg-muted px-2.5 py-0.5 text-xs font-medium text-muted-foreground"
 											}
 										>
-											{INVITE_STATUS_LABEL[invite.status]}
+											{INVITE_STATUS_LABEL.get(
+												invite.status,
+											)}
 										</span>
 									</li>
 								))}
@@ -186,24 +189,30 @@ export function TeamDashboard({
 					</section>
 
 					<form
-					onSubmit={handleInvite}
-					className="space-y-4 rounded-lg border bg-card p-6 shadow-sm"
-				>
-					<h2 className="text-lg font-semibold">Invite a Hacker</h2>
-					<label className="block space-y-1 text-sm">
-						<span className="font-medium">HackTag</span>
-						<input
-							className="flex h-10 w-full rounded-md border bg-background px-3 py-2"
-							value={hackTag}
-							onChange={(event) => setHackTag(event.target.value)}
-							placeholder="teammate-tag"
-							required
-						/>
-					</label>
-					<Button type="submit" disabled={pending === "invite"}>
-						{pending === "invite" ? "Sending..." : "Send invite"}
-					</Button>
-				</form>
+						onSubmit={handleInvite}
+						className="space-y-4 rounded-lg border bg-card p-6 shadow-sm"
+					>
+						<h2 className="text-lg font-semibold">
+							Invite a Hacker
+						</h2>
+						<label className="block space-y-1 text-sm">
+							<span className="font-medium">HackTag</span>
+							<input
+								className="flex h-10 w-full rounded-md border bg-background px-3 py-2"
+								value={hackTag}
+								onChange={(event) =>
+									setHackTag(event.target.value)
+								}
+								placeholder="teammate-tag"
+								required
+							/>
+						</label>
+						<Button type="submit" disabled={pending === "invite"}>
+							{pending === "invite"
+								? "Sending..."
+								: "Send invite"}
+						</Button>
+					</form>
 				</>
 			) : (
 				<Button
diff --git a/packages/plugin-teams/src/components/team-invites.tsx b/packages/plugin-teams/src/components/team-invites.tsx
index b9971226..dacc002c 100644
--- a/packages/plugin-teams/src/components/team-invites.tsx
+++ b/packages/plugin-teams/src/components/team-invites.tsx
@@ -34,7 +34,9 @@ export function TeamInvites({ invites, respondToInvite }: TeamInvitesProps) {
 	if (invites.length === 0) {
 		return (
 			<div className="rounded-lg border bg-card p-6 shadow-sm">
-				<p className="text-muted-foreground">No pending team invites.</p>
+				<p className="text-muted-foreground">
+					No pending team invites.
+				</p>
 			</div>
 		);
 	}
@@ -48,7 +50,9 @@ export function TeamInvites({ invites, respondToInvite }: TeamInvitesProps) {
 				>
 					<div>
 						<p className="font-medium">{invite.team.name}</p>
-						<p className="text-sm text-muted-foreground">@{invite.team.tag}</p>
+						<p className="text-sm text-muted-foreground">
+							@{invite.team.tag}
+						</p>
 					</div>
 					<div className="flex gap-2">
 						<Button
diff --git a/packages/plugin-teams/src/index.ts b/packages/plugin-teams/src/index.ts
index 57c2e7c1..c1784118 100644
--- a/packages/plugin-teams/src/index.ts
+++ b/packages/plugin-teams/src/index.ts
@@ -5,7 +5,10 @@ import { teamsModels } from "./models";
 import { TeamsPermission } from "./permissions";
 import { TeamsSetting } from "./settings";
 
-export function teamsPlugin(): HackKitPlugin<"teams", ReturnType<typeof createTeamsApi>> {
+export function teamsPlugin(): HackKitPlugin<
+	"teams",
+	ReturnType<typeof createTeamsApi>
+> {
 	return {
 		id: "teams",
 		packageName: "@hackkit/plugin-teams",
@@ -17,7 +20,7 @@ export function teamsPlugin(): HackKitPlugin<"teams", ReturnType<typeof createTe
 			"leaveTeam",
 			"removeMember",
 		],
-		models: teamsModels,
+		entities: Object.values(teamsModels),
 		settings: [
 			defineSetting({
 				key: TeamsSetting.MaximumTeamSize,
@@ -27,7 +30,8 @@ export function teamsPlugin(): HackKitPlugin<"teams", ReturnType<typeof createTe
 				min: 0,
 				unit: "members",
 				label: "Maximum team size",
-				description: "Maximum number of members allowed on one team. 0 means unlimited.",
+				description:
+					"Maximum number of members allowed on one team. 0 means unlimited.",
 				category: "Teams",
 			}),
 		],
@@ -41,7 +45,6 @@ export function teamsPlugin(): HackKitPlugin<"teams", ReturnType<typeof createTe
 	};
 }
 
-export { createTeamsActions } from "./actions";
 export { createTeamsApi } from "./api";
 export { teamsModels } from "./models";
 export { TeamsPermission } from "./permissions";
diff --git a/packages/plugin-teams/src/models.ts b/packages/plugin-teams/src/models.ts
index dc7ae733..4a19599e 100644
--- a/packages/plugin-teams/src/models.ts
+++ b/packages/plugin-teams/src/models.ts
@@ -1,54 +1,95 @@
-import { defineModel, field } from "@hackkit/core";
+import {
+	defineEntity,
+	p,
+	type EntityDTO,
+	type InferEntity,
+} from "@mikro-orm/core";
+import { HackKitUser } from "@hackkit/core";
 
-export const teamsModels = {
-	team: defineModel("teams.team", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			name: field.string(),
-			tag: field.string().unique(),
-			ownerAuthId: field
-				.string()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			createdAt: field.date().defaultNow(),
-		},
-		indexes: [["tag"], ["ownerAuthId"]],
-	}),
-	member: defineModel("teams.member", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			teamId: field
-				.string()
-				.references("teams.team", "id", { onDelete: "cascade" }),
-			authId: field
-				.string()
+export const TeamsTeam = defineEntity({
+	name: "TeamsTeam",
+	tableName: "teams_team",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		name: p.string(),
+		tag: p.string().unique(),
+		ownerAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("owner_auth_id")
+				.deleteRule("cascade"),
+		createdAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [{ properties: ["tag"] }, { properties: ["ownerAuthId"] }],
+});
+
+export const TeamsMember = defineEntity({
+	name: "TeamsMember",
+	tableName: "teams_member",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		teamId: () =>
+			p
+				.manyToOne(TeamsTeam)
+				.mapToPk()
+				.fieldName("team_id")
+				.deleteRule("cascade"),
+		authId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("auth_id")
 				.unique()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			joinedAt: field.date().defaultNow(),
-		},
-		indexes: [["teamId"], ["authId"]],
-	}),
-	invite: defineModel("teams.invite", {
-		fields: {
-			id: field.string().primaryKey().defaultId(),
-			teamId: field
-				.string()
-				.references("teams.team", "id", { onDelete: "cascade" }),
-			inviteeAuthId: field
-				.string()
-				.references("core.user", "authId", { onDelete: "cascade" }),
-			status: field
-				.enum(["pending", "accepted", "declined"] as const)
-				.default("pending"),
-			createdAt: field.date().defaultNow(),
-		},
-		indexes: [["teamId"], ["inviteeAuthId"], ["teamId", "inviteeAuthId"]],
-	}),
-} as const;
+				.deleteRule("cascade"),
+		joinedAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [{ properties: ["teamId"] }, { properties: ["authId"] }],
+});
 
-export type Team = import("@hackkit/core").InferSelect<typeof teamsModels.team>;
-export type TeamMember = import("@hackkit/core").InferSelect<
-	typeof teamsModels.member
->;
-export type TeamInvite = import("@hackkit/core").InferSelect<
-	typeof teamsModels.invite
->;
+export const TeamsInvite = defineEntity({
+	name: "TeamsInvite",
+	tableName: "teams_invite",
+	properties: {
+		id: p
+			.string()
+			.primary()
+			.onCreate(() => crypto.randomUUID()),
+		teamId: () =>
+			p
+				.manyToOne(TeamsTeam)
+				.mapToPk()
+				.fieldName("team_id")
+				.deleteRule("cascade"),
+		inviteeAuthId: () =>
+			p
+				.manyToOne(HackKitUser)
+				.mapToPk()
+				.fieldName("invitee_auth_id")
+				.deleteRule("cascade"),
+		status: p
+			.enum(["pending", "accepted", "declined"] as const)
+			.default("pending"),
+		createdAt: p.datetime().onCreate(() => new Date()),
+	},
+	indexes: [
+		{ properties: ["teamId"] },
+		{ properties: ["inviteeAuthId"] },
+		{ properties: ["teamId", "inviteeAuthId"] },
+	],
+});
+
+export const teamsModels = {
+	team: TeamsTeam,
+	member: TeamsMember,
+	invite: TeamsInvite,
+} as const;
+export type Team = EntityDTO<InferEntity<typeof TeamsTeam>>;
+export type TeamMember = EntityDTO<InferEntity<typeof TeamsMember>>;
+export type TeamInvite = EntityDTO<InferEntity<typeof TeamsInvite>>;
diff --git a/packages/plugin-teams/tsconfig.json b/packages/plugin-teams/tsconfig.json
index 796f004c..a97b9588 100644
--- a/packages/plugin-teams/tsconfig.json
+++ b/packages/plugin-teams/tsconfig.json
@@ -6,7 +6,7 @@
     "declaration": true,
     "declarationMap": true,
     "sourceMap": true,
-    "noEmit": false
+    "noEmit": true
   },
   "include": ["src/**/*.ts", "src/**/*.tsx"],
   "exclude": ["dist", "node_modules", "src/**/__tests__/**"]
diff --git a/packages/plugin-teams/tsup.config.ts b/packages/plugin-teams/tsup.config.ts
new file mode 100644
index 00000000..72c19c95
--- /dev/null
+++ b/packages/plugin-teams/tsup.config.ts
@@ -0,0 +1,7 @@
+import { defineConfig } from "tsup";
+
+export default defineConfig({
+	entry: ["src/index.ts", "src/actions.ts"],
+	format: ["cjs", "esm"],
+	dts: true,
+});
diff --git a/packages/ui/package.json b/packages/ui/package.json
index 1d9c8337..e97aacbf 100644
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -51,8 +51,8 @@
   "devDependencies": {
     "@types/react": "18.3.3",
     "@types/react-dom": "18.3.0",
-    "tsup": "^8.5.1",
-    "typescript": "5.5.3"
+    "typescript": "5.9.3",
+    "tsup": "^8.5.1"
   },
   "license": "MIT",
   "private": true
diff --git a/packages/ui/src/actions.ts b/packages/ui/src/actions.ts
index 74c26c25..2d53b568 100644
--- a/packages/ui/src/actions.ts
+++ b/packages/ui/src/actions.ts
@@ -1,4 +1,4 @@
-import { HackKitError } from "@hackkit/core";
+import { HackKitError } from "@hackkit/core/client";
 
 export type HackKitActionResult<T = void> =
 	| { ok: true; data: T }
diff --git a/packages/ui/src/components/admin-console-controls.tsx b/packages/ui/src/components/admin-console-controls.tsx
index 932f2896..788aa5e9 100644
--- a/packages/ui/src/components/admin-console-controls.tsx
+++ b/packages/ui/src/components/admin-console-controls.tsx
@@ -1,12 +1,22 @@
 "use client";
 
 import * as React from "react";
-import type { AdminUserRecord, PermissionKey, Role } from "@hackkit/core";
-import { CorePermission } from "@hackkit/core";
+import type {
+	AdminUserRecord,
+	PermissionKey,
+	Role,
+} from "@hackkit/core/client";
+import { CorePermission } from "@hackkit/core/client";
 import { toast } from "sonner";
 import { useHackKitUI } from "../provider";
 import { Button } from "./ui/button";
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "./ui/card";
+import {
+	Card,
+	CardContent,
+	CardDescription,
+	CardHeader,
+	CardTitle,
+} from "./ui/card";
 import { Checkbox } from "./ui/checkbox";
 import { Input } from "./ui/input";
 import { Label } from "./ui/label";
@@ -43,13 +53,16 @@ export function AdminUserActions({
 	roles: Role[];
 }) {
 	const { actions, navigation } = useHackKitUI();
-	const [pendingAction, setPendingAction] = React.useState<PendingAction>(null);
+	const [pendingAction, setPendingAction] =
+		React.useState<PendingAction>(null);
 	const [roleId, setRoleId] = React.useState(record.user.roleId ?? "");
 	const [banReason, setBanReason] = React.useState(record.ban?.reason ?? "");
 
 	async function run<T>(
 		action: PendingAction,
-		task: () => Promise<{ ok: true; data: T } | { ok: false; message: string }>,
+		task: () => Promise<
+			{ ok: true; data: T } | { ok: false; message: string }
+		>,
 		successMessage: string,
 	) {
 		setPendingAction(action);
@@ -67,7 +80,9 @@ export function AdminUserActions({
 		<Card className="h-fit">
 			<CardHeader>
 				<CardTitle>Admin Actions</CardTitle>
-				<CardDescription>Approval, suspension, and role controls.</CardDescription>
+				<CardDescription>
+					Approval, suspension, and role controls.
+				</CardDescription>
 			</CardHeader>
 			<CardContent className="space-y-6">
 				<div className="space-y-2">
@@ -81,14 +96,18 @@ export function AdminUserActions({
 								"approval",
 								() =>
 									actions.approveUser({
-										targetAuthId: record.user.authId,
+										targetAuthId: record.user.id,
 										approved: !record.user.isApproved,
 									}),
-								record.user.isApproved ? "Approval removed." : "User approved.",
+								record.user.isApproved
+									? "Approval removed."
+									: "User approved.",
 							)
 						}
 					>
-						{record.user.isApproved ? "Unapprove User" : "Approve User"}
+						{record.user.isApproved
+							? "Unapprove User"
+							: "Approve User"}
 					</Button>
 				</div>
 
@@ -115,7 +134,7 @@ export function AdminUserActions({
 									"assignRole",
 									() =>
 										actions.assignRoleToUser({
-											targetAuthId: record.user.authId,
+											targetAuthId: record.user.id,
 											roleId,
 										}),
 									"Role assigned.",
@@ -141,7 +160,7 @@ export function AdminUserActions({
 								onClick={() =>
 									run(
 										"unban",
-										() => actions.unbanUser(record.user.authId),
+										() => actions.unbanUser(record.user.id),
 										"User reinstated.",
 									)
 								}
@@ -154,7 +173,9 @@ export function AdminUserActions({
 							<Textarea
 								id="ban-reason"
 								value={banReason}
-								onChange={(event) => setBanReason(event.currentTarget.value)}
+								onChange={(event) =>
+									setBanReason(event.currentTarget.value)
+								}
 								placeholder="Reason visible to admins"
 							/>
 							<Button
@@ -166,8 +187,10 @@ export function AdminUserActions({
 										"ban",
 										() =>
 											actions.banUser({
-												targetAuthId: record.user.authId,
-												reason: banReason.trim() || undefined,
+												targetAuthId: record.user.id,
+												reason:
+													banReason.trim() ||
+													undefined,
 											}),
 										"User suspended.",
 									)
@@ -194,7 +217,7 @@ export function AdminUserActions({
 									"rsvpConfirm",
 									() =>
 										actions.setRsvpStatus({
-											targetAuthId: record.user.authId,
+											targetAuthId: record.user.id,
 											status: "confirmed",
 										}),
 									"RSVP marked confirmed.",
@@ -212,7 +235,7 @@ export function AdminUserActions({
 									"rsvpWaitlist",
 									() =>
 										actions.setRsvpStatus({
-											targetAuthId: record.user.authId,
+											targetAuthId: record.user.id,
 											status: "waitlisted",
 										}),
 									"RSVP moved to waitlist.",
@@ -224,11 +247,14 @@ export function AdminUserActions({
 						<Button
 							type="button"
 							variant="outline"
-							disabled={pendingAction === "rsvpPromote" || record.rsvp?.status !== "waitlisted"}
+							disabled={
+								pendingAction === "rsvpPromote" ||
+								record.rsvp?.status !== "waitlisted"
+							}
 							onClick={() =>
 								run(
 									"rsvpPromote",
-									() => actions.promoteRsvp(record.user.authId),
+									() => actions.promoteRsvp(record.user.id),
 									"Waitlisted RSVP promoted.",
 								)
 							}
@@ -238,11 +264,13 @@ export function AdminUserActions({
 						<Button
 							type="button"
 							variant="outline"
-							disabled={pendingAction === "rsvpCancel" || !record.rsvp}
+							disabled={
+								pendingAction === "rsvpCancel" || !record.rsvp
+							}
 							onClick={() =>
 								run(
 									"rsvpCancel",
-									() => actions.cancelRsvp(record.user.authId),
+									() => actions.cancelRsvp(record.user.id),
 									"RSVP cancelled.",
 								)
 							}
@@ -272,11 +300,14 @@ export function AdminRoleManager({
 	permissions?: string[];
 }) {
 	const { actions, navigation } = useHackKitUI();
-	const [pendingAction, setPendingAction] = React.useState<PendingAction>(null);
+	const [pendingAction, setPendingAction] =
+		React.useState<PendingAction>(null);
 	const [name, setName] = React.useState("");
 	const [position, setPosition] = React.useState(roles.length + 1);
 	const [color, setColor] = React.useState("");
-	const [selectedPermissions, setSelectedPermissions] = React.useState<PermissionKey[]>([]);
+	const [selectedPermissions, setSelectedPermissions] = React.useState<
+		PermissionKey[]
+	>([]);
 
 	function togglePermission(permission: PermissionKey, checked: boolean) {
 		setSelectedPermissions((existing) =>
@@ -340,7 +371,9 @@ export function AdminRoleManager({
 			<Card className="h-fit">
 				<CardHeader>
 					<CardTitle>Create Role</CardTitle>
-					<CardDescription>Add a role with explicit permissions.</CardDescription>
+					<CardDescription>
+						Add a role with explicit permissions.
+					</CardDescription>
 				</CardHeader>
 				<CardContent>
 					<form className="space-y-4" onSubmit={createRole}>
@@ -349,7 +382,9 @@ export function AdminRoleManager({
 							<Input
 								id="role-name"
 								value={name}
-								onChange={(event) => setName(event.currentTarget.value)}
+								onChange={(event) =>
+									setName(event.currentTarget.value)
+								}
 								required
 							/>
 						</div>
@@ -362,7 +397,9 @@ export function AdminRoleManager({
 									min={0}
 									value={position}
 									onChange={(event) =>
-										setPosition(event.currentTarget.valueAsNumber)
+										setPosition(
+											event.currentTarget.valueAsNumber,
+										)
 									}
 									required
 								/>
@@ -372,7 +409,9 @@ export function AdminRoleManager({
 								<Input
 									id="role-color"
 									value={color}
-									onChange={(event) => setColor(event.currentTarget.value)}
+									onChange={(event) =>
+										setColor(event.currentTarget.value)
+									}
 									placeholder="#2563eb"
 								/>
 							</div>
@@ -396,14 +435,18 @@ export function AdminRoleManager({
 												)
 											}
 										/>
-										<span className="font-mono">{permission}</span>
+										<span className="font-mono">
+											{permission}
+										</span>
 									</label>
 								))}
 							</div>
 						</div>
 						<Button
 							type="submit"
-							disabled={!name.trim() || pendingAction === "createRole"}
+							disabled={
+								!name.trim() || pendingAction === "createRole"
+							}
 						>
 							Create Role
 						</Button>
@@ -431,9 +474,9 @@ function RoleEditor({
 	const [name, setName] = React.useState(role.name);
 	const [position, setPosition] = React.useState(role.position);
 	const [color, setColor] = React.useState(role.color ?? "");
-	const [selectedPermissions, setSelectedPermissions] = React.useState<PermissionKey[]>(
-		role.permissions,
-	);
+	const [selectedPermissions, setSelectedPermissions] = React.useState<
+		PermissionKey[]
+	>(role.permissions);
 	const actionId = `updateRole:${role.id}` as const;
 
 	function togglePermission(permission: PermissionKey, checked: boolean) {
@@ -469,7 +512,8 @@ function RoleEditor({
 				<div>
 					<CardTitle>{role.name}</CardTitle>
 					<CardDescription>
-						Position {role.position} · {role.permissions.length} permissions
+						Position {role.position} · {role.permissions.length}{" "}
+						permissions
 					</CardDescription>
 				</div>
 				<Button
@@ -489,27 +533,39 @@ function RoleEditor({
 							<Input
 								id={`role-name-${role.id}`}
 								value={name}
-								onChange={(event) => setName(event.currentTarget.value)}
+								onChange={(event) =>
+									setName(event.currentTarget.value)
+								}
 								required
 							/>
 						</div>
 						<div className="space-y-2">
-							<Label htmlFor={`role-position-${role.id}`}>Position</Label>
+							<Label htmlFor={`role-position-${role.id}`}>
+								Position
+							</Label>
 							<Input
 								id={`role-position-${role.id}`}
 								type="number"
 								min={0}
 								value={position}
-								onChange={(event) => setPosition(event.currentTarget.valueAsNumber)}
+								onChange={(event) =>
+									setPosition(
+										event.currentTarget.valueAsNumber,
+									)
+								}
 								required
 							/>
 						</div>
 						<div className="space-y-2">
-							<Label htmlFor={`role-color-${role.id}`}>Color</Label>
+							<Label htmlFor={`role-color-${role.id}`}>
+								Color
+							</Label>
 							<Input
 								id={`role-color-${role.id}`}
 								value={color}
-								onChange={(event) => setColor(event.currentTarget.value)}
+								onChange={(event) =>
+									setColor(event.currentTarget.value)
+								}
 							/>
 						</div>
 					</div>
@@ -517,14 +573,24 @@ function RoleEditor({
 						<Label>Permissions</Label>
 						<div className="grid gap-2 rounded-md border p-3 sm:grid-cols-2">
 							{permissions.map((permission) => (
-								<label key={permission} className="flex items-center gap-2 text-sm">
+								<label
+									key={permission}
+									className="flex items-center gap-2 text-sm"
+								>
 									<Checkbox
-										checked={selectedPermissions.includes(permission as PermissionKey)}
+										checked={selectedPermissions.includes(
+											permission as PermissionKey,
+										)}
 										onCheckedChange={(checked) =>
-											togglePermission(permission as PermissionKey, checked === true)
+											togglePermission(
+												permission as PermissionKey,
+												checked === true,
+											)
 										}
 									/>
-									<span className="font-mono">{permission}</span>
+									<span className="font-mono">
+										{permission}
+									</span>
 								</label>
 							))}
 						</div>
diff --git a/packages/ui/src/components/admin-console.tsx b/packages/ui/src/components/admin-console.tsx
index a10a3421..c7e3d602 100644
--- a/packages/ui/src/components/admin-console.tsx
+++ b/packages/ui/src/components/admin-console.tsx
@@ -1,9 +1,19 @@
 "use client";
 
-import type { AdminOverview, AdminUserRecord, Role } from "@hackkit/core";
+import type {
+	AdminOverview,
+	AdminUserRecord,
+	Role,
+} from "@hackkit/core/client";
 import { BadgeText, formatDateTime, fullName } from "../lib/admin-console";
 import { useHackKitNavigation } from "../provider";
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "./ui/card";
+import {
+	Card,
+	CardContent,
+	CardDescription,
+	CardHeader,
+	CardTitle,
+} from "./ui/card";
 import { Button } from "./ui/button";
 import { AdminUserActions, AdminRoleManager } from "./admin-console-controls";
 
@@ -30,7 +40,9 @@ export function AdminOverviewPanel({ overview }: AdminOverviewPanelProps) {
 				{stats.map(([label, value]) => (
 					<Card key={label}>
 						<CardHeader className="pb-2">
-							<CardTitle className="text-sm font-medium">{label}</CardTitle>
+							<CardTitle className="text-sm font-medium">
+								{label}
+							</CardTitle>
 						</CardHeader>
 						<CardContent>
 							<div className="text-3xl font-bold">{value}</div>
@@ -43,13 +55,20 @@ export function AdminOverviewPanel({ overview }: AdminOverviewPanelProps) {
 				<Card>
 					<CardHeader>
 						<CardTitle>Recent Signups</CardTitle>
-						<CardDescription>New accounts over the last seven days.</CardDescription>
+						<CardDescription>
+							New accounts over the last seven days.
+						</CardDescription>
 					</CardHeader>
 					<CardContent>
 						<div className="space-y-3">
 							{overview.recentSignups.map((item) => (
-								<div key={item.date} className="grid grid-cols-[7rem_1fr_auto] items-center gap-3 text-sm">
-									<span className="font-mono text-muted-foreground">{item.date}</span>
+								<div
+									key={item.date}
+									className="grid grid-cols-[7rem_1fr_auto] items-center gap-3 text-sm"
+								>
+									<span className="font-mono text-muted-foreground">
+										{item.date}
+									</span>
 									<div className="h-2 overflow-hidden rounded-full bg-muted">
 										<div
 											className="h-full rounded-full bg-primary"
@@ -58,7 +77,9 @@ export function AdminOverviewPanel({ overview }: AdminOverviewPanelProps) {
 											}}
 										/>
 									</div>
-									<span className="font-medium">{item.count}</span>
+									<span className="font-medium">
+										{item.count}
+									</span>
 								</div>
 							))}
 						</div>
@@ -68,16 +89,20 @@ export function AdminOverviewPanel({ overview }: AdminOverviewPanelProps) {
 				<Card>
 					<CardHeader>
 						<CardTitle>Recent Users</CardTitle>
-						<CardDescription>Newest account records.</CardDescription>
+						<CardDescription>
+							Newest account records.
+						</CardDescription>
 					</CardHeader>
 					<CardContent className="space-y-3">
 						{overview.recentUsers.map((record) => (
 							<Link
-								key={record.user.authId}
-								href={routes.admin.userDetail(record.user.authId)}
+								key={record.user.id}
+								href={routes.admin.userDetail(record.user.id)}
 								className="block rounded-md border p-3 hover:bg-muted"
 							>
-								<div className="font-medium">{fullName(record)}</div>
+								<div className="font-medium">
+									{fullName(record)}
+								</div>
 								<div className="text-sm text-muted-foreground">
 									{record.user.email}
 								</div>
@@ -118,41 +143,73 @@ export function AdminUsersTable({ users, exportHref }: AdminUsersTableProps) {
 							<th className="px-4 py-3 font-medium">Role</th>
 							<th className="px-4 py-3 font-medium">Status</th>
 							<th className="px-4 py-3 font-medium">RSVP</th>
-							<th className="px-4 py-3 font-medium">Registered</th>
+							<th className="px-4 py-3 font-medium">
+								Registered
+							</th>
 							<th className="px-4 py-3 font-medium">Check-in</th>
 						</tr>
 					</thead>
 					<tbody>
 						{users.map((record) => (
-							<tr key={record.user.authId} className="border-t">
+							<tr key={record.user.id} className="border-t">
 								<td className="px-4 py-3">
 									<Link
-										href={routes.admin.userDetail(record.user.authId)}
+										href={routes.admin.userDetail(
+											record.user.id,
+										)}
 										className="font-medium hover:underline"
 									>
 										{fullName(record)}
 									</Link>
-									<div className="text-muted-foreground">{record.user.email}</div>
+									<div className="text-muted-foreground">
+										{record.user.email}
+									</div>
 									{record.user.hackTag ? (
 										<div className="font-mono text-xs text-muted-foreground">
 											@{record.user.hackTag}
 										</div>
 									) : null}
 								</td>
-								<td className="px-4 py-3">{record.role?.name ?? "No role"}</td>
+								<td className="px-4 py-3">
+									{record.role?.name ?? "No role"}
+								</td>
 								<td className="px-4 py-3">
 									<div className="flex flex-wrap gap-2">
-										<BadgeText tone={record.user.isApproved ? "success" : "muted"}>
-											{record.user.isApproved ? "Approved" : "Pending"}
+										<BadgeText
+											tone={
+												record.user.isApproved
+													? "success"
+													: "muted"
+											}
+										>
+											{record.user.isApproved
+												? "Approved"
+												: "Pending"}
 										</BadgeText>
-										{record.ban ? <BadgeText tone="danger">Suspended</BadgeText> : null}
-										{record.hacker ? <BadgeText tone="info">Hacker</BadgeText> : null}
+										{record.ban ? (
+											<BadgeText tone="danger">
+												Suspended
+											</BadgeText>
+										) : null}
+										{record.hacker ? (
+											<BadgeText tone="info">
+												Hacker
+											</BadgeText>
+										) : null}
 									</div>
 								</td>
-								<td className="px-4 py-3">{formatRsvpStatus(record.rsvp)}</td>
-								<td className="px-4 py-3">{formatDateTime(record.user.createdAt)}</td>
 								<td className="px-4 py-3">
-									{record.user.checkedInAt ? formatDateTime(record.user.checkedInAt) : "Not checked in"}
+									{formatRsvpStatus(record.rsvp)}
+								</td>
+								<td className="px-4 py-3">
+									{formatDateTime(record.user.createdAt)}
+								</td>
+								<td className="px-4 py-3">
+									{record.user.checkedInAt
+										? formatDateTime(
+												record.user.checkedInAt,
+											)
+										: "Not checked in"}
 								</td>
 							</tr>
 						))}
@@ -178,44 +235,133 @@ export function AdminUserDetail({ record, roles }: AdminUserDetailProps) {
 						<CardDescription>{record.user.email}</CardDescription>
 					</CardHeader>
 					<CardContent className="grid gap-4 sm:grid-cols-2">
-						<Detail label="Auth ID" value={record.user.authId} />
-						<Detail label="HackTag" value={record.user.hackTag ? `@${record.user.hackTag}` : "Not claimed"} />
-						<Detail label="Role" value={record.role?.name ?? "No role"} />
-						<Detail label="Joined" value={formatDateTime(record.user.createdAt)} />
-						<Detail label="Approval" value={record.user.isApproved ? "Approved" : "Pending"} />
-						<Detail label="RSVP" value={formatRsvpStatus(record.rsvp)} />
-						<Detail label="Check-in" value={record.user.checkedInAt ? formatDateTime(record.user.checkedInAt) : "Not checked in"} />
+						<Detail label="User ID" value={record.user.id} />
+						<Detail
+							label="HackTag"
+							value={
+								record.user.hackTag
+									? `@${record.user.hackTag}`
+									: "Not claimed"
+							}
+						/>
+						<Detail
+							label="Role"
+							value={record.role?.name ?? "No role"}
+						/>
+						<Detail
+							label="Joined"
+							value={formatDateTime(record.user.createdAt)}
+						/>
+						<Detail
+							label="Approval"
+							value={
+								record.user.isApproved ? "Approved" : "Pending"
+							}
+						/>
+						<Detail
+							label="RSVP"
+							value={formatRsvpStatus(record.rsvp)}
+						/>
+						<Detail
+							label="Check-in"
+							value={
+								record.user.checkedInAt
+									? formatDateTime(record.user.checkedInAt)
+									: "Not checked in"
+							}
+						/>
 					</CardContent>
 				</Card>
 
 				<Card>
 					<CardHeader>
 						<CardTitle>Hacker Registration</CardTitle>
-						<CardDescription>Competition registration fields.</CardDescription>
+						<CardDescription>
+							Competition registration fields.
+						</CardDescription>
 					</CardHeader>
 					<CardContent className="grid gap-4 sm:grid-cols-2">
-						<Detail label="University" value={record.hacker?.university ?? "Not registered"} />
-						<Detail label="Major" value={record.hacker?.major ?? ""} />
-						<Detail label="Level of Study" value={record.hacker?.levelOfStudy ?? ""} />
-						<Detail label="Hackathons Attended" value={record.hacker ? String(record.hacker.hackathonsAttended) : ""} />
-						<Detail label="Experience" value={record.hacker?.softwareExperience ?? ""} />
-						<Detail label="Group" value={record.hacker?.group ?? ""} />
-						<Detail label="Resume" value={record.hacker?.resumeUrl ?? ""} />
+						<Detail
+							label="University"
+							value={
+								record.hacker?.university ?? "Not registered"
+							}
+						/>
+						<Detail
+							label="Major"
+							value={record.hacker?.major ?? ""}
+						/>
+						<Detail
+							label="Level of Study"
+							value={record.hacker?.levelOfStudy ?? ""}
+						/>
+						<Detail
+							label="Hackathons Attended"
+							value={
+								record.hacker
+									? String(record.hacker.hackathonsAttended)
+									: ""
+							}
+						/>
+						<Detail
+							label="Experience"
+							value={record.hacker?.softwareExperience ?? ""}
+						/>
+						<Detail
+							label="Group"
+							value={record.hacker?.group ?? ""}
+						/>
+						<Detail
+							label="Resume"
+							value={record.hacker?.resumeUrl ?? ""}
+						/>
 					</CardContent>
 				</Card>
 
 				<Card>
 					<CardHeader>
 						<CardTitle>User Data</CardTitle>
-						<CardDescription>Participant account and event data.</CardDescription>
+						<CardDescription>
+							Participant account and event data.
+						</CardDescription>
 					</CardHeader>
 					<CardContent className="grid gap-4 sm:grid-cols-2">
-						<Detail label="Age" value={record.userData ? String(record.userData.age) : "Not completed"} />
-						<Detail label="Shirt Size" value={record.userData?.shirtSize ?? ""} />
-						<Detail label="Dietary Restrictions" value={record.userData?.dietaryRestrictions.join(", ") ?? ""} />
-						<Detail label="Phone" value={record.userData?.phoneNumber ?? ""} />
-						<Detail label="Country" value={record.userData?.countryOfResidence ?? ""} />
-						<Detail label="Emailable" value={record.userData ? String(record.userData.isEmailable) : ""} />
+						<Detail
+							label="Age"
+							value={
+								record.userData
+									? String(record.userData.age)
+									: "Not completed"
+							}
+						/>
+						<Detail
+							label="Shirt Size"
+							value={record.userData?.shirtSize ?? ""}
+						/>
+						<Detail
+							label="Dietary Restrictions"
+							value={
+								record.userData?.dietaryRestrictions.join(
+									", ",
+								) ?? ""
+							}
+						/>
+						<Detail
+							label="Phone"
+							value={record.userData?.phoneNumber ?? ""}
+						/>
+						<Detail
+							label="Country"
+							value={record.userData?.countryOfResidence ?? ""}
+						/>
+						<Detail
+							label="Emailable"
+							value={
+								record.userData
+									? String(record.userData.isEmailable)
+									: ""
+							}
+						/>
 					</CardContent>
 				</Card>
 			</div>
diff --git a/packages/ui/src/components/check-in-scanner.tsx b/packages/ui/src/components/check-in-scanner.tsx
index 75cb0678..46e2315a 100644
--- a/packages/ui/src/components/check-in-scanner.tsx
+++ b/packages/ui/src/components/check-in-scanner.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import type { User } from "@hackkit/core";
+import type { User } from "@hackkit/core/client";
 import { Scanner } from "@yudiel/react-qr-scanner";
 import * as React from "react";
 import { toast } from "sonner";
@@ -61,7 +61,7 @@ export function CheckInScanner({ className, onDone }: CheckInScannerProps) {
 		if (!targetUser) return;
 
 		setLoading(true);
-		const result = await actions.clearCheckIn(targetUser.authId);
+		const result = await actions.clearCheckIn(targetUser.id);
 		setLoading(false);
 
 		if (!result.ok) {
@@ -77,12 +77,18 @@ export function CheckInScanner({ className, onDone }: CheckInScannerProps) {
 	}
 
 	return (
-		<div className={cn("mx-auto flex w-full max-w-lg flex-col gap-6", className)}>
+		<div
+			className={cn(
+				"mx-auto flex w-full max-w-lg flex-col gap-6",
+				className,
+			)}
+		>
 			<Card>
 				<CardHeader>
 					<CardTitle>Hackathon Check-in</CardTitle>
 					<CardDescription>
-						Scan a participant&apos;s Event Pass QR code once at arrival.
+						Scan a participant&apos;s Event Pass QR code once at
+						arrival.
 					</CardDescription>
 				</CardHeader>
 				<CardContent>
@@ -100,9 +106,7 @@ export function CheckInScanner({ className, onDone }: CheckInScannerProps) {
 			{targetUser ? (
 				<Card>
 					<CardHeader>
-						<CardTitle>
-							{targetUser.firstName} {targetUser.lastName}
-						</CardTitle>
+						<CardTitle>{targetUser.name}</CardTitle>
 						<CardDescription>{targetUser.email}</CardDescription>
 					</CardHeader>
 					<CardContent className="space-y-4">
diff --git a/packages/ui/src/components/event-admin-list.tsx b/packages/ui/src/components/event-admin-list.tsx
index 1271944e..d2f287a7 100644
--- a/packages/ui/src/components/event-admin-list.tsx
+++ b/packages/ui/src/components/event-admin-list.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import type { Event, EventTypes } from "@hackkit/core";
+import type { Event, EventTypes } from "@hackkit/core/client";
 import { cn } from "../lib/cn";
 import { useHackKitNavigation } from "../provider";
 
@@ -63,7 +63,9 @@ export function EventAdminList({
 										Edit
 									</Link>
 									<Link
-										href={routes.admin.eventScanner(event.id)}
+										href={routes.admin.eventScanner(
+											event.id,
+										)}
 										className="text-primary hover:underline"
 									>
 										Scanner
diff --git a/packages/ui/src/components/event-pass.tsx b/packages/ui/src/components/event-pass.tsx
index d0c22821..59a97ade 100644
--- a/packages/ui/src/components/event-pass.tsx
+++ b/packages/ui/src/components/event-pass.tsx
@@ -2,7 +2,7 @@
 
 import * as React from "react";
 import { QRCodeSVG } from "qrcode.react";
-import type { User } from "@hackkit/core";
+import type { User } from "@hackkit/core/client";
 import { cn } from "../lib/cn";
 import { Button } from "./ui/button";
 import {
@@ -36,10 +36,10 @@ export function EventPass({
 			</CardHeader>
 			<CardContent className="space-y-6">
 				<div className="space-y-1 text-center">
-					<p className="text-lg font-semibold">
-						{user.firstName} {user.lastName}
+					<p className="text-lg font-semibold">{user.name}</p>
+					<p className="text-sm text-muted-foreground">
+						{user.email}
 					</p>
-					<p className="text-sm text-muted-foreground">{user.email}</p>
 					{user.checkedInAt ? (
 						<p className="text-sm font-medium text-emerald-600">
 							Checked in
diff --git a/packages/ui/src/components/event-scanner.tsx b/packages/ui/src/components/event-scanner.tsx
index 1e66fe7a..84457822 100644
--- a/packages/ui/src/components/event-scanner.tsx
+++ b/packages/ui/src/components/event-scanner.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import type { EventScan, User } from "@hackkit/core";
+import type { EventScan, User } from "@hackkit/core/client";
 import { Scanner } from "@yudiel/react-qr-scanner";
 import * as React from "react";
 import { toast } from "sonner";
@@ -72,7 +72,12 @@ export function EventScanner({ event, className, onDone }: EventScannerProps) {
 	}
 
 	return (
-		<div className={cn("mx-auto flex w-full max-w-lg flex-col gap-6", className)}>
+		<div
+			className={cn(
+				"mx-auto flex w-full max-w-lg flex-col gap-6",
+				className,
+			)}
+		>
 			<Card>
 				<CardHeader>
 					<CardTitle>{event.title}</CardTitle>
@@ -93,16 +98,16 @@ export function EventScanner({ event, className, onDone }: EventScannerProps) {
 			{targetUser ? (
 				<Card>
 					<CardHeader>
-						<CardTitle>
-							{targetUser.firstName} {targetUser.lastName}
-						</CardTitle>
+						<CardTitle>{targetUser.name}</CardTitle>
 						<CardDescription>{targetUser.email}</CardDescription>
 					</CardHeader>
 					<CardContent className="space-y-4">
 						{priorScans.length > 0 ? (
 							<p className="text-sm font-medium text-amber-700">
-								This participant was already scanned {priorScans.length}{" "}
-								time{priorScans.length === 1 ? "" : "s"} for this event.
+								This participant was already scanned{" "}
+								{priorScans.length} time
+								{priorScans.length === 1 ? "" : "s"} for this
+								event.
 							</p>
 						) : null}
 						<div className="flex gap-2">
diff --git a/packages/ui/src/components/hack-tag-form.tsx b/packages/ui/src/components/hack-tag-form.tsx
index f699f55c..6824c1ee 100644
--- a/packages/ui/src/components/hack-tag-form.tsx
+++ b/packages/ui/src/components/hack-tag-form.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import * as React from "react";
-import { claimHackTagSchema, type User } from "@hackkit/core";
+import { claimHackTagSchema, type User } from "@hackkit/core/client";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
@@ -72,8 +72,7 @@ export function HackTagForm({
 			<CardHeader>
 				<CardTitle>Claim your HackTag</CardTitle>
 				<CardDescription>
-					Choose a public handle for {currentUser.firstName}{" "}
-					{currentUser.lastName}.
+					Choose a public handle for {currentUser.name}.
 				</CardDescription>
 			</CardHeader>
 			<CardContent>
diff --git a/packages/ui/src/components/hackathon-settings-form.tsx b/packages/ui/src/components/hackathon-settings-form.tsx
index 56c7342b..1e203eae 100644
--- a/packages/ui/src/components/hackathon-settings-form.tsx
+++ b/packages/ui/src/components/hackathon-settings-form.tsx
@@ -5,7 +5,10 @@ import { toast } from "sonner";
 import { cn } from "../lib/cn";
 import { useHackKitUI } from "../provider";
 import type { HackathonSettingsFormProps } from "../types";
-import type { ResolvedHackathonSetting, SettingKey } from "@hackkit/core";
+import type {
+	ResolvedHackathonSetting,
+	SettingKey,
+} from "@hackkit/core/client";
 import { Button } from "./ui/button";
 import {
 	Card,
diff --git a/packages/ui/src/components/hacker-registration-form.tsx b/packages/ui/src/components/hacker-registration-form.tsx
index 03479973..9137507e 100644
--- a/packages/ui/src/components/hacker-registration-form.tsx
+++ b/packages/ui/src/components/hacker-registration-form.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import * as React from "react";
-import { registerHackerSchema, type User } from "@hackkit/core";
+import { registerHackerSchema, type User } from "@hackkit/core/client";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
@@ -29,7 +29,7 @@ import {
 } from "./ui/select";
 
 const hackerRegistrationFormSchema = registerHackerSchema
-	.omit({ authId: true, group: true })
+	.omit({ userId: true, group: true })
 	.extend({
 		githubUrl: z
 			.union([z.string().url(), z.literal("")])
@@ -190,8 +190,7 @@ export function HackerRegistrationForm({
 			<CardHeader>
 				<CardTitle>Hacker Registration</CardTitle>
 				<CardDescription>
-					Competitor details for {currentUser.firstName}{" "}
-					{currentUser.lastName}
+					Competitor details for {currentUser.name}
 					{currentUser.hackTag ? ` (@${currentUser.hackTag})` : ""}.
 				</CardDescription>
 			</CardHeader>
diff --git a/packages/ui/src/components/public-profile-card.tsx b/packages/ui/src/components/public-profile-card.tsx
index c02c6352..f0be5344 100644
--- a/packages/ui/src/components/public-profile-card.tsx
+++ b/packages/ui/src/components/public-profile-card.tsx
@@ -1,4 +1,4 @@
-import type { PublicUserProfile } from "@hackkit/core";
+import type { PublicUserProfile } from "@hackkit/core/client";
 import { cn } from "../lib/cn";
 import {
 	Card,
@@ -17,11 +17,16 @@ function formatUrlLabel(url: string) {
 	return url.replace(/^https?:\/\//, "").replace(/\/$/, "");
 }
 
-export function PublicProfileCard({ profile, className }: PublicProfileCardProps) {
+export function PublicProfileCard({
+	profile,
+	className,
+}: PublicProfileCardProps) {
 	const { user, hacker, role } = profile;
 	const links = [
 		hacker?.githubUrl ? { label: "GitHub", href: hacker.githubUrl } : null,
-		hacker?.linkedInUrl ? { label: "LinkedIn", href: hacker.linkedInUrl } : null,
+		hacker?.linkedInUrl
+			? { label: "LinkedIn", href: hacker.linkedInUrl }
+			: null,
 		hacker?.personalWebsiteUrl
 			? { label: "Website", href: hacker.personalWebsiteUrl }
 			: null,
@@ -39,16 +44,15 @@ export function PublicProfileCard({ profile, className }: PublicProfileCardProps
 					/>
 				) : (
 					<div className="grid h-24 w-24 place-items-center rounded-full bg-muted text-2xl font-semibold">
-						{user.firstName[0]}
-						{user.lastName[0]}
+						{user.name.slice(0, 2).toUpperCase()}
 					</div>
 				)}
 				<div>
-					<CardTitle className="text-3xl">
-						{user.firstName} {user.lastName}
-					</CardTitle>
+					<CardTitle className="text-3xl">{user.name}</CardTitle>
 					<CardDescription>
-						{user.hackTag ? `@${user.hackTag}` : "HackKit participant"}
+						{user.hackTag
+							? `@${user.hackTag}`
+							: "HackKit participant"}
 						{user.pronouns ? `, ${user.pronouns}` : ""}
 						{role ? `, ${role.name}` : ""}
 					</CardDescription>
diff --git a/packages/ui/src/components/public-shell.tsx b/packages/ui/src/components/public-shell.tsx
index df02d4cb..bff7762a 100644
--- a/packages/ui/src/components/public-shell.tsx
+++ b/packages/ui/src/components/public-shell.tsx
@@ -1,5 +1,5 @@
 import type * as React from "react";
-import type { Event } from "@hackkit/core";
+import type { Event } from "@hackkit/core/client";
 import { cn } from "../lib/cn";
 
 export type PublicShellLink = {
@@ -152,16 +152,28 @@ export function PublicLandingPage({
 					<div className="rounded-3xl border bg-card p-6 shadow-sm">
 						<div className="grid gap-4 sm:grid-cols-2">
 							{stats.map((stat) => (
-								<div key={stat.label} className="rounded-2xl bg-muted/50 p-4">
-									<p className="text-3xl font-black">{stat.value}</p>
-									<p className="text-sm text-muted-foreground">{stat.label}</p>
+								<div
+									key={stat.label}
+									className="rounded-2xl bg-muted/50 p-4"
+								>
+									<p className="text-3xl font-black">
+										{stat.value}
+									</p>
+									<p className="text-sm text-muted-foreground">
+										{stat.label}
+									</p>
 								</div>
 							))}
 						</div>
 						<div className="mt-6 space-y-3">
 							{highlights.map((item) => (
-								<div key={item.title} className="rounded-2xl border bg-background p-4">
-									<h2 className="font-semibold">{item.title}</h2>
+								<div
+									key={item.title}
+									className="rounded-2xl border bg-background p-4"
+								>
+									<h2 className="font-semibold">
+										{item.title}
+									</h2>
 									<p className="mt-1 text-sm text-muted-foreground">
 										{item.description}
 									</p>
@@ -175,8 +187,13 @@ export function PublicLandingPage({
 			{sections.length > 0 ? (
 				<section className="mx-auto grid max-w-6xl gap-4 px-6 py-16 md:grid-cols-3">
 					{sections.map((section) => (
-						<article key={section.title} className="rounded-2xl border bg-card p-6">
-							<h2 className="text-xl font-semibold">{section.title}</h2>
+						<article
+							key={section.title}
+							className="rounded-2xl border bg-card p-6"
+						>
+							<h2 className="text-xl font-semibold">
+								{section.title}
+							</h2>
 							<p className="mt-3 text-sm leading-6 text-muted-foreground">
 								{section.description}
 							</p>
@@ -204,13 +221,17 @@ export function PublicSiteFooter({
 						{description}
 					</p>
 					{copyright ? (
-						<p className="text-xs text-muted-foreground">{copyright}</p>
+						<p className="text-xs text-muted-foreground">
+							{copyright}
+						</p>
 					) : null}
 				</div>
 				<div className="grid gap-6 sm:grid-cols-2">
 					{linkGroups.map((group) => (
 						<div key={group.title} className="space-y-3">
-							<p className="text-sm font-semibold">{group.title}</p>
+							<p className="text-sm font-semibold">
+								{group.title}
+							</p>
 							<div className="grid gap-2 text-sm">
 								{group.links.map((link) =>
 									renderLink(
@@ -238,7 +259,9 @@ export function PublicHelpPage({
 		<main className={cn("min-h-screen px-6 py-16", className)}>
 			<div className="mx-auto max-w-5xl space-y-10">
 				<div className="max-w-3xl space-y-3">
-					<h1 className="text-4xl font-black tracking-tight">{title}</h1>
+					<h1 className="text-4xl font-black tracking-tight">
+						{title}
+					</h1>
 					<p className="text-lg leading-8 text-muted-foreground">
 						{description}
 					</p>
@@ -252,7 +275,9 @@ export function PublicHelpPage({
 							rel={contact.external ? "noreferrer" : undefined}
 							className="rounded-2xl border bg-card p-6 shadow-sm transition hover:border-primary/50"
 						>
-							<h2 className="text-xl font-semibold">{contact.label}</h2>
+							<h2 className="text-xl font-semibold">
+								{contact.label}
+							</h2>
 							{contact.description ? (
 								<p className="mt-2 text-sm leading-6 text-muted-foreground">
 									{contact.description}
@@ -312,8 +337,8 @@ export function ParticipantDashboard({
 						Welcome, {participantName}
 					</h1>
 					<p className="mt-3 max-w-2xl text-muted-foreground">
-						Use this dashboard for your event pass, schedule, RSVP, team links,
-						settings, and day-of help.
+						Use this dashboard for your event pass, schedule, RSVP,
+						team links, settings, and day-of help.
 					</p>
 					<div className="mt-6 flex flex-wrap gap-3">
 						{primaryActions.map((action) =>
@@ -328,14 +353,20 @@ export function ParticipantDashboard({
 				{onboarding ? (
 					<section className="rounded-2xl border bg-muted/30 p-5">
 						<div className="space-y-1">
-							<h2 className="text-xl font-semibold">Continue onboarding</h2>
+							<h2 className="text-xl font-semibold">
+								Continue onboarding
+							</h2>
 							<p className="text-sm text-muted-foreground">
-								Finish registration to unlock the full participant experience.
+								Finish registration to unlock the full
+								participant experience.
 							</p>
 						</div>
 						<div className="mt-4">{onboarding.progress}</div>
 						{renderLink(
-							{ href: onboarding.nextHref, label: "Continue registration" },
+							{
+								href: onboarding.nextHref,
+								label: "Continue registration",
+							},
 							"mt-4 inline-flex text-sm font-medium text-primary hover:underline",
 						)}
 					</section>
@@ -350,8 +381,12 @@ export function ParticipantDashboard({
 									key={item.label}
 									className="flex items-center justify-between gap-4 rounded-xl bg-muted/40 px-4 py-3"
 								>
-									<dt className="text-sm text-muted-foreground">{item.label}</dt>
-									<dd className="text-sm font-medium">{item.value}</dd>
+									<dt className="text-sm text-muted-foreground">
+										{item.label}
+									</dt>
+									<dd className="text-sm font-medium">
+										{item.value}
+									</dd>
 								</div>
 							))}
 						</dl>
@@ -363,11 +398,19 @@ export function ParticipantDashboard({
 								<a
 									key={resource.href}
 									href={resource.href}
-									target={resource.external ? "_blank" : undefined}
-									rel={resource.external ? "noreferrer" : undefined}
+									target={
+										resource.external ? "_blank" : undefined
+									}
+									rel={
+										resource.external
+											? "noreferrer"
+											: undefined
+									}
 									className="rounded-xl border bg-background p-4 transition hover:border-primary/50"
 								>
-									<p className="font-medium">{resource.label}</p>
+									<p className="font-medium">
+										{resource.label}
+									</p>
 									{resource.description ? (
 										<p className="mt-1 text-sm text-muted-foreground">
 											{resource.description}
@@ -394,7 +437,10 @@ export function ScheduleDetail({
 	return (
 		<main className={cn("min-h-screen px-6 py-10", className)}>
 			<article className="mx-auto max-w-3xl space-y-6 rounded-3xl border bg-card p-6 shadow-sm md:p-8">
-				<a href={backHref} className="text-sm font-medium text-primary hover:underline">
+				<a
+					href={backHref}
+					className="text-sm font-medium text-primary hover:underline"
+				>
 					Back to schedule
 				</a>
 				<div className="space-y-4">
@@ -405,7 +451,9 @@ export function ScheduleDetail({
 						{typeLabel}
 					</span>
 					<div>
-						<h1 className="text-4xl font-black tracking-tight">{event.title}</h1>
+						<h1 className="text-4xl font-black tracking-tight">
+							{event.title}
+						</h1>
 						<p className="mt-3 text-muted-foreground">
 							{formatEventDateTime(event.startTime)} to{" "}
 							{formatEventDateTime(event.endTime)}
@@ -428,7 +476,9 @@ export function ScheduleDetail({
 						</div>
 					) : null}
 				</div>
-				<p className="leading-7 text-muted-foreground">{event.description}</p>
+				<p className="leading-7 text-muted-foreground">
+					{event.description}
+				</p>
 				{actions.length > 0 ? (
 					<div className="flex flex-wrap gap-3">
 						{actions.map((action) =>
diff --git a/packages/ui/src/components/rsvp-confirmation.tsx b/packages/ui/src/components/rsvp-confirmation.tsx
index 3f6e7070..086d97b9 100644
--- a/packages/ui/src/components/rsvp-confirmation.tsx
+++ b/packages/ui/src/components/rsvp-confirmation.tsx
@@ -54,13 +54,15 @@ export function RsvpConfirmation({
 			<CardHeader>
 				<CardTitle>RSVP</CardTitle>
 				<CardDescription>
-					Confirm that you plan to attend. RSVP is separate from organiser
-					approval and event check-in.
+					Confirm that you plan to attend. RSVP is separate from
+					organiser approval and event check-in.
 				</CardDescription>
 			</CardHeader>
 			<CardContent className="space-y-4">
 				<div className="rounded-md border p-4">
-					<p className="font-medium">{statusTitle(currentRsvp, summary)}</p>
+					<p className="font-medium">
+						{statusTitle(currentRsvp, summary)}
+					</p>
 					<p className="mt-1 text-sm text-muted-foreground">
 						{statusDescription(currentRsvp, summary)}
 					</p>
@@ -68,7 +70,10 @@ export function RsvpConfirmation({
 
 				<div className="grid gap-3 text-sm sm:grid-cols-3">
 					<Metric label="Confirmed" value={summary.confirmedCount} />
-					<Metric label="Waitlisted" value={summary.waitlistedCount} />
+					<Metric
+						label="Waitlisted"
+						value={summary.waitlistedCount}
+					/>
 					<Metric
 						label="Available"
 						value={
diff --git a/packages/ui/src/components/schedule-list.tsx b/packages/ui/src/components/schedule-list.tsx
index dc3a4472..c6e9f8fe 100644
--- a/packages/ui/src/components/schedule-list.tsx
+++ b/packages/ui/src/components/schedule-list.tsx
@@ -1,9 +1,11 @@
-import type { EventTypes } from "@hackkit/core";
+import type { EventTypes } from "@hackkit/core/client";
 import { cn } from "../lib/cn";
 import type { ScheduleListProps } from "../types";
 
 function getEventTypeColor(eventTypes: EventTypes, type: string): string {
-	return eventTypes.find((option) => option.value === type)?.color ?? "#795548";
+	return (
+		eventTypes.find((option) => option.value === type)?.color ?? "#795548"
+	);
 }
 
 function getEventTypeLabel(eventTypes: EventTypes, type: string): string {
@@ -43,7 +45,9 @@ export function ScheduleList({
 				>
 					<div className="flex flex-wrap items-start justify-between gap-3">
 						<div className="space-y-1">
-							<h2 className="text-lg font-semibold">{event.title}</h2>
+							<h2 className="text-lg font-semibold">
+								{event.title}
+							</h2>
 							<p className="text-sm text-muted-foreground">
 								{formatDateTime(event.startTime)} –{" "}
 								{formatDateTime(event.endTime)}
diff --git a/packages/ui/src/components/user-data-form.tsx b/packages/ui/src/components/user-data-form.tsx
index 9b2a44c0..2d47c8ef 100644
--- a/packages/ui/src/components/user-data-form.tsx
+++ b/packages/ui/src/components/user-data-form.tsx
@@ -5,7 +5,7 @@ import {
 	createCompleteUserDataSchema,
 	type User,
 	type UserDataOptions,
-} from "@hackkit/core";
+} from "@hackkit/core/client";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { useForm, type UseFormReturn } from "react-hook-form";
 import { toast } from "sonner";
@@ -368,8 +368,8 @@ export function UserDataForm({
 			<CardHeader>
 				<CardTitle>User Data</CardTitle>
 				<CardDescription>
-					Completing registration as {currentUser.firstName}{" "}
-					{currentUser.lastName} ({currentUser.email}).
+					Completing registration as {currentUser.name} (
+					{currentUser.email}).
 				</CardDescription>
 			</CardHeader>
 			<CardContent>
diff --git a/packages/ui/src/components/user-profile-settings-form.tsx b/packages/ui/src/components/user-profile-settings-form.tsx
index 7da9af77..0861c786 100644
--- a/packages/ui/src/components/user-profile-settings-form.tsx
+++ b/packages/ui/src/components/user-profile-settings-form.tsx
@@ -1,7 +1,7 @@
 "use client";
 
 import * as React from "react";
-import { updateUserProfileSchema, type User } from "@hackkit/core";
+import { updateUserProfileSchema, type User } from "@hackkit/core/client";
 import { zodResolver } from "@hookform/resolvers/zod";
 import { useForm } from "react-hook-form";
 import { toast } from "sonner";
@@ -23,8 +23,7 @@ import { Label } from "./ui/label";
 import { Textarea } from "./ui/textarea";
 
 const formSchema = updateUserProfileSchema.omit({ authId: true }).extend({
-	firstName: z.string().min(1).max(100),
-	lastName: z.string().min(1).max(100),
+	name: z.string().trim().min(1).max(200),
 	hackTag: z.string().min(1).max(50),
 	skillsText: z.string().optional(),
 });
@@ -55,8 +54,7 @@ function textToSkills(value?: string) {
 
 function userToFormValues(user: User): FormValues {
 	return {
-		firstName: user.firstName,
-		lastName: user.lastName,
+		name: user.name,
 		hackTag: user.hackTag ?? "",
 		bio: user.bio ?? "",
 		pronouns: user.pronouns ?? "",
@@ -113,8 +111,7 @@ export function UserProfileSettingsForm({
 		}
 
 		const payload: UserProfileFormValues = {
-			firstName: values.firstName,
-			lastName: values.lastName,
+			name: values.name,
 			hackTag: values.hackTag,
 			bio: values.bio,
 			pronouns: values.pronouns,
@@ -154,7 +151,9 @@ export function UserProfileSettingsForm({
 				<form
 					className="space-y-6"
 					onSubmit={form.handleSubmit(onSubmit, () => {
-						toast.error("Please correct the highlighted profile fields.");
+						toast.error(
+							"Please correct the highlighted profile fields.",
+						);
 					})}
 				>
 					<div className="flex items-center gap-4">
@@ -167,8 +166,7 @@ export function UserProfileSettingsForm({
 							/>
 						) : (
 							<div className="grid h-20 w-20 place-items-center rounded-full bg-muted text-lg font-semibold">
-								{currentUser.firstName[0]}
-								{currentUser.lastName[0]}
+								{currentUser.name.slice(0, 2).toUpperCase()}
 							</div>
 						)}
 						{uploadProfilePhoto ? (
@@ -192,27 +190,10 @@ export function UserProfileSettingsForm({
 
 					<div className="grid gap-4 md:grid-cols-2">
 						<div className="space-y-2">
-							<Label htmlFor="firstName">First name</Label>
-							<Input
-								id="firstName"
-								{...form.register("firstName")}
-							/>
-							<FieldError
-								message={
-									form.formState.errors.firstName?.message
-								}
-							/>
-						</div>
-						<div className="space-y-2">
-							<Label htmlFor="lastName">Last name</Label>
-							<Input
-								id="lastName"
-								{...form.register("lastName")}
-							/>
+							<Label htmlFor="name">Display name</Label>
+							<Input id="name" {...form.register("name")} />
 							<FieldError
-								message={
-									form.formState.errors.lastName?.message
-								}
+								message={form.formState.errors.name?.message}
 							/>
 						</div>
 						<div className="space-y-2">
diff --git a/packages/ui/src/event-pass.ts b/packages/ui/src/event-pass.ts
index 8adbd764..23e58f52 100644
--- a/packages/ui/src/event-pass.ts
+++ b/packages/ui/src/event-pass.ts
@@ -1,5 +1,5 @@
-import { HackKitError } from "@hackkit/core";
-import type { AuthId } from "@hackkit/core";
+import { HackKitError } from "@hackkit/core/client";
+import type { AuthId } from "@hackkit/core/client";
 
 export const DEFAULT_EVENT_PASS_QR_TTL_MS = 5 * 60 * 1000;
 
@@ -27,7 +27,10 @@ export function parseEventPassQrPayload(raw: string): {
 	try {
 		parsed = JSON.parse(raw);
 	} catch {
-		throw new HackKitError("VALIDATION_ERROR", "Invalid Event Pass QR code.");
+		throw new HackKitError(
+			"VALIDATION_ERROR",
+			"Invalid Event Pass QR code.",
+		);
 	}
 
 	if (
@@ -38,7 +41,10 @@ export function parseEventPassQrPayload(raw: string): {
 		typeof (parsed as EventPassQrPayload).authId !== "string" ||
 		typeof (parsed as EventPassQrPayload).qrIssuedAt !== "number"
 	) {
-		throw new HackKitError("VALIDATION_ERROR", "Invalid Event Pass QR code.");
+		throw new HackKitError(
+			"VALIDATION_ERROR",
+			"Invalid Event Pass QR code.",
+		);
 	}
 
 	const payload = parsed as EventPassQrPayload;
@@ -54,7 +60,10 @@ export function validateEventPassQrIssuedAt(
 	ttlMs: number,
 ): void {
 	if (Number.isNaN(qrIssuedAt.getTime())) {
-		throw new HackKitError("VALIDATION_ERROR", "Invalid Event Pass QR code.");
+		throw new HackKitError(
+			"VALIDATION_ERROR",
+			"Invalid Event Pass QR code.",
+		);
 	}
 
 	if (now.getTime() - qrIssuedAt.getTime() > ttlMs) {
@@ -65,7 +74,10 @@ export function validateEventPassQrIssuedAt(
 	}
 
 	if (qrIssuedAt.getTime() > now.getTime() + 60_000) {
-		throw new HackKitError("VALIDATION_ERROR", "Invalid Event Pass QR code.");
+		throw new HackKitError(
+			"VALIDATION_ERROR",
+			"Invalid Event Pass QR code.",
+		);
 	}
 }
 
diff --git a/packages/ui/src/index.ts b/packages/ui/src/index.ts
index 0fc9e2a2..e67589d4 100644
--- a/packages/ui/src/index.ts
+++ b/packages/ui/src/index.ts
@@ -34,9 +34,7 @@ export type {
 	CompetitorOnboardingStepId,
 } from "./lib/onboarding-steps";
 export { UserDataFields, UserDataForm } from "./components/user-data-form";
-export type {
-	UserDataFormProps,
-} from "./components/user-data-form";
+export type { UserDataFormProps } from "./components/user-data-form";
 export { UserProfileSettingsForm } from "./components/user-profile-settings-form";
 export type { UserProfileSettingsFormProps } from "./components/user-profile-settings-form";
 export { PublicProfileCard } from "./components/public-profile-card";
diff --git a/packages/ui/src/lib/admin-console.tsx b/packages/ui/src/lib/admin-console.tsx
index 539814ff..27fcbbfc 100644
--- a/packages/ui/src/lib/admin-console.tsx
+++ b/packages/ui/src/lib/admin-console.tsx
@@ -1,9 +1,9 @@
-import type { AdminUserRecord } from "@hackkit/core";
+import type { AdminUserRecord } from "@hackkit/core/client";
 import type * as React from "react";
 import { cn } from "./cn";
 
 export function fullName(record: AdminUserRecord): string {
-	return `${record.user.firstName} ${record.user.lastName}`.trim();
+	return record.user.name;
 }
 
 export function formatDateTime(date: Date): string {
diff --git a/packages/ui/src/lib/onboarding-steps.ts b/packages/ui/src/lib/onboarding-steps.ts
index 091658fe..04ad967e 100644
--- a/packages/ui/src/lib/onboarding-steps.ts
+++ b/packages/ui/src/lib/onboarding-steps.ts
@@ -1,4 +1,4 @@
-import type { Hacker, User, UserData } from "@hackkit/core";
+import type { Hacker, User, UserData } from "@hackkit/core/client";
 import {
 	DEFAULT_HACKKIT_UI_ROUTES,
 	type HackKitUIRoutes,
@@ -44,7 +44,9 @@ const STEP_LABELS: Record<CompetitorOnboardingStepId, string> = {
 	approval: "Approval",
 };
 
-function stepHrefs(routes: HackKitUIRoutes): Record<CompetitorOnboardingStepId, string> {
+function stepHrefs(
+	routes: HackKitUIRoutes,
+): Record<CompetitorOnboardingStepId, string> {
 	return {
 		hacktag: routes.onboarding.hacktag,
 		"user-data": routes.onboarding.userData,
diff --git a/packages/ui/src/navigation.ts b/packages/ui/src/navigation.ts
index f8322d39..1ba1fa86 100644
--- a/packages/ui/src/navigation.ts
+++ b/packages/ui/src/navigation.ts
@@ -40,8 +40,7 @@ export const DEFAULT_HACKKIT_UI_ROUTES: HackKitUIRoutes = {
 		events: "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/admin/events",
 		eventEdit: (eventId) => `/admin/events/${eventId}/edit`,
 		eventScanner: (eventId) => `/admin/scanner/${eventId}`,
-		userDetail: (authId) =>
-			`/admin/users/${encodeURIComponent(authId)}`,
+		userDetail: (authId) => `/admin/users/${encodeURIComponent(authId)}`,
 	},
 };
 
diff --git a/packages/ui/src/types.ts b/packages/ui/src/types.ts
index 5bc8bb03..ff24eb9d 100644
--- a/packages/ui/src/types.ts
+++ b/packages/ui/src/types.ts
@@ -10,7 +10,7 @@ import type {
 	RsvpSummary,
 	SettingKey,
 	User,
-} from "@hackkit/core";
+} from "@hackkit/core/client";
 import type { HackKitActionResult } from "./actions";
 
 export type {
@@ -21,7 +21,7 @@ export type {
 	RsvpSummary,
 	SettingKey,
 	UserDataOptions,
-} from "@hackkit/core";
+} from "@hackkit/core/client";
 
 export type UserDataFormValues = {
 	age: number;
@@ -43,8 +43,7 @@ export type HackTagFormValues = {
 };
 
 export type UserProfileFormValues = {
-	firstName: string;
-	lastName: string;
+	name: string;
 	hackTag: string;
 	bio?: string;
 	pronouns?: string;
@@ -98,7 +97,10 @@ export type CheckInUserInput = {
 	rawQr: string;
 };
 
-export type SetSettingsInput = readonly { key: SettingKey; value: boolean | number }[];
+export type SetSettingsInput = readonly {
+	key: SettingKey;
+	value: boolean | number;
+}[];
 
 export type ApproveUserInput = {
 	targetAuthId: string;
@@ -140,9 +142,7 @@ export type HackKitUIActions = {
 	completeUserData: (
 		values: UserDataFormValues,
 	) => Promise<HackKitActionResult>;
-	claimHackTag: (
-		values: HackTagFormValues,
-	) => Promise<HackKitActionResult>;
+	claimHackTag: (values: HackTagFormValues) => Promise<HackKitActionResult>;
 	updateUserProfile: (
 		values: UserProfileFormValues,
 	) => Promise<HackKitActionResult<User>>;
@@ -160,9 +160,7 @@ export type HackKitUIActions = {
 	previewEventPassQr: (
 		input: PreviewEventPassQrInput,
 	) => Promise<HackKitActionResult<PreviewEventPassQrResult>>;
-	recordEventScan: (
-		input: RecordEventScanInput,
-	) => Promise<
+	recordEventScan: (input: RecordEventScanInput) => Promise<
 		HackKitActionResult<{
 			scan: EventScan;
 			priorScans: EventScan[];
@@ -179,7 +177,9 @@ export type HackKitUIActions = {
 		input: SetRsvpStatusInput,
 	) => Promise<HackKitActionResult<Rsvp>>;
 	promoteRsvp: (targetAuthId?: string) => Promise<HackKitActionResult<Rsvp>>;
-	approveUser: (input: ApproveUserInput) => Promise<HackKitActionResult<User>>;
+	approveUser: (
+		input: ApproveUserInput,
+	) => Promise<HackKitActionResult<User>>;
 	banUser: (input: BanUserInput) => Promise<HackKitActionResult>;
 	unbanUser: (targetAuthId: string) => Promise<HackKitActionResult>;
 	assignRoleToUser: (
@@ -188,7 +188,9 @@ export type HackKitUIActions = {
 	createRole: (input: CreateRoleInput) => Promise<HackKitActionResult<Role>>;
 	updateRole: (input: UpdateRoleInput) => Promise<HackKitActionResult<Role>>;
 	deleteRole: (roleId: RoleId) => Promise<HackKitActionResult>;
-	listSettings: () => Promise<HackKitActionResult<ResolvedHackathonSetting[]>>;
+	listSettings: () => Promise<
+		HackKitActionResult<ResolvedHackathonSetting[]>
+	>;
 	setSettings: (
 		values: SetSettingsInput,
 	) => Promise<HackKitActionResult<ResolvedHackathonSetting[]>>;
diff --git a/packages/ui/src/user-data-form-defaults.ts b/packages/ui/src/user-data-form-defaults.ts
index 16d8d542..9e16330e 100644
--- a/packages/ui/src/user-data-form-defaults.ts
+++ b/packages/ui/src/user-data-form-defaults.ts
@@ -1,4 +1,4 @@
-import type { UserData } from "@hackkit/core";
+import type { UserData } from "@hackkit/core/client";
 import type { UserDataFormValues } from "./types";
 
 export function toUserDataFormDefaultValues(
@@ -13,7 +13,7 @@ export function toUserDataFormDefaultValues(
 		dietaryRestrictions: userData.dietaryRestrictions,
 		accommodationNote: userData.accommodationNote ?? "",
 		phoneNumber: userData.phoneNumber ?? "",
-		countryOfResidence: userData.countryOfResidence,
+		countryOfResidence: userData.countryOfResidence ?? undefined,
 		hasAcceptedMLHCodeOfConduct: userData.hasAcceptedMLHCodeOfConduct,
 		hasSharedDataWithMLH: userData.hasSharedDataWithMLH,
 		isEmailable: userData.isEmailable,
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a9aea1b5..86232f35 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -4,16 +4,13 @@ importers:
 
   .:
     dependencies:
-      '@libsql/client':
-        specifier: ^0.14.0
-        version: 0.14.0
       prettier-plugin-tailwindcss:
         specifier: ^0.6.5
         version: 0.6.5(prettier@3.3.3)
     devDependencies:
       '@turbo/gen':
         specifier: ^2.0.9
-        version: 2.0.9(@types/node@20.14.11)(typescript@5.5.3)
+        version: 2.0.9(@types/node@20.14.11)(typescript@5.9.3)
       '@types/node':
         specifier: 20.14.11
         version: 20.14.11
@@ -32,9 +29,6 @@ importers:
 
   apps/web:
     dependencies:
-      '@hackkit/auth-better-auth':
-        specifier: workspace:*
-        version: link:../../packages/auth-better-auth
       '@hackkit/blob-local':
         specifier: workspace:*
         version: link:../../packages/blob-local
@@ -50,9 +44,6 @@ importers:
       '@hackkit/core':
         specifier: workspace:*
         version: link:../../packages/core
-      '@hackkit/db-drizzle':
-        specifier: workspace:*
-        version: link:../../packages/db-drizzle
       '@hackkit/next':
         specifier: workspace:*
         version: link:../../packages/next
@@ -68,18 +59,36 @@ importers:
       '@hackkit/ui':
         specifier: workspace:*
         version: link:../../packages/ui
-      '@libsql/client':
-        specifier: ^0.14.0
-        version: 0.14.0
+      '@mikro-orm/core':
+        specifier: 7.2.1
+        version: 7.2.1
+      '@mikro-orm/libsql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/migrations':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/mysql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)(@types/node@22.18.6)
+      '@mikro-orm/postgresql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/sqlite':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@next/env':
+        specifier: 14.2.35
+        version: 14.2.35
       better-auth:
-        specifier: 1.6.11
-        version: 1.6.11(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
-      drizzle-orm:
-        specifier: ^0.45.2
-        version: 0.45.2(@libsql/client@0.14.0)(kysely@0.28.17)
+        specifier: 1.7.6
+        version: 1.7.6(next@14.2.35)(pg@8.23.0)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
+      jiti:
+        specifier: 2.4.2
+        version: 2.4.2
       next:
         specifier: 14.2.35
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+        version: 14.2.35(react-dom@18.3.1)(react@18.3.1)
       react:
         specifier: 18.3.1
         version: 18.3.1
@@ -90,27 +99,21 @@ importers:
         specifier: ^1.5.0
         version: 1.5.0(react-dom@18.3.1)(react@18.3.1)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
     devDependencies:
       '@types/node':
-        specifier: 20.14.11
-        version: 20.14.11
+        specifier: 22.18.6
+        version: 22.18.6
       '@types/react':
         specifier: 18.3.3
         version: 18.3.3
       '@types/react-dom':
         specifier: 18.3.0
         version: 18.3.0
-      auth:
-        specifier: 1.6.11
-        version: 1.6.11(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
       autoprefixer:
         specifier: 10.4.19
         version: 10.4.19(postcss@8.4.39)
-      drizzle-kit:
-        specifier: ^0.31.4
-        version: 0.31.4
       postcss:
         specifier: 8.4.39
         version: 8.4.39
@@ -122,29 +125,7 @@ importers:
         version: 1.0.7(tailwindcss@3.4.6)
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
-
-  packages/auth-better-auth:
-    dependencies:
-      '@hackkit/core':
-        specifier: workspace:*
-        version: link:../core
-      better-auth:
-        specifier: '>=1.6'
-        version: 1.6.11(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
-      next:
-        specifier: '>=14'
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
-      server-only:
-        specifier: ^0.0.1
-        version: 0.0.1
-    devDependencies:
-      tsup:
-        specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
-      typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/blob-local:
     dependencies:
@@ -152,12 +133,15 @@ importers:
         specifier: workspace:*
         version: link:../core
     devDependencies:
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
 
   packages/blob-s3:
     dependencies:
@@ -171,12 +155,15 @@ importers:
         specifier: workspace:*
         version: link:../core
     devDependencies:
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
 
   packages/cli:
     dependencies:
@@ -186,6 +173,12 @@ importers:
       '@hackkit/core':
         specifier: workspace:*
         version: link:../core
+      '@mikro-orm/core':
+        specifier: 7.2.1
+        version: 7.2.1
+      '@mikro-orm/migrations':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
       commander:
         specifier: ^12.1.0
         version: 12.1.0
@@ -195,16 +188,25 @@ importers:
       jiti:
         specifier: ^2.4.2
         version: 2.4.2
+      prettier:
+        specifier: ^3.3.3
+        version: 3.3.3
     devDependencies:
+      '@mikro-orm/sqlite':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/config:
     dependencies:
@@ -215,59 +217,61 @@ importers:
         specifier: ^2.4.2
         version: 2.4.2
     devDependencies:
+      '@mikro-orm/sqlite':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/core:
     dependencies:
+      '@a77ay/better-auth-mikro-orm':
+        specifier: 0.1.1
+        version: 0.1.1(@mikro-orm/core@7.2.1)(better-auth@1.7.6)
+      '@mikro-orm/core':
+        specifier: 7.2.1
+        version: 7.2.1
+      '@mikro-orm/libsql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/migrations':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/mysql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)(@types/node@22.18.6)
+      '@mikro-orm/postgresql':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      '@mikro-orm/sqlite':
+        specifier: 7.2.1
+        version: 7.2.1(@mikro-orm/core@7.2.1)
+      better-auth:
+        specifier: 1.7.6
+        version: 1.7.6(next@14.2.35)(pg@8.23.0)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
       zod:
         specifier: ^3.25.67
         version: 3.25.67
     devDependencies:
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
-      typescript:
-        specifier: 5.5.3
-        version: 5.5.3
-      vitest:
-        specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
-
-  packages/db-drizzle:
-    dependencies:
-      '@hackkit/core':
-        specifier: workspace:*
-        version: link:../core
-      drizzle-orm:
-        specifier: ^0.45.2
-        version: 0.45.2(@libsql/client@0.14.0)(postgres@3.4.7)
-    devDependencies:
-      '@libsql/client':
-        specifier: ^0.14.0
-        version: 0.14.0
-      drizzle-kit:
-        specifier: ^0.31.4
-        version: 0.31.4
-      postgres:
-        specifier: ^3.4.7
-        version: 3.4.7
-      tsup:
-        specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/next:
     dependencies:
@@ -280,22 +284,31 @@ importers:
       '@hackkit/ui':
         specifier: workspace:*
         version: link:../ui
+      better-auth:
+        specifier: 1.7.6
+        version: 1.7.6(next@14.2.35)(pg@8.23.0)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
       react:
         specifier: '>=18'
         version: 18.3.1
     devDependencies:
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
+      '@types/react':
+        specifier: 18.3.3
+        version: 18.3.3
       next:
         specifier: 14.2.35
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+        version: 14.2.35(react-dom@18.3.1)(react@18.3.1)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/plugin-discord:
     dependencies:
@@ -308,9 +321,12 @@ importers:
       '@hackkit/ui':
         specifier: workspace:*
         version: link:../ui
+      '@mikro-orm/core':
+        specifier: 7.2.1
+        version: 7.2.1
       next:
         specifier: '>=14'
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+        version: 14.2.35(react-dom@18.3.1)(react@18.3.1)
       react:
         specifier: '>=18'
         version: 18.3.1
@@ -332,13 +348,13 @@ importers:
         version: 18.3.0
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/plugin-notifications-email:
     dependencies:
@@ -346,15 +362,18 @@ importers:
         specifier: workspace:*
         version: link:../core
     devDependencies:
+      '@types/node':
+        specifier: 22.18.6
+        version: 22.18.6
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/plugin-teams:
     dependencies:
@@ -367,9 +386,12 @@ importers:
       '@hackkit/ui':
         specifier: workspace:*
         version: link:../ui
+      '@mikro-orm/core':
+        specifier: 7.2.1
+        version: 7.2.1
       next:
         specifier: '>=14'
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+        version: 14.2.35(react-dom@18.3.1)(react@18.3.1)
       react:
         specifier: '>=18'
         version: 18.3.1
@@ -391,13 +413,13 @@ importers:
         version: 18.3.0
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
       vitest:
         specifier: ^3.2.4
-        version: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+        version: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
 
   packages/tsconfig: {}
 
@@ -432,7 +454,7 @@ importers:
         version: 2.1.1
       next:
         specifier: '>=14'
-        version: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+        version: 14.2.35(react-dom@18.3.1)(react@18.3.1)
       qrcode.react:
         specifier: ^4.2.0
         version: 4.2.0(react@18.3.1)
@@ -461,18 +483,27 @@ importers:
       '@types/react-dom':
         specifier: 18.3.0
         version: 18.3.0
-      tsdown:
-        specifier: ^0.22.14
-        version: 0.22.14(typescript@5.5.3)
       tsup:
         specifier: ^8.5.1
-        version: 8.5.1(jiti@2.4.2)(typescript@5.5.3)
+        version: 8.5.1(jiti@2.4.2)(typescript@5.9.3)
       typescript:
-        specifier: 5.5.3
-        version: 5.5.3
+        specifier: 5.9.3
+        version: 5.9.3
 
 packages:
 
+  /@a77ay/better-auth-mikro-orm@0.1.1(@mikro-orm/core@7.2.1)(better-auth@1.7.6):
+    resolution: {integrity: sha512-WT0EwaIwG6TI0crFDD5bzF823p2o4qMVgSCDFqqzw2pdWSA0TzSVTL8GGjUxNTiPFgOVjFc/GLQnKSYVjnQaPg==}
+    hasBin: true
+    peerDependencies:
+      '@mikro-orm/core': ^7.0.0
+      better-auth: ^1.0.0
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      better-auth: 1.7.6(next@14.2.35)(pg@8.23.0)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
+      jiti: 2.7.0
+    dev: false
+
   /@alloc/quick-lru@5.2.0:
     resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
     engines: {node: '>=10'}
@@ -1073,314 +1104,6 @@ packages:
       tslib: 2.8.1
     dev: false
 
-  /@babel/code-frame@7.29.7:
-    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/helper-validator-identifier': 7.29.7
-      js-tokens: 4.0.0
-      picocolors: 1.1.1
-
-  /@babel/compat-data@7.29.7:
-    resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
-    engines: {node: '>=6.9.0'}
-
-  /@babel/core@7.29.7:
-    resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/generator': 7.29.7
-      '@babel/helper-compilation-targets': 7.29.7
-      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
-      '@babel/helpers': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/template': 7.29.7
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-      '@jridgewell/remapping': 2.3.5
-      convert-source-map: 2.0.0
-      debug: 4.4.3
-      gensync: 1.0.0-beta.2
-      json5: 2.2.3
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  /@babel/generator@7.29.7:
-    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-      jsesc: 3.1.0
-
-  /@babel/helper-annotate-as-pure@7.29.7:
-    resolution: {integrity: sha512-OoK6239jHPuSQOoS0kfTVKn0b/rVTk0seKq4Gd2UMLtmOVLjDC0ki3e+c90Trqv2gMfvJFqkiljrr568+qddiw==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/types': 7.29.7
-    dev: true
-
-  /@babel/helper-compilation-targets@7.29.7:
-    resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/compat-data': 7.29.7
-      '@babel/helper-validator-option': 7.29.7
-      browserslist: 4.28.5
-      lru-cache: 5.1.1
-      semver: 6.3.1
-
-  /@babel/helper-create-class-features-plugin@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-IY3ZD9Tmooqr3TUhc3DUWxiuo8xx1DWLhd5M7hQ+ZWJamqM2BbalrBJb2MisSLoYorOj75U03qULCxQTY9r3hg==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-annotate-as-pure': 7.29.7
-      '@babel/helper-member-expression-to-functions': 7.29.7
-      '@babel/helper-optimise-call-expression': 7.29.7
-      '@babel/helper-replace-supers': 7.29.7(@babel/core@7.29.7)
-      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7
-      '@babel/traverse': 7.29.7
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/helper-globals@7.29.7:
-    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
-    engines: {node: '>=6.9.0'}
-
-  /@babel/helper-member-expression-to-functions@7.29.7:
-    resolution: {integrity: sha512-j+7JYmk1JYDtACIGj0QJqqWZjoUpMoEikQGADMaHgCMCSDqd2+P32rfcibUNrGOMWrlzK1WJBdxrB3JJQZwWtg==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/helper-module-imports@7.29.7:
-    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-
-  /@babel/helper-module-transforms@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-module-imports': 7.29.7
-      '@babel/helper-validator-identifier': 7.29.7
-      '@babel/traverse': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-
-  /@babel/helper-optimise-call-expression@7.29.7:
-    resolution: {integrity: sha512-+kmGVjcT9RGYzoDwdwEqEvGgKe3BYq+O1iGzjFubaNgZHwYHP6lsF2Yghf4kEuv9BV7tYDZ913aBW9am6YKong==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/types': 7.29.7
-    dev: true
-
-  /@babel/helper-plugin-utils@7.29.7:
-    resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
-    engines: {node: '>=6.9.0'}
-    dev: true
-
-  /@babel/helper-replace-supers@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-atfGXWSeCiF4DnKZIfmJfQRkSw9b9gNNXR1kqKjbhG4pGYCOnkp8OcTB8E3NXjBu8NpheSnOeNKz8KT7UNFTmQ==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-member-expression-to-functions': 7.29.7
-      '@babel/helper-optimise-call-expression': 7.29.7
-      '@babel/traverse': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/helper-skip-transparent-expression-wrappers@7.29.7:
-    resolution: {integrity: sha512-brcMGQaVzIeUb+6/bs1Av0f8YuNNjKY2JyvfRCsFuFsdKccEQ5Ges2y74D74NZ1Rz8lKJ9ksJkfqwQFJ/iNEyQ==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/helper-string-parser@7.29.7:
-    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
-    engines: {node: '>=6.9.0'}
-
-  /@babel/helper-validator-identifier@7.29.7:
-    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
-    engines: {node: '>=6.9.0'}
-
-  /@babel/helper-validator-option@7.29.7:
-    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
-    engines: {node: '>=6.9.0'}
-
-  /@babel/helpers@7.29.7:
-    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/template': 7.29.7
-      '@babel/types': 7.29.7
-
-  /@babel/parser@7.29.7:
-    resolution: {integrity: sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-    dependencies:
-      '@babel/types': 7.29.7
-
-  /@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-TSu8+mHCoEaaCDEZ0I3+6mvTBYR4PCxQwf2z9/r5Tbztv6NaLR3B9thGTTxX2WGuGHJqRiAbKPeGTJ5XWXVg6A==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-    dev: true
-
-  /@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-ngr+82Sh0xMz25TPCZi+nC2iTzjfCdWS2ONXTp/PtSCHCgaCNBpdMqgvJ2ccdLlClVZ7sisIgB914j/JFe+RZA==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-    dev: true
-
-  /@babel/plugin-transform-modules-commonjs@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-j0vCldybPC5b5dwCQOJ21uKtHzt7hxLygJTg9eF1ScfaikEDNfzn94XoW5Fi+seBR0nCyL23xaBFFkq7dTM8XQ==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
-      '@babel/helper-plugin-utils': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/plugin-transform-react-display-name@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-+1wdDMGNb4UPeY3Q4L5yLiYe6TXPXubs4NjrgRFw13hPRLJfEMw2Q5OXkee6/IfdqePIeW4Jjwe3aBh7SdKz4Q==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-    dev: true
-
-  /@babel/plugin-transform-react-jsx-development@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-Xfy3UVMF04+ypnFbkhvfqtmvwfe92qwQdbGZVonhE+6v35GzlofmOnA1szaZqzb9xYWr0nl1e5EMmzi0DNON1g==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/plugin-transform-react-jsx': 7.29.7(@babel/core@7.29.7)
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/plugin-transform-react-jsx@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-WsZulLVBUHXVj2cUcPVx6UE21TpalB6bHbSFErKT0Ib++ax24jjXe73FqlWvdylFOjiuPHYi6VCcgRad1ItN+A==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-annotate-as-pure': 7.29.7
-      '@babel/helper-module-imports': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-      '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7)
-      '@babel/types': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/plugin-transform-react-pure-annotations@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-H5E+HBgDpr6Q5t+Aj11tL7XkIui1jhbIoArVQnqjgXo5/3YxkN7ZEBcWF4RQlB0T4rrxJQbXS6kiFV6B7XTqUA==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-annotate-as-pure': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-    dev: true
-
-  /@babel/plugin-transform-typescript@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-jK52h8LaLc7JarhQV2ofeFMts4H7vnOXnqZNA6fYglBTZewRBE51KWt3BUltW1P+KoPsYkHoJeXePuz4zo2LMw==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-annotate-as-pure': 7.29.7
-      '@babel/helper-create-class-features-plugin': 7.29.7(@babel/core@7.29.7)
-      '@babel/helper-plugin-utils': 7.29.7
-      '@babel/helper-skip-transparent-expression-wrappers': 7.29.7
-      '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.7)
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/preset-react@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-C+PV1TFUPTmBQGoPBL8j2QmLpZ117YTCwxIZeJOM96GbYMFSc7/pOXU5lVykwnZxyTqQxRsvoRk6f2FktZgGHA==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-      '@babel/helper-validator-option': 7.29.7
-      '@babel/plugin-transform-react-display-name': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-react-jsx': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-react-jsx-development': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-react-pure-annotations': 7.29.7(@babel/core@7.29.7)
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
-  /@babel/preset-typescript@7.29.7(@babel/core@7.29.7):
-    resolution: {integrity: sha512-/Foi8vKY2EVbed/1eZx0gJEEwHAIxogrySI7rULcRIvhZzbvoE/b5qG5Ghc0WKAFKOHA9SD1x7RsFlOYdutIiQ==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-      '@babel/helper-validator-option': 7.29.7
-      '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-modules-commonjs': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-typescript': 7.29.7(@babel/core@7.29.7)
-    transitivePeerDependencies:
-      - supports-color
-    dev: true
-
   /@babel/runtime-corejs3@7.29.7:
     resolution: {integrity: sha512-ppj9ouYku+RX0ljtgZd+KMO5mkM2bCqg8H2PYAFWnLsHEIKIdRojqbJ2i3eVHrisuxy7nOFCmngTDdWtUCdXUQ==}
     engines: {node: '>=6.9.0'}
@@ -1393,117 +1116,89 @@ packages:
     engines: {node: '>=6.9.0'}
     dev: false
 
-  /@babel/template@7.29.7:
-    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-
-  /@babel/traverse@7.29.7:
-    resolution: {integrity: sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/generator': 7.29.7
-      '@babel/helper-globals': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/template': 7.29.7
-      '@babel/types': 7.29.7
-      debug: 4.4.3
-    transitivePeerDependencies:
-      - supports-color
-
-  /@babel/types@7.29.7:
-    resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
-    engines: {node: '>=6.9.0'}
-    dependencies:
-      '@babel/helper-string-parser': 7.29.7
-      '@babel/helper-validator-identifier': 7.29.7
-
-  /@better-auth/core@1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0):
-    resolution: {integrity: sha512-LrwidLCV8azdMGjvtwp30nj9tIv1BwI3VhtC0UaGSjQkAVWw4bN42I8qwbxRziPeSQoj+zUVkOpxZzAWBDARtQ==}
+  /@better-auth/core@1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0):
+    resolution: {integrity: sha512-yBDDO0J4VCHT1qEZtzj6aMexX4etyLesitoxehcWHzPrzYqrFHwe/hgskye+imlGhQVOysuljMg8M8BA6GrtIg==}
     peerDependencies:
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
-      '@cloudflare/workers-types': '>=4'
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.2
       '@opentelemetry/api': ^1.9.0
-      better-call: 1.3.5
+      better-call: 1.4.0
       jose: ^6.1.0
-      kysely: ^0.28.5
+      kysely: ^0.28.5 || ^0.29.0
       nanostores: ^1.0.1
     peerDependenciesMeta:
-      '@cloudflare/workers-types':
-        optional: true
       '@opentelemetry/api':
         optional: true
     dependencies:
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.2
       '@opentelemetry/semantic-conventions': 1.43.0
       '@standard-schema/spec': 1.1.0
-      better-call: 1.3.5(zod@4.4.3)
+      better-call: 1.4.0(zod@3.25.67)
       jose: 6.2.3
-      kysely: 0.28.17
+      kysely: 0.29.6
       nanostores: 1.4.0
-      zod: 4.4.3
+      zod: 4.6.5
+    dev: false
 
-  /@better-auth/drizzle-adapter@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(drizzle-orm@0.45.2):
-    resolution: {integrity: sha512-4jpkETIGZOHCf7BK4jnu22fdN6jjomH0/HhEzkaWy3+Eppi5PYlHTF/460jrTmA3Xc+Vqwp9t282ymHiEPypGw==}
+  /@better-auth/drizzle-adapter@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2):
+    resolution: {integrity: sha512-ENlhwC7kkTjquuiel3Efggik0hC4vtD7ppJ8FhsiHhRJA8K6RT4hbhzkfm6keNvjdnAeWwCejm7FmMO4GoSGpA==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
-      drizzle-orm: ^0.45.2
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
+      drizzle-orm: ^0.45.2 || >=1.0.0-rc.1 <2.0.0
     peerDependenciesMeta:
       drizzle-orm:
         optional: true
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
-      drizzle-orm: 0.45.2(@libsql/client@0.14.0)(kysely@0.28.17)
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+    dev: false
 
-  /@better-auth/kysely-adapter@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(kysely@0.28.17):
-    resolution: {integrity: sha512-/g8M9RfIjdcZDnbstSUvQiINkvdNlCeZr248zwqx2/PVksQI1MhQofbzUn3RnQnbPKp0EPwpX/dR3oudRFenUg==}
+  /@better-auth/kysely-adapter@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)(kysely@0.29.6):
+    resolution: {integrity: sha512-BV+DX2/z/6ozNC9DYSge78wjLerq6Bxd/lSPjzzuq9eEutkQDAJTuiaETzgGYqNV5LlEWi8TZFAQTEq/wavOEQ==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
-      kysely: ^0.28.17
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
+      kysely: ^0.28.17 || ^0.29.0
     peerDependenciesMeta:
       kysely:
         optional: true
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
-      kysely: 0.28.17
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+      kysely: 0.29.6
+    dev: false
 
-  /@better-auth/memory-adapter@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0):
-    resolution: {integrity: sha512-hpdfw0BBf8MuzLkIdmbcUZICbY9r/bhLO2RxSnkzT5+/O+0I0u2I8+m0YUP7vNllP/ZCKASHOYgXPLO75Z0f9Q==}
+  /@better-auth/memory-adapter@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2):
+    resolution: {integrity: sha512-ng1xv8k2JsEIjnqzJzdoVOQrnoCLRuk4EiQL9yYAThyg6zYzV00LynlhH+O9OMUZ+yGVpGqGZmr5xcTiUSV2uA==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+    dev: false
 
-  /@better-auth/mongo-adapter@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0):
-    resolution: {integrity: sha512-3Tor8rSv8vSEIMEaV2PFpPEuVhqc1gNoZ6eGvoh3LwExXXuj8madew6ob+H1pH7Aphn3Ar5PQ08AguT8TbwFAA==}
+  /@better-auth/mongo-adapter@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2):
+    resolution: {integrity: sha512-GvBwZli8i4XINMAj9tlW7eV9E8Dr+JWqavXjUs2o81GZt/Vh8wiX+31KK1jQ4iOuejfjpLoXcoFtlIPgf/pVog==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
       mongodb: ^6.0.0 || ^7.0.0
     peerDependenciesMeta:
       mongodb:
         optional: true
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+    dev: false
 
-  /@better-auth/prisma-adapter@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0):
-    resolution: {integrity: sha512-Pw+7q7zTp+VSci1V+CYMvuxIbAeVMZLe4lRo46LJoAKMHfjFl5T/ycsyFvWs/DkWC7n9gZZzRDEbHp0I5FiKKw==}
+  /@better-auth/prisma-adapter@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2):
+    resolution: {integrity: sha512-31rz2OXIx2Q1L4Jhd5F71dafIWqder/Bo6vJ+eCgO5iZ0gvnv7fUmM95DvbVUoPC69XYpcIM/6PJmQ3M6RydWg==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
       '@prisma/client': ^5.0.0 || ^6.0.0 || ^7.0.0
       prisma: ^5.0.0 || ^6.0.0 || ^7.0.0
     peerDependenciesMeta:
@@ -1512,65 +1207,37 @@ packages:
       prisma:
         optional: true
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+    dev: false
 
-  /@better-auth/telemetry@1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21):
-    resolution: {integrity: sha512-hsjDHc8MZbm6/AHeNdtywrWedXevnBjmdvnHTcZub+rTVjOv+Td0roI8USKuC6uUibmrl//2rJfVCsGbopihNA==}
+  /@better-auth/telemetry@1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2):
+    resolution: {integrity: sha512-xgRwPja2wTJtcu+OQZR2IiNpAmviddnW3n5Do5umXRugJFW3v9KlSmYjYm580mVsPnU4upvZkvSRl9v8DgSDtA==}
     peerDependencies:
-      '@better-auth/core': ^1.6.11
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/core': ^1.7.6
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.2
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.2
+    dev: false
 
-  /@better-auth/utils@0.4.0:
-    resolution: {integrity: sha512-RpMtLUIQAEWMgdPLNVbIF5ON2mm+CH0U3rCdUCU1VyeAUui4m38DyK7/aXMLZov2YDjG684pS1D0MBllrmgjQA==}
+  /@better-auth/utils@0.4.2:
+    resolution: {integrity: sha512-AUxrvu+HaaODsUyzDxFgwd/8RZ1yZaYo42LXKSrU2oGgR38pS1ij8nqQKNgtTWoYGpNevNXtCfgTy6loHveW9A==}
     dependencies:
       '@noble/hashes': 2.2.0
+    dev: false
 
-  /@better-fetch/fetch@1.1.21:
-    resolution: {integrity: sha512-/ImESw0sskqlVR94jB+5+Pxjf+xBwDZF/N5+y2/q4EqD7IARUTSpPfIo8uf39SYpCxyOCtbyYpUrZ3F/k0zT4A==}
-
-  /@chevrotain/cst-dts-gen@10.5.0:
-    resolution: {integrity: sha512-lhmC/FyqQ2o7pGK4Om+hzuDrm9rhFYIJ/AXoQBeongmn870Xeb0L6oGEiuR8nohFNL5sMaQEJWCxr1oIVIVXrw==}
-    dependencies:
-      '@chevrotain/gast': 10.5.0
-      '@chevrotain/types': 10.5.0
-      lodash: 4.17.21
-    dev: true
-
-  /@chevrotain/gast@10.5.0:
-    resolution: {integrity: sha512-pXdMJ9XeDAbgOWKuD1Fldz4ieCs6+nLNmyVhe2gZVqoO7v8HXuHYs5OV2EzUtbuai37TlOAQHrTDvxMnvMJz3A==}
-    dependencies:
-      '@chevrotain/types': 10.5.0
-      lodash: 4.17.21
-    dev: true
-
-  /@chevrotain/types@10.5.0:
-    resolution: {integrity: sha512-f1MAia0x/pAVPWH/T73BJVyO2XU5tI4/iE7cnxb7tqdNTNhQI3Uq3XkqcoteTmD4t1aM0LbHCJOhgIDn07kl2A==}
-    dev: true
-
-  /@chevrotain/utils@10.5.0:
-    resolution: {integrity: sha512-hBzuU5+JjB2cqNZyszkDHZgOSrUUT8V3dhgRl8Q9Gp6dAj/H5+KILGjbhDpc3Iy9qmqlm/akuOI2ut9VUtzJxQ==}
-    dev: true
-
-  /@clack/core@0.5.0:
-    resolution: {integrity: sha512-p3y0FIOwaYRUPRcMO7+dlmLh8PSRcrjuTndsiA0WAFbWES0mLZlrjVoBRZ9DzkPFJZG6KGkJmoEAY0ZcVWTkow==}
+  /@better-auth/utils@0.5.0:
+    resolution: {integrity: sha512-BL8W4EfIZFwlu0r54m3v1ztjDhu6dDe/amLTm0xybmbZaNgYUqhD3SjpAsnq0q8YD6/ki4iwIgxJNLP/N3TxiA==}
     dependencies:
-      picocolors: 1.1.1
-      sisteransi: 1.0.5
-    dev: true
+      '@noble/hashes': 2.2.0
+    dev: false
 
-  /@clack/prompts@0.11.0:
-    resolution: {integrity: sha512-pMN5FcrEw9hUkZA4f+zLlzivQSeQf5dRGJjSUbvVYDLvpKCdQx5OaknvKzgbtXOizhP+SJJJjqEbOe55uKKfAw==}
-    dependencies:
-      '@clack/core': 0.5.0
-      picocolors: 1.1.1
-      sisteransi: 1.0.5
-    dev: true
+  /@better-fetch/fetch@1.3.2:
+    resolution: {integrity: sha512-Gs7n99b5tqUC6cQAPbV0uED3IraHB6xQbHLQ/C3l7ZFafHScOx9pQ+DYmP5blbLFShVWLqxNUlI9wi4xU/X+ow==}
+    dev: false
 
   /@cspotcode/source-map-support@0.8.1:
     resolution: {integrity: sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==}
@@ -1579,31 +1246,6 @@ packages:
       '@jridgewell/trace-mapping': 0.3.9
     dev: true
 
-  /@drizzle-team/brocli@0.10.2:
-    resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
-
-  /@esbuild-kit/core-utils@3.3.2:
-    resolution: {integrity: sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==}
-    deprecated: 'Merged into tsx: https://tsx.hirok.io'
-    dependencies:
-      esbuild: 0.18.20
-      source-map-support: 0.5.21
-
-  /@esbuild-kit/esm-loader@2.6.5:
-    resolution: {integrity: sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA==}
-    deprecated: 'Merged into tsx: https://tsx.hirok.io'
-    dependencies:
-      '@esbuild-kit/core-utils': 3.3.2
-      get-tsconfig: 4.14.0
-
-  /@esbuild/aix-ppc64@0.25.12:
-    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/aix-ppc64@0.27.7:
     resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==}
     engines: {node: '>=18'}
@@ -1621,55 +1263,23 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/android-arm64@0.18.20:
-    resolution: {integrity: sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ==}
-    engines: {node: '>=12'}
+  /@esbuild/android-arm64@0.27.7:
+    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
+    engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
     requiresBuild: true
+    dev: true
     optional: true
 
-  /@esbuild/android-arm64@0.25.12:
-    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
+  /@esbuild/android-arm64@0.28.1:
+    resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
     requiresBuild: true
     optional: true
 
-  /@esbuild/android-arm64@0.27.7:
-    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@esbuild/android-arm64@0.28.1:
-    resolution: {integrity: sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/android-arm@0.18.20:
-    resolution: {integrity: sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [android]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/android-arm@0.25.12:
-    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/android-arm@0.27.7:
     resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==}
     engines: {node: '>=18'}
@@ -1687,22 +1297,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/android-x64@0.18.20:
-    resolution: {integrity: sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [android]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/android-x64@0.25.12:
-    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/android-x64@0.27.7:
     resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==}
     engines: {node: '>=18'}
@@ -1720,22 +1314,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/darwin-arm64@0.18.20:
-    resolution: {integrity: sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [darwin]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/darwin-arm64@0.25.12:
-    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/darwin-arm64@0.27.7:
     resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==}
     engines: {node: '>=18'}
@@ -1753,22 +1331,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/darwin-x64@0.18.20:
-    resolution: {integrity: sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [darwin]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/darwin-x64@0.25.12:
-    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/darwin-x64@0.27.7:
     resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==}
     engines: {node: '>=18'}
@@ -1786,22 +1348,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/freebsd-arm64@0.18.20:
-    resolution: {integrity: sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [freebsd]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/freebsd-arm64@0.25.12:
-    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/freebsd-arm64@0.27.7:
     resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==}
     engines: {node: '>=18'}
@@ -1819,22 +1365,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/freebsd-x64@0.18.20:
-    resolution: {integrity: sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [freebsd]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/freebsd-x64@0.25.12:
-    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/freebsd-x64@0.27.7:
     resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==}
     engines: {node: '>=18'}
@@ -1852,22 +1382,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-arm64@0.18.20:
-    resolution: {integrity: sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-arm64@0.25.12:
-    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-arm64@0.27.7:
     resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==}
     engines: {node: '>=18'}
@@ -1885,22 +1399,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-arm@0.18.20:
-    resolution: {integrity: sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-arm@0.25.12:
-    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-arm@0.27.7:
     resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==}
     engines: {node: '>=18'}
@@ -1918,22 +1416,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-ia32@0.18.20:
-    resolution: {integrity: sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-ia32@0.25.12:
-    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-ia32@0.27.7:
     resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==}
     engines: {node: '>=18'}
@@ -1951,22 +1433,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-loong64@0.18.20:
-    resolution: {integrity: sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg==}
-    engines: {node: '>=12'}
-    cpu: [loong64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-loong64@0.25.12:
-    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-loong64@0.27.7:
     resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==}
     engines: {node: '>=18'}
@@ -1984,22 +1450,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-mips64el@0.18.20:
-    resolution: {integrity: sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ==}
-    engines: {node: '>=12'}
-    cpu: [mips64el]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-mips64el@0.25.12:
-    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-mips64el@0.27.7:
     resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==}
     engines: {node: '>=18'}
@@ -2017,22 +1467,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-ppc64@0.18.20:
-    resolution: {integrity: sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA==}
-    engines: {node: '>=12'}
-    cpu: [ppc64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-ppc64@0.25.12:
-    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-ppc64@0.27.7:
     resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==}
     engines: {node: '>=18'}
@@ -2050,22 +1484,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-riscv64@0.18.20:
-    resolution: {integrity: sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A==}
-    engines: {node: '>=12'}
-    cpu: [riscv64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-riscv64@0.25.12:
-    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-riscv64@0.27.7:
     resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==}
     engines: {node: '>=18'}
@@ -2083,22 +1501,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-s390x@0.18.20:
-    resolution: {integrity: sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ==}
-    engines: {node: '>=12'}
-    cpu: [s390x]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-s390x@0.25.12:
-    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-s390x@0.27.7:
     resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==}
     engines: {node: '>=18'}
@@ -2116,22 +1518,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/linux-x64@0.18.20:
-    resolution: {integrity: sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/linux-x64@0.25.12:
-    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/linux-x64@0.27.7:
     resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==}
     engines: {node: '>=18'}
@@ -2149,14 +1535,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/netbsd-arm64@0.25.12:
-    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/netbsd-arm64@0.27.7:
     resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==}
     engines: {node: '>=18'}
@@ -2174,22 +1552,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/netbsd-x64@0.18.20:
-    resolution: {integrity: sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [netbsd]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/netbsd-x64@0.25.12:
-    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/netbsd-x64@0.27.7:
     resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==}
     engines: {node: '>=18'}
@@ -2207,14 +1569,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/openbsd-arm64@0.25.12:
-    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/openbsd-arm64@0.27.7:
     resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==}
     engines: {node: '>=18'}
@@ -2232,22 +1586,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/openbsd-x64@0.18.20:
-    resolution: {integrity: sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [openbsd]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/openbsd-x64@0.25.12:
-    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/openbsd-x64@0.27.7:
     resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==}
     engines: {node: '>=18'}
@@ -2265,14 +1603,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/openharmony-arm64@0.25.12:
-    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/openharmony-arm64@0.27.7:
     resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==}
     engines: {node: '>=18'}
@@ -2290,22 +1620,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/sunos-x64@0.18.20:
-    resolution: {integrity: sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [sunos]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/sunos-x64@0.25.12:
-    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/sunos-x64@0.27.7:
     resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==}
     engines: {node: '>=18'}
@@ -2323,22 +1637,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/win32-arm64@0.18.20:
-    resolution: {integrity: sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/win32-arm64@0.25.12:
-    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/win32-arm64@0.27.7:
     resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==}
     engines: {node: '>=18'}
@@ -2356,22 +1654,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/win32-ia32@0.18.20:
-    resolution: {integrity: sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/win32-ia32@0.25.12:
-    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/win32-ia32@0.27.7:
     resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==}
     engines: {node: '>=18'}
@@ -2389,22 +1671,6 @@ packages:
     requiresBuild: true
     optional: true
 
-  /@esbuild/win32-x64@0.18.20:
-    resolution: {integrity: sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
-  /@esbuild/win32-x64@0.25.12:
-    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-    requiresBuild: true
-    optional: true
-
   /@esbuild/win32-x64@0.27.7:
     resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==}
     engines: {node: '>=18'}
@@ -2540,16 +1806,12 @@ packages:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
       '@jridgewell/trace-mapping': 0.3.31
-
-  /@jridgewell/remapping@2.3.5:
-    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
-    dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
+    dev: true
 
   /@jridgewell/resolve-uri@3.1.2:
     resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
     engines: {node: '>=6.0.0'}
+    dev: true
 
   /@jridgewell/sourcemap-codec@1.5.5:
     resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
@@ -2559,6 +1821,7 @@ packages:
     dependencies:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
+    dev: true
 
   /@jridgewell/trace-mapping@0.3.9:
     resolution: {integrity: sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==}
@@ -2567,106 +1830,165 @@ packages:
       '@jridgewell/sourcemap-codec': 1.5.5
     dev: true
 
-  /@libsql/client@0.14.0:
-    resolution: {integrity: sha512-/9HEKfn6fwXB5aTEEoMeFh4CtG0ZzbncBb1e++OCdVpgKZ/xyMsIVYXm0w7Pv4RUel803vE6LwniB3PqD72R0Q==}
-    dependencies:
-      '@libsql/core': 0.14.0
-      '@libsql/hrana-client': 0.7.0
-      js-base64: 3.8.1
-      libsql: 0.4.7
-      promise-limit: 2.7.0
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
-
-  /@libsql/core@0.14.0:
-    resolution: {integrity: sha512-nhbuXf7GP3PSZgdCY2Ecj8vz187ptHlZQ0VRc751oB2C1W8jQUXKKklvt7t1LJiUTQBVJuadF628eUk+3cRi4Q==}
-    dependencies:
-      js-base64: 3.8.1
-
-  /@libsql/darwin-arm64@0.4.7:
-    resolution: {integrity: sha512-yOL742IfWUlUevnI5PdnIT4fryY3LYTdLm56bnY0wXBw7dhFcnjuA7jrH3oSVz2mjZTHujxoITgAE7V6Z+eAbg==}
+  /@libsql/darwin-arm64@0.5.29:
+    resolution: {integrity: sha512-K+2RIB1OGFPYQbfay48GakLhqf3ArcbHqPFu7EZiaUcRgFcdw8RoltsMyvbj5ix2fY0HV3Q3Ioa/ByvQdaSM0A==}
     cpu: [arm64]
     os: [darwin]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/darwin-x64@0.4.7:
-    resolution: {integrity: sha512-ezc7V75+eoyyH07BO9tIyJdqXXcRfZMbKcLCeF8+qWK5nP8wWuMcfOVywecsXGRbT99zc5eNra4NEx6z5PkSsA==}
+  /@libsql/darwin-x64@0.5.29:
+    resolution: {integrity: sha512-OtT+KFHsKFy1R5FVadr8FJ2Bb1mghtXTyJkxv0trocq7NuHntSki1eUbxpO5ezJesDvBlqFjnWaYYY516QNLhQ==}
     cpu: [x64]
     os: [darwin]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/hrana-client@0.7.0:
-    resolution: {integrity: sha512-OF8fFQSkbL7vJY9rfuegK1R7sPgQ6kFMkDamiEccNUvieQ+3urzfDFI616oPl8V7T9zRmnTkSjMOImYCAVRVuw==}
-    dependencies:
-      '@libsql/isomorphic-fetch': 0.3.1
-      '@libsql/isomorphic-ws': 0.1.5
-      js-base64: 3.8.1
-      node-fetch: 3.3.2
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
-
-  /@libsql/isomorphic-fetch@0.3.1:
-    resolution: {integrity: sha512-6kK3SUK5Uu56zPq/Las620n5aS9xJq+jMBcNSOmjhNf/MUvdyji4vrMTqD7ptY7/4/CAVEAYDeotUz60LNQHtw==}
-    engines: {node: '>=18.0.0'}
+  /@libsql/linux-arm-gnueabihf@0.5.29:
+    resolution: {integrity: sha512-CD4n4zj7SJTHso4nf5cuMoWoMSS7asn5hHygsDuhRl8jjjCTT3yE+xdUvI4J7zsyb53VO5ISh4cwwOtf6k2UhQ==}
+    cpu: [arm]
+    os: [linux]
+    requiresBuild: true
+    dev: false
+    optional: true
 
-  /@libsql/isomorphic-ws@0.1.5:
-    resolution: {integrity: sha512-DtLWIH29onUYR00i0GlQ3UdcTRC6EP4u9w/h9LxpUZJWRMARk6dQwZ6Jkd+QdwVpuAOrdxt18v0K2uIYR3fwFg==}
-    dependencies:
-      '@types/ws': 8.18.1
-      ws: 8.21.0
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
+  /@libsql/linux-arm-musleabihf@0.5.29:
+    resolution: {integrity: sha512-2Z9qBVpEJV7OeflzIR3+l5yAd4uTOLxklScYTwpZnkm2vDSGlC1PRlueLaufc4EFITkLKXK2MWBpexuNJfMVcg==}
+    cpu: [arm]
+    os: [linux]
+    requiresBuild: true
+    dev: false
+    optional: true
 
-  /@libsql/linux-arm64-gnu@0.4.7:
-    resolution: {integrity: sha512-WlX2VYB5diM4kFfNaYcyhw5y+UJAI3xcMkEUJZPtRDEIu85SsSFrQ+gvoKfcVh76B//ztSeEX2wl9yrjF7BBCA==}
+  /@libsql/linux-arm64-gnu@0.5.29:
+    resolution: {integrity: sha512-gURBqaiXIGGwFNEaUj8Ldk7Hps4STtG+31aEidCk5evMMdtsdfL3HPCpvys+ZF/tkOs2MWlRWoSq7SOuCE9k3w==}
     cpu: [arm64]
     os: [linux]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/linux-arm64-musl@0.4.7:
-    resolution: {integrity: sha512-6kK9xAArVRlTCpWeqnNMCoXW1pe7WITI378n4NpvU5EJ0Ok3aNTIC2nRPRjhro90QcnmLL1jPcrVwO4WD1U0xw==}
+  /@libsql/linux-arm64-musl@0.5.29:
+    resolution: {integrity: sha512-fwgYZ0H8mUkyVqXZHF3mT/92iIh1N94Owi/f66cPVNsk9BdGKq5gVpoKO+7UxaNzuEH1roJp2QEwsCZMvBLpqg==}
     cpu: [arm64]
     os: [linux]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/linux-x64-gnu@0.4.7:
-    resolution: {integrity: sha512-CMnNRCmlWQqqzlTw6NeaZXzLWI8bydaXDke63JTUCvu8R+fj/ENsLrVBtPDlxQ0wGsYdXGlrUCH8Qi9gJep0yQ==}
+  /@libsql/linux-x64-gnu@0.5.29:
+    resolution: {integrity: sha512-y14V0vY0nmMC6G0pHeJcEarcnGU2H6cm21ZceRkacWHvQAEhAG0latQkCtoS2njFOXiYIg+JYPfAoWKbi82rkg==}
     cpu: [x64]
     os: [linux]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/linux-x64-musl@0.4.7:
-    resolution: {integrity: sha512-nI6tpS1t6WzGAt1Kx1n1HsvtBbZ+jHn0m7ogNNT6pQHZQj7AFFTIMeDQw/i/Nt5H38np1GVRNsFe99eSIMs9XA==}
+  /@libsql/linux-x64-musl@0.5.29:
+    resolution: {integrity: sha512-gquqwA/39tH4pFl+J9n3SOMSymjX+6kZ3kWgY3b94nXFTwac9bnFNMffIomgvlFaC4ArVqMnOZD3nuJ3H3VO1w==}
     cpu: [x64]
     os: [linux]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@libsql/win32-x64-msvc@0.4.7:
-    resolution: {integrity: sha512-7pJzOWzPm6oJUxml+PCDRzYQ4A1hTMHAciTAHfFK4fkbDZX33nWPVG7Y3vqdKtslcwAzwmrNDc6sXy2nwWnbiw==}
+  /@libsql/win32-x64-msvc@0.5.29:
+    resolution: {integrity: sha512-4/0CvEdhi6+KjMxMaVbFM2n2Z44escBRoEYpR+gZg64DdetzGnYm8mcNLcoySaDJZNaBd6wz5DNdgRmcI4hXcg==}
     cpu: [x64]
     os: [win32]
     requiresBuild: true
+    dev: false
     optional: true
 
-  /@mrleebo/prisma-ast@0.13.1:
-    resolution: {integrity: sha512-XyroGQXcHrZdvmrGJvsA9KNeOOgGMg1Vg9OlheUsBOSKznLMDl+YChxbkboRHvtFYJEMRYmlV3uoo/njCw05iw==}
-    engines: {node: '>=16'}
+  /@mikro-orm/core@7.2.1:
+    resolution: {integrity: sha512-+gtJoScbin/C3wPItSZkj5vlMTq/LphBLIxHyi5brCbeA6VDcYuoMopiqoFUMQxdhXXrZlKNIHXGrhb8r3biVg==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      dataloader: 2.2.3
+    peerDependenciesMeta:
+      dataloader:
+        optional: true
+
+  /@mikro-orm/libsql@7.2.1(@mikro-orm/core@7.2.1):
+    resolution: {integrity: sha512-jXvptoHpbzfj8XUy5V5BvVee2LOsxgI/GnITfmh6Jl42tpIEDJx6Talqbv+z1PNGkHhw8OU5GoHXDJqYpNqo5w==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
     dependencies:
-      chevrotain: 10.5.0
-      lilconfig: 2.1.0
-    dev: true
+      '@mikro-orm/core': 7.2.1
+      '@mikro-orm/sql': 7.2.1(@mikro-orm/core@7.2.1)
+      kysely: 0.29.6
+      libsql: 0.5.29
+    dev: false
+
+  /@mikro-orm/migrations@7.2.1(@mikro-orm/core@7.2.1):
+    resolution: {integrity: sha512-sxGcB7na0AkcREsD5U3xP+Psb/nhQFkx7/eY1Nsqq9MBs67O5RoCL97bn3lmgq6GwKZFbktMuuOGozq42+GaNg==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      '@mikro-orm/sql': 7.2.1(@mikro-orm/core@7.2.1)
+    dev: false
+
+  /@mikro-orm/mysql@7.2.1(@mikro-orm/core@7.2.1)(@types/node@22.18.6):
+    resolution: {integrity: sha512-IxCEnfHUzFcxVkRCVaC0KtGoHRRLogxxgeI+J4Pk7oxtDf/jtvYQuFL4tSbmlrH3qzmLQeYYPyJPuDr+a2F7ag==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      '@mikro-orm/sql': 7.2.1(@mikro-orm/core@7.2.1)
+      kysely: 0.29.6
+      mysql2: 3.24.4(@types/node@22.18.6)
+      sqlstring: 2.3.3
+    transitivePeerDependencies:
+      - '@types/node'
+    dev: false
+
+  /@mikro-orm/postgresql@7.2.1(@mikro-orm/core@7.2.1):
+    resolution: {integrity: sha512-PQ1qe4Bj/hQSHYJjR02l06FfEDwniAvncduwZSCLSKuaCUddHc5AN2Utj3yo4xRIVRY8pOa7DFitEQPBozTMJA==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      '@mikro-orm/sql': 7.2.1(@mikro-orm/core@7.2.1)
+      kysely: 0.29.6
+      pg: 8.23.0
+      pg-cursor: 2.22.0(pg@8.23.0)
+      postgres-array: 3.0.4
+      postgres-date: 2.1.0
+      postgres-interval: 4.1.0
+    transitivePeerDependencies:
+      - pg-native
+    dev: false
+
+  /@mikro-orm/sql@7.2.1(@mikro-orm/core@7.2.1):
+    resolution: {integrity: sha512-3M9dQeUDLlvAT5VJr/KBGAk9C7xez+psVCnvNkAO4hRhwx2Wm7N1HkuyP4Bwj0MjkHVB6LYvhTw/V6pYsVM8lA==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      kysely: 0.29.6
+
+  /@mikro-orm/sqlite@7.2.1(@mikro-orm/core@7.2.1):
+    resolution: {integrity: sha512-+iAPGORAqLl+TcBF+JSLOfRq+PwTQG1NLts+AvN9D8C2czlbDpyjyeaAFSR+5wJlMEZ4wv2rdzt4jSS5T7x3XQ==}
+    engines: {node: '>= 22.17.0'}
+    peerDependencies:
+      '@mikro-orm/core': 7.2.1
+    dependencies:
+      '@mikro-orm/core': 7.2.1
+      '@mikro-orm/sql': 7.2.1(@mikro-orm/core@7.2.1)
+      better-sqlite3: 13.0.3
+      kysely: 0.29.6
 
   /@neon-rs/load@0.0.4:
     resolution: {integrity: sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw==}
+    dev: false
 
   /@next/env@14.2.35:
     resolution: {integrity: sha512-DuhvCtj4t9Gwrx80dmz2F4t/zKQ4ktN8WrMwOuVzkJfBilwAwGr6v16M5eI8yCuZ63H9TTuEU09Iu2HqkzFPVQ==}
@@ -2746,10 +2068,12 @@ packages:
   /@noble/ciphers@2.2.0:
     resolution: {integrity: sha512-Z6pjIZ/8IJcCGzb2S/0Px5J81yij85xASuk1teLNeg75bfT07MV3a/O2Mtn1I2se43k3lkVEcFaR10N4cgQcZA==}
     engines: {node: '>= 20.19.0'}
+    dev: false
 
   /@noble/hashes@2.2.0:
     resolution: {integrity: sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==}
     engines: {node: '>= 20.19.0'}
+    dev: false
 
   /@nodelib/fs.scandir@2.1.5:
     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
@@ -2775,16 +2099,7 @@ packages:
   /@opentelemetry/semantic-conventions@1.43.0:
     resolution: {integrity: sha512-eSYWTm620tTk45EKSedaUL8MFYI8hW164hIXsgIHyxu3VobUB3fFCu5t0hQby6OoWRPsG1KkKUG2M5UadiLiVg==}
     engines: {node: '>=14'}
-
-  /@oxc-project/types@0.143.0:
-    resolution: {integrity: sha512-u6JZdLBTLotrNC9Vd6vPssINdzcCzleKAH6EJKImQb7GtYvX5keN2dxkoK44stCc4tffE6QQRtZTXVSzsLUlWA==}
-    dev: true
-
-  /@quansync/fs@1.0.0:
-    resolution: {integrity: sha512-4TJ3DFtlf1L5LDMaM6CanJ/0lckGNtJcMjQ1NAV6zDmA0tEHKZtxNKin8EgPaVX1YzljbxckyT2tJrpQKAtngQ==}
-    dependencies:
-      quansync: 1.0.0
-    dev: true
+    dev: false
 
   /@radix-ui/number@1.0.1:
     resolution: {integrity: sha512-T5gIdVO2mmPW3NNhjNgEP3cqMXjXL9UbO0BzWcXfvdBs+BohbQxvd/K5hSVKmn9/lbTdsQVKbUcP5WLCwvUbBg==}
@@ -3222,203 +2537,73 @@ packages:
   /@radix-ui/react-use-previous@1.0.1(@types/react@18.3.3)(react@18.3.1):
     resolution: {integrity: sha512-cV5La9DPwiQ7S0gf/0qiD6YgNqM5Fk97Kdrlc5yBcrF3jyEZQwm7vYFqMo4IfeHgJXsRaMvLABFtd0OVEmZhDw==}
     peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@types/react': 18.3.3
-      react: 18.3.1
-    dev: false
-
-  /@radix-ui/react-use-rect@1.0.1(@types/react@18.3.3)(react@18.3.1):
-    resolution: {integrity: sha512-Cq5DLuSiuYVKNU8orzJMbl15TXilTnJKUCltMVQg53BQOF1/C5toAaGrowkgksdBQ9H+SRL23g0HDmg9tvmxXw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@radix-ui/rect': 1.0.1
-      '@types/react': 18.3.3
-      react: 18.3.1
-    dev: false
-
-  /@radix-ui/react-use-size@1.0.1(@types/react@18.3.3)(react@18.3.1):
-    resolution: {integrity: sha512-ibay+VqrgcaI6veAojjofPATwledXiSmX+C0KrBk/xgpX9rBzPV3OsfwlhQdUOFbh+LKQorLYT+xTXW9V8yd0g==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@radix-ui/react-use-layout-effect': 1.0.1(@types/react@18.3.3)(react@18.3.1)
-      '@types/react': 18.3.3
-      react: 18.3.1
-    dev: false
-
-  /@radix-ui/react-visually-hidden@1.0.3(@types/react-dom@18.3.0)(@types/react@18.3.3)(react-dom@18.3.1)(react@18.3.1):
-    resolution: {integrity: sha512-D4w41yN5YRKtu464TLnByKzMDG/JlMPHtfZgQAu9v6mNakUqGUI9vUrfQKz8NK41VMm/xbZbh76NUTVtIYqOMA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0
-      react-dom: ^16.8 || ^17.0 || ^18.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@radix-ui/react-primitive': 1.0.3(@types/react-dom@18.3.0)(@types/react@18.3.3)(react-dom@18.3.1)(react@18.3.1)
-      '@types/react': 18.3.3
-      '@types/react-dom': 18.3.0
-      react: 18.3.1
-      react-dom: 18.3.1(react@18.3.1)
-    dev: false
-
-  /@radix-ui/rect@1.0.1:
-    resolution: {integrity: sha512-fyrgCaedtvMg9NK3en0pnOYJdtfwxUcNolezkNPUsoX57X8oQk+NkqcvzHXD2uKNij6GXmWU9NDru2IWjrO4BQ==}
-    dependencies:
-      '@babel/runtime': 7.29.7
-    dev: false
-
-  /@rolldown/binding-android-arm64@1.2.3:
-    resolution: {integrity: sha512-zrJtHDcaZJ1Fp7xf4hNl+7seH9Cn/N5TwLYkhgXREtBwAd/jaqW3uqeHxpDugJLVICWg4eW44kOQEGJ1r6jCGw==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [android]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-darwin-arm64@1.2.3:
-    resolution: {integrity: sha512-ieIiibVCp0tX7TLu2cafoNPv8wJyYi01ekXpbf8q2j7F4rGAhhXb/eQh7ge9DRBY78GwmRQtvjZDux7EDbA8kA==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-darwin-x64@1.2.3:
-    resolution: {integrity: sha512-Zh9tCon19eDXJoihx0rqKhMUlMYqzwj3aPsSuHmI4RWZh62dWUL+DJN4C5YQya5TcQBJU/Fe8+rY0jhXTQITqA==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [x64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-freebsd-x64@1.2.3:
-    resolution: {integrity: sha512-nGbJWewA1wrXXZiQhjAT5rhibGfns5ZNkDVqxsO6zJ3f3YvpoDNNmGMSbbhLuXKjNScaBJVOAboztAWVespQMg==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [x64]
-    os: [freebsd]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-arm-gnueabihf@1.2.3:
-    resolution: {integrity: sha512-QNniJr5Kml0kDEB98jiDOJjXNroxIIi0IXIbdYzY26Xt1pVbeP62+KnoIZLwirOymX/0jDk/2gI/bNUv7A7OIw==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-arm64-gnu@1.2.3:
-    resolution: {integrity: sha512-TkqEAcmmvH3I/q4114NB4RVt6241Dao48pF45uLcFGrwAaIn0iITgTAKP/dLjbN0R4buJjGb91+UHSoFmpgIWw==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-arm64-musl@1.2.3:
-    resolution: {integrity: sha512-NHqjnxpsndf4MPymxteFAWHHfkTL8HjWh1KB7z23ofZ6QO2euONuxDXjat69dKZRALnGypg8k8SsK8vZJoXv1Q==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-ppc64-gnu@1.2.3:
-    resolution: {integrity: sha512-6tbrbwfz5GB9DQ4Jwo6hy9v+vR31xZlvzZ6n5Xut6Hhx5PvrA9q/HsK8KMaYQp063iqZGXwNvZtYNLD7EM/x0w==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [ppc64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-s390x-gnu@1.2.3:
-    resolution: {integrity: sha512-oyuXxXmoZHjXC917IAPFAAv4wWAa0cM9afk8nx1+9/jNNOX1uPf8yDA6p7G0RypOfw/X0PQt5IfoquY1um+zSg==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [s390x]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-x64-gnu@1.2.3:
-    resolution: {integrity: sha512-TytMwF2KVGqP2tgd0I1OY0PAv78dZRAYcF5ssDzjM34SUXCED3uXvSd5+lHoC0bTD6eEdFz7LdQNCO1y0oVk9w==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@rolldown/binding-linux-x64-musl@1.2.3:
-    resolution: {integrity: sha512-/E9m3qstrJFVPoULV25mVQblSNExY2+kBsYe4sy0Tn0yOOgJ8wZbZt3KnRbF/XeU2Gl1STKUQnDNTqhIE5MD4A==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
+      '@types/react': '*'
+      react: ^16.8 || ^17.0 || ^18.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@types/react': 18.3.3
+      react: 18.3.1
+    dev: false
 
-  /@rolldown/binding-openharmony-arm64@1.2.3:
-    resolution: {integrity: sha512-Kr0OcsoQI816i6HOl3vFHpd1K0eZyh76zgfj4c1nTyaTsd5r2Mj1lwM4R90y/qaCfmTn9eHy0SKwi98eitRxug==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [openharmony]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@radix-ui/react-use-rect@1.0.1(@types/react@18.3.3)(react@18.3.1):
+    resolution: {integrity: sha512-Cq5DLuSiuYVKNU8orzJMbl15TXilTnJKUCltMVQg53BQOF1/C5toAaGrowkgksdBQ9H+SRL23g0HDmg9tvmxXw==}
+    peerDependencies:
+      '@types/react': '*'
+      react: ^16.8 || ^17.0 || ^18.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@radix-ui/rect': 1.0.1
+      '@types/react': 18.3.3
+      react: 18.3.1
+    dev: false
 
-  /@rolldown/binding-win32-arm64-msvc@1.2.3:
-    resolution: {integrity: sha512-hOtMwTqnME+/gJcH/PCZ0wn0zPUjiWOgkHpxbSJpfGKMezHltx1S7/k1SitzVa7Ww2cqrDDaFbZEhcJZO8o+Jw==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [arm64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@radix-ui/react-use-size@1.0.1(@types/react@18.3.3)(react@18.3.1):
+    resolution: {integrity: sha512-ibay+VqrgcaI6veAojjofPATwledXiSmX+C0KrBk/xgpX9rBzPV3OsfwlhQdUOFbh+LKQorLYT+xTXW9V8yd0g==}
+    peerDependencies:
+      '@types/react': '*'
+      react: ^16.8 || ^17.0 || ^18.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@radix-ui/react-use-layout-effect': 1.0.1(@types/react@18.3.3)(react@18.3.1)
+      '@types/react': 18.3.3
+      react: 18.3.1
+    dev: false
 
-  /@rolldown/binding-win32-x64-msvc@1.2.3:
-    resolution: {integrity: sha512-ekcqMMkI2PlhYnfzQnB/cEdYUVVJViWvoUyLrbzgDoi3Snfc1mVBwdnc306ufA5ejy8JSPjT2RlW1nQSjW7efg==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    cpu: [x64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@radix-ui/react-visually-hidden@1.0.3(@types/react-dom@18.3.0)(@types/react@18.3.3)(react-dom@18.3.1)(react@18.3.1):
+    resolution: {integrity: sha512-D4w41yN5YRKtu464TLnByKzMDG/JlMPHtfZgQAu9v6mNakUqGUI9vUrfQKz8NK41VMm/xbZbh76NUTVtIYqOMA==}
+    peerDependencies:
+      '@types/react': '*'
+      '@types/react-dom': '*'
+      react: ^16.8 || ^17.0 || ^18.0
+      react-dom: ^16.8 || ^17.0 || ^18.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@radix-ui/react-primitive': 1.0.3(@types/react-dom@18.3.0)(@types/react@18.3.3)(react-dom@18.3.1)(react@18.3.1)
+      '@types/react': 18.3.3
+      '@types/react-dom': 18.3.0
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+    dev: false
 
-  /@rolldown/pluginutils@1.0.1:
-    resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==}
-    dev: true
+  /@radix-ui/rect@1.0.1:
+    resolution: {integrity: sha512-fyrgCaedtvMg9NK3en0pnOYJdtfwxUcNolezkNPUsoX57X8oQk+NkqcvzHXD2uKNij6GXmWU9NDru2IWjrO4BQ==}
+    dependencies:
+      '@babel/runtime': 7.29.7
+    dev: false
 
   /@rollup/rollup-android-arm-eabi@4.62.2:
     resolution: {integrity: sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg==}
@@ -3944,6 +3129,7 @@ packages:
 
   /@standard-schema/spec@1.1.0:
     resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
+    dev: false
 
   /@swc/counter@0.1.3:
     resolution: {integrity: sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==}
@@ -3974,7 +3160,7 @@ packages:
     resolution: {integrity: sha512-vxhUy4J8lyeyinH7Azl1pdd43GJhZH/tP2weN8TntQblOY+A0XbT8DJk1/oCPuOOyg/Ja757rG0CgHcWC8OfMA==}
     dev: true
 
-  /@turbo/gen@2.0.9(@types/node@20.14.11)(typescript@5.5.3):
+  /@turbo/gen@2.0.9(@types/node@20.14.11)(typescript@5.9.3):
     resolution: {integrity: sha512-IVCBa/+qxsO7srAvFpto0AF09Zei+zpDoosUsHSEwgn/22rVuZ6hdcJdxcQ9kHeMafJpxqLK9iHNSdXUctJ0Vw==}
     hasBin: true
     dependencies:
@@ -3986,7 +3172,7 @@ packages:
       node-plop: 0.26.3
       picocolors: 1.0.1
       proxy-agent: 6.5.0
-      ts-node: 10.9.2(@types/node@20.14.11)(typescript@5.5.3)
+      ts-node: 10.9.2(@types/node@20.14.11)(typescript@5.9.3)
       update-check: 1.5.4
       validate-npm-package-name: 5.0.1
     transitivePeerDependencies:
@@ -4041,7 +3227,7 @@ packages:
     resolution: {integrity: sha512-ZUxbzKl0IfJILTS6t7ip5fQQM/J3TJYubDm3nMbgubNNYS62eXeUpoLUC8/7fJNiFYHTrGPQn7hspDUzIHX3UA==}
     dependencies:
       '@types/minimatch': 6.0.0
-      '@types/node': 20.14.11
+      '@types/node': 22.18.6
     dev: true
 
   /@types/inquirer@6.5.0:
@@ -4062,6 +3248,12 @@ packages:
     resolution: {integrity: sha512-kprQpL8MMeszbz6ojB5/tU8PLN4kesnN8Gjzw349rDlNgsSzg90lAVj3llK99Dh7JON+t9AuscPPFW6mPbTnSA==}
     dependencies:
       undici-types: 5.26.5
+    dev: true
+
+  /@types/node@22.18.6:
+    resolution: {integrity: sha512-r8uszLPpeIWbNKtvWRt/DbVi5zbqZyj1PTmhRMqBMvDnaz1QpmSKujUtJLrqGZeoM8v72MfYggDceY4K1itzWQ==}
+    dependencies:
+      undici-types: 6.21.0
 
   /@types/prop-types@15.7.15:
     resolution: {integrity: sha512-F6bEyamV9jKGAFBEmlQnesRPGOQqS2+Uwi0Em15xenOxHaf2hv6L8YCVn3rPdPJOiJfPiCnLIRyvwVaqMY3MIw==}
@@ -4080,18 +3272,13 @@ packages:
   /@types/through@0.0.33:
     resolution: {integrity: sha512-HsJ+z3QuETzP3cswwtzt2vEIiHBk/dCcHGhbmG5X3ecnwFD/lPrMpliGXxSCg03L9AhrdwA4Oz/qfspkDW+xGQ==}
     dependencies:
-      '@types/node': 20.14.11
+      '@types/node': 22.18.6
     dev: true
 
   /@types/tinycolor2@1.4.6:
     resolution: {integrity: sha512-iEN8J0BoMnsWBqjVbWH/c0G0Hh7O21lpR2/+PrvAVgWdzL7eexIFm4JN/Wn10PTcmNdtS6U67r499mlWMXOxNw==}
     dev: true
 
-  /@types/ws@8.18.1:
-    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
-    dependencies:
-      '@types/node': 20.14.11
-
   /@vitest/expect@3.2.4:
     resolution: {integrity: sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==}
     dependencies:
@@ -4112,254 +3299,58 @@ packages:
       vite:
         optional: true
     dependencies:
-      '@vitest/spy': 3.2.4
-      estree-walker: 3.0.3
-      magic-string: 0.30.21
-      vite: 7.3.6(@types/node@20.14.11)(jiti@2.4.2)
-
-  /@vitest/pretty-format@3.2.4:
-    resolution: {integrity: sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==}
-    dependencies:
-      tinyrainbow: 2.0.0
-
-  /@vitest/pretty-format@3.2.7:
-    resolution: {integrity: sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==}
-    dependencies:
-      tinyrainbow: 2.0.0
-
-  /@vitest/runner@3.2.4:
-    resolution: {integrity: sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==}
-    dependencies:
-      '@vitest/utils': 3.2.4
-      pathe: 2.0.3
-      strip-literal: 3.1.0
-
-  /@vitest/snapshot@3.2.4:
-    resolution: {integrity: sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==}
-    dependencies:
-      '@vitest/pretty-format': 3.2.4
-      magic-string: 0.30.21
-      pathe: 2.0.3
-
-  /@vitest/spy@3.2.4:
-    resolution: {integrity: sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==}
-    dependencies:
-      tinyspy: 4.0.4
-
-  /@vitest/utils@3.2.4:
-    resolution: {integrity: sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==}
-    dependencies:
-      '@vitest/pretty-format': 3.2.4
-      loupe: 3.2.1
-      tinyrainbow: 2.0.0
-
-  /@yudiel/react-qr-scanner@2.1.0(react-dom@18.3.1)(react@18.3.1):
-    resolution: {integrity: sha512-O3832Qk8YU+vnLO+tsJalfQcXRZ1pOB9l6WrI3OdwpxkQEzukpT48M6Hc2vUUe1rFE6qapQnV3RGRFNM0S7CHw==}
-    peerDependencies:
-      react: ^17 || ^18 || ^19
-      react-dom: ^17 || ^18 || ^19
-    dependencies:
-      barcode-detector: 2.3.1
-      react: 18.3.1
-      react-dom: 18.3.1(react@18.3.1)
-      webrtc-adapter: 9.0.1
-    dev: false
-
-  /@yuku-codegen/binding-android-arm64@0.8.3:
-    resolution: {integrity: sha512-/EKnnqwvN7xYoVDhQEIEJTdPDwGW1wkFz/2Eku3ES/IJd4lcQh/OaIDFBmoJKvpe12enrb1TIoYh1fxasGXolA==}
-    cpu: [arm64]
-    os: [android]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-darwin-arm64@0.8.3:
-    resolution: {integrity: sha512-DFAOliF5YIPv3ayNHGOJhIun6Af4kMaL/YXxf8ZtD1qrOIMFnX/AQBhwfvLalhwmmxuGA8AUteaKRHBvdKZFVA==}
-    cpu: [arm64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-darwin-x64@0.8.3:
-    resolution: {integrity: sha512-WlMh4/oEibaTzE9j5Zq8qnsrH4Ii4kWdcDv/Pj2Rb/MYSrKghtg+bxbWpPe/6zJD21p9zZBApQUxl8ECpZOJuQ==}
-    cpu: [x64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-freebsd-x64@0.8.3:
-    resolution: {integrity: sha512-hoDOpPP0FTxPSD+6w0Gs4p8iL1yXe6jjIXcdzNxyT1KE6B3JI6O0gTIWQISJ+8QyNpNjIwBb7nHCdRavktJM6A==}
-    cpu: [x64]
-    os: [freebsd]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-arm-gnu@0.8.3:
-    resolution: {integrity: sha512-nNW0GGMJyF04pK4A7Kq7WAYtUWU9uI5ugDAoXl9yHpd3IIZ8UI+zFlM01e+ZGWnQcdxYYLumeRe/EjzZT9bVfQ==}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-arm-musl@0.8.3:
-    resolution: {integrity: sha512-/jpxKhO8AV5TmXgT3R2Gv3YctKRUhyDzd5bQw8TiJ3O4z7qerHzoW2kE40fPAO3L434/IZtZbdhr8HuOqiwECA==}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-arm64-gnu@0.8.3:
-    resolution: {integrity: sha512-CYhLJfnCknabfLvUjsanxC5s3BBtZHUwfzdDL7GcqShIRQh2qqgG7pPfFrFJ6Jp56kkjKXkfluFGn9nnIv0nZg==}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-arm64-musl@0.8.3:
-    resolution: {integrity: sha512-c6gEdnI0MgA7/rVw6CACMciSbAcxVwLyD/jSBbMLWUeqqbysCNGrGPAHdpSaadpz3W1bd+OdXt9XWjfm66708w==}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-x64-gnu@0.8.3:
-    resolution: {integrity: sha512-CRVZ9Rw5lIah/PpWeShWv7XiUCMY15N6rZRA2sEZrQvc5Az7Dv9/wsDMa6oBMkfQLXuDkFo4G1QOYyWbebjejg==}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-linux-x64-musl@0.8.3:
-    resolution: {integrity: sha512-G12Nhecjmv7OlbCX6Y4HU4wYYePd111kTE+yTjbitnt+P3m8bNegtYG4ZGo4scGTq8cKsLF4xcda1XNzCUA6nQ==}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-win32-arm64@0.8.3:
-    resolution: {integrity: sha512-i8bpXWaMlik9DvFl+89emEx3RZFtSd21Vlt0UrnPvUC7h8NGElP2SwQcdcG+pPmihFIYJAoIuJLw7YdQcFcDkA==}
-    cpu: [arm64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-codegen/binding-win32-x64@0.8.3:
-    resolution: {integrity: sha512-vlYymeTSsx+qxZoNvdl6KehgYDaQC4Sk/9KUnM3V2mriyCwSdhW7lqdpQGl+RLGsDTxyuRGjzGIjgRWk3lohmA==}
-    cpu: [x64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-android-arm64@0.8.3:
-    resolution: {integrity: sha512-vySYRsMeul9ssvxeHdxgS9ZUIcq7gqljWNqgokjJE0uQWvVvOprihJ6hOsiifVqWsla0BMc3vAFBvNS9QqCw7g==}
-    cpu: [arm64]
-    os: [android]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-darwin-arm64@0.8.3:
-    resolution: {integrity: sha512-+wpB/wqhiZ685Y77I+lj6v9pHSAJ3Y+QMHJmvch0Q0ahIMbNwtKk3s54MhtjCMKO1qpjPbyN/PjuHDg2hbKaVQ==}
-    cpu: [arm64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-darwin-x64@0.8.3:
-    resolution: {integrity: sha512-jKqiWejj4zVy7pPtEGu4/Ty+pG1h7ooQOXIkm7shKZTSwTU9X8X+eoH11uIeKHZi2SQWV0GhNz0J56eerseysQ==}
-    cpu: [x64]
-    os: [darwin]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-freebsd-x64@0.8.3:
-    resolution: {integrity: sha512-FC7zSwzFzd4z9bsId07CiHLR+Iw6yW/LzIQhL5AUtPUuVXLgEyx0rilgbRUYkl1CT3GJcLpkh63WuPZUSgCDzw==}
-    cpu: [x64]
-    os: [freebsd]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-linux-arm-gnu@0.8.3:
-    resolution: {integrity: sha512-So61j88b9/ygDnUPlWCm1EUPw4HSxAyDjrNHKgud5N3aRDQ3kw94nW7TriXbo7GBXID9oBHCMNm1r1Fof/Df5Q==}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-linux-arm-musl@0.8.3:
-    resolution: {integrity: sha512-Nmnn20yJvSSKL8ZdtqReBRSGCDkSMqR5jEk/Sk/cdIdZmqVD49Z6M7w2GbMjdrxMI1MBPbsWFMMWxa93cd5t5g==}
-    cpu: [arm]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
-
-  /@yuku-parser/binding-linux-arm64-gnu@0.8.3:
-    resolution: {integrity: sha512-Lfgw7AXJ0rxu6BMPGgfc8HLJWEIr8BHhCzcQp/75k+NM90uCLkHlBNqIg/K42KlSvBgAvu9euOvjdswib+4qJA==}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
+      '@vitest/spy': 3.2.4
+      estree-walker: 3.0.3
+      magic-string: 0.30.21
+      vite: 7.3.6(@types/node@22.18.6)(jiti@2.4.2)
 
-  /@yuku-parser/binding-linux-arm64-musl@0.8.3:
-    resolution: {integrity: sha512-cfRyu87xsJ0tFkHNsnMC4Rq6+xsFJ6i2dc4VAH52d2qLvykEJU/Mdi3ul1O2PyOApX/LoLT3uQZ0fWs3D5XE4w==}
-    cpu: [arm64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@vitest/pretty-format@3.2.4:
+    resolution: {integrity: sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==}
+    dependencies:
+      tinyrainbow: 2.0.0
 
-  /@yuku-parser/binding-linux-x64-gnu@0.8.3:
-    resolution: {integrity: sha512-GcQQCUuYxbm6P1n+io/A50rvWKDeWHutIp6rW0ycDOZuEQjOb8hDVgS88+NDyOnd9FfS0/Z6GXopcRFDyKpzOg==}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@vitest/pretty-format@3.2.7:
+    resolution: {integrity: sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==}
+    dependencies:
+      tinyrainbow: 2.0.0
 
-  /@yuku-parser/binding-linux-x64-musl@0.8.3:
-    resolution: {integrity: sha512-rMkImBGZzg7GZlj8krYtdiezyjYI4igjKWMut5T65jHyNWFigMQrEpn9mDIBflloW9FKhGE3mN6yTZ/N+4HRwg==}
-    cpu: [x64]
-    os: [linux]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@vitest/runner@3.2.4:
+    resolution: {integrity: sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==}
+    dependencies:
+      '@vitest/utils': 3.2.4
+      pathe: 2.0.3
+      strip-literal: 3.1.0
 
-  /@yuku-parser/binding-win32-arm64@0.8.3:
-    resolution: {integrity: sha512-/2Pl2cAzCXWxah8FqJapEj/ikpt9cEutEZFCa0hnbfrshkn5+C+aBM3ZDq62d1jsgQjBMmqr5HVhJUA4OAG/Tg==}
-    cpu: [arm64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@vitest/snapshot@3.2.4:
+    resolution: {integrity: sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==}
+    dependencies:
+      '@vitest/pretty-format': 3.2.4
+      magic-string: 0.30.21
+      pathe: 2.0.3
 
-  /@yuku-parser/binding-win32-x64@0.8.3:
-    resolution: {integrity: sha512-Ntnvjoan9jnfLhn7Kn3h8j/bhsbVdQSVmKUqFULKtmwImLCJVHOJbLL4qbEJyrOQ7r/FBL1/c/dRvx/AQWzzXg==}
-    cpu: [x64]
-    os: [win32]
-    requiresBuild: true
-    dev: true
-    optional: true
+  /@vitest/spy@3.2.4:
+    resolution: {integrity: sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==}
+    dependencies:
+      tinyspy: 4.0.4
 
-  /@yuku-toolchain/types@0.8.3:
-    resolution: {integrity: sha512-9LN3HYs3A9qSPVFunsxlbfwBcUgexti3TmhOzIxB/UH8zFuaHQJXTRDcN17DW6cp1GsyZtiZA7f18uIra36Jag==}
-    dev: true
+  /@vitest/utils@3.2.4:
+    resolution: {integrity: sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==}
+    dependencies:
+      '@vitest/pretty-format': 3.2.4
+      loupe: 3.2.1
+      tinyrainbow: 2.0.0
+
+  /@yudiel/react-qr-scanner@2.1.0(react-dom@18.3.1)(react@18.3.1):
+    resolution: {integrity: sha512-O3832Qk8YU+vnLO+tsJalfQcXRZ1pOB9l6WrI3OdwpxkQEzukpT48M6Hc2vUUe1rFE6qapQnV3RGRFNM0S7CHw==}
+    peerDependencies:
+      react: ^17 || ^18 || ^19
+      react-dom: ^17 || ^18 || ^19
+    dependencies:
+      barcode-detector: 2.3.1
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      webrtc-adapter: 9.0.1
+    dev: false
 
   /acorn-jsx@5.3.2(acorn@8.17.0):
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
@@ -4430,11 +3421,6 @@ packages:
       color-convert: 2.0.1
     dev: true
 
-  /ansis@4.3.1:
-    resolution: {integrity: sha512-BJ8/l4R5LRE7hW9WdSuGYrLSHi2ynxeFpDFbH0K/CgNeY/tyhk+vO6TYxXC5r5CpUhNVX310xzPsN/H9lCdfOA==}
-    engines: {node: '>=14'}
-    dev: true
-
   /any-promise@1.3.0:
     resolution: {integrity: sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==}
     dev: true
@@ -4482,61 +3468,6 @@ packages:
       tslib: 2.8.1
     dev: true
 
-  /auth@1.6.11(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4):
-    resolution: {integrity: sha512-SyQZAU37AosE8koF0fBsDob9+Q7AvdAA1YFblg/5DkhwdiaHGIACjDZTJJq8cEWjkLAszDcAc0kC2DSr1xZ8wg==}
-    hasBin: true
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/preset-react': 7.29.7(@babel/core@7.29.7)
-      '@babel/preset-typescript': 7.29.7(@babel/core@7.29.7)
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/telemetry': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)
-      '@better-auth/utils': 0.4.0
-      '@clack/prompts': 0.11.0
-      '@mrleebo/prisma-ast': 0.13.1
-      better-auth: 1.6.11(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4)
-      c12: 3.3.4
-      chalk: 5.6.2
-      commander: 12.1.0
-      dotenv: 17.4.2
-      get-tsconfig: 4.14.0
-      open: 10.2.0
-      prettier: 3.9.5
-      prompts: 2.4.2
-      semver: 7.8.5
-      yocto-spinner: 0.2.3
-      zod: 4.4.3
-    transitivePeerDependencies:
-      - '@better-fetch/fetch'
-      - '@cloudflare/workers-types'
-      - '@lynx-js/react'
-      - '@opentelemetry/api'
-      - '@prisma/client'
-      - '@sveltejs/kit'
-      - '@tanstack/react-start'
-      - '@tanstack/solid-start'
-      - better-call
-      - better-sqlite3
-      - drizzle-kit
-      - drizzle-orm
-      - jose
-      - kysely
-      - magicast
-      - mongodb
-      - mysql2
-      - nanostores
-      - next
-      - pg
-      - prisma
-      - react
-      - react-dom
-      - solid-js
-      - supports-color
-      - svelte
-      - vitest
-      - vue
-    dev: true
-
   /autoprefixer@10.4.19(postcss@8.4.39):
     resolution: {integrity: sha512-BaENR2+zBZ8xXhM4pUaKUxlVdxZ0EZhjvbopwnXmxRUfqDmwSpC2lAi/QXvx7NRdPCo1WKEcEF6mV64si1z4Ew==}
     engines: {node: ^10 || ^12 || >=14}
@@ -4553,6 +3484,11 @@ packages:
       postcss-value-parser: 4.2.0
     dev: true
 
+  /aws-ssl-profiles@1.1.2:
+    resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
+    engines: {node: '>= 6.0.0'}
+    dev: false
+
   /balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
     dev: true
@@ -4572,23 +3508,23 @@ packages:
     resolution: {integrity: sha512-c/jurFrDLyui7o1J86yLkRu4LMsTYcBohveus7/I2Hzdn9KIP2bdJPTue/lR1KH46enoPbD77GKeSYNdyPoD3Q==}
     engines: {node: '>=6.0.0'}
     hasBin: true
+    dev: true
 
   /basic-ftp@5.3.1:
     resolution: {integrity: sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==}
     engines: {node: '>=10.0.0'}
     dev: true
 
-  /better-auth@1.6.11(drizzle-kit@0.31.4)(drizzle-orm@0.45.2)(next@14.2.35)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4):
-    resolution: {integrity: sha512-Wwt6+q07dwIhsp6XiM7L1qSXVUWBEtNl+eZvwM778CguFqDZFBN9Pt6LtFaHl55t8Z+Zc//5kxcbgDY8/79vFQ==}
+  /better-auth@1.7.6(next@14.2.35)(pg@8.23.0)(react-dom@18.3.1)(react@18.3.1)(vitest@3.2.4):
+    resolution: {integrity: sha512-WTMqOpmTTj+oBoX7zzPOzL85342Upyf+/v0IkH1kvGRA85lV4JGRFIYMIRKqvjZ6ShsuL5VX/c9C13jtoZXcKA==}
     peerDependencies:
       '@lynx-js/react': '*'
       '@prisma/client': ^5.0.0 || ^6.0.0 || ^7.0.0
       '@sveltejs/kit': ^2.0.0
       '@tanstack/react-start': ^1.0.0
       '@tanstack/solid-start': ^1.0.0
-      better-sqlite3: ^12.0.0
-      drizzle-kit: '>=0.31.4'
-      drizzle-orm: ^0.45.2
+      drizzle-kit: '>=0.31.4 || >=1.0.0-beta.1'
+      drizzle-orm: ^0.45.2 || >=1.0.0-rc.1 <2.0.0
       mongodb: ^6.0.0 || ^7.0.0
       mysql2: ^3.0.0
       next: ^14.0.0 || ^15.0.0 || ^16.0.0
@@ -4598,7 +3534,7 @@ packages:
       react-dom: ^18.0.0 || ^19.0.0
       solid-js: ^1.0.0
       svelte: ^4.0.0 || ^5.0.0
-      vitest: ^2.0.0 || ^3.0.0 || ^4.0.0
+      vitest: ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0
       vue: ^3.0.0
     peerDependenciesMeta:
       '@lynx-js/react':
@@ -4611,8 +3547,6 @@ packages:
         optional: true
       '@tanstack/solid-start':
         optional: true
-      better-sqlite3:
-        optional: true
       drizzle-kit:
         optional: true
       drizzle-orm:
@@ -4640,46 +3574,53 @@ packages:
       vue:
         optional: true
     dependencies:
-      '@better-auth/core': 1.6.11(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)(better-call@1.3.5)(jose@6.2.3)(kysely@0.28.17)(nanostores@1.4.0)
-      '@better-auth/drizzle-adapter': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(drizzle-orm@0.45.2)
-      '@better-auth/kysely-adapter': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(kysely@0.28.17)
-      '@better-auth/memory-adapter': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)
-      '@better-auth/mongo-adapter': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)
-      '@better-auth/prisma-adapter': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)
-      '@better-auth/telemetry': 1.6.11(@better-auth/core@1.6.11)(@better-auth/utils@0.4.0)(@better-fetch/fetch@1.1.21)
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
+      '@better-auth/core': 1.7.6(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)(better-call@1.4.0)(jose@6.2.3)(kysely@0.29.6)(nanostores@1.4.0)
+      '@better-auth/drizzle-adapter': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)
+      '@better-auth/kysely-adapter': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)(kysely@0.29.6)
+      '@better-auth/memory-adapter': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)
+      '@better-auth/mongo-adapter': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)
+      '@better-auth/prisma-adapter': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)
+      '@better-auth/telemetry': 1.7.6(@better-auth/core@1.7.6)(@better-auth/utils@0.4.2)(@better-fetch/fetch@1.3.2)
+      '@better-auth/utils': 0.4.2
+      '@better-fetch/fetch': 1.3.2
       '@noble/ciphers': 2.2.0
       '@noble/hashes': 2.2.0
-      better-call: 1.3.5(zod@4.4.3)
+      better-call: 1.4.0(zod@3.25.67)
       defu: 6.1.7
-      drizzle-kit: 0.31.4
-      drizzle-orm: 0.45.2(@libsql/client@0.14.0)(kysely@0.28.17)
       jose: 6.2.3
-      kysely: 0.28.17
+      kysely: 0.29.6
       nanostores: 1.4.0
-      next: 14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1)
+      next: 14.2.35(react-dom@18.3.1)(react@18.3.1)
+      pg: 8.23.0
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
-      vitest: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
-      zod: 4.4.3
+      vitest: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
+      zod: 4.6.5
     transitivePeerDependencies:
-      - '@cloudflare/workers-types'
       - '@opentelemetry/api'
+    dev: false
 
-  /better-call@1.3.5(zod@4.4.3):
-    resolution: {integrity: sha512-kOFJkBP7utAQLEYrobZm3vkTH8mXq5GNgvjc5/XEST1ilVHaxXUXfeDeFlqoETMtyqS4+3/h4ONX2i++ebZrvA==}
+  /better-call@1.4.0(zod@3.25.67):
+    resolution: {integrity: sha512-bBKOT4vv1kZLDgxVePdilk/Jwkn+dtRRsmi3DzHcDP+WnswyVl6dR59l2HEeP/0cB+bDoopASAesWDPIdd/zZA==}
     peerDependencies:
       zod: ^4.0.0
     peerDependenciesMeta:
       zod:
         optional: true
     dependencies:
-      '@better-auth/utils': 0.4.0
-      '@better-fetch/fetch': 1.1.21
-      rou3: 0.7.12
+      '@better-auth/utils': 0.5.0
+      '@better-fetch/fetch': 1.3.2
+      rou3: 0.9.2
       set-cookie-parser: 3.1.2
-      zod: 4.4.3
+      zod: 3.25.67
+    dev: false
+
+  /better-sqlite3@13.0.3:
+    resolution: {integrity: sha512-RbOBxmLBG8uvFUc15X9+9SFemKcQ0WBuISBVkpuiaUB2qblC8UWlHEjdWVoZ8AdhSwmoEgsiXKfopX0CQxaACQ==}
+    engines: {node: '>=22'}
+    requiresBuild: true
+    dependencies:
+      node-addon-api: 8.9.2
 
   /binary-extensions@2.3.0:
     resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
@@ -4728,9 +3669,7 @@ packages:
       electron-to-chromium: 1.5.389
       node-releases: 2.0.51
       update-browserslist-db: 1.2.3(browserslist@4.28.5)
-
-  /buffer-from@1.1.2:
-    resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
+    dev: true
 
   /buffer@5.7.1:
     resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
@@ -4739,13 +3678,6 @@ packages:
       ieee754: 1.2.1
     dev: true
 
-  /bundle-name@4.1.0:
-    resolution: {integrity: sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==}
-    engines: {node: '>=18'}
-    dependencies:
-      run-applescript: 7.1.0
-    dev: true
-
   /bundle-require@5.1.0(esbuild@0.27.7):
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -4762,37 +3694,10 @@ packages:
     dependencies:
       streamsearch: 1.1.0
 
-  /c12@3.3.4:
-    resolution: {integrity: sha512-cM0ApFQSBXuourJejzwv/AuPRvAxordTyParRVcHjjtXirtkzM0uK2L9TTn9s0cXZbG7E55jCivRQzoxYmRAlA==}
-    peerDependencies:
-      magicast: '*'
-    peerDependenciesMeta:
-      magicast:
-        optional: true
-    dependencies:
-      chokidar: 5.0.0
-      confbox: 0.2.4
-      defu: 6.1.7
-      dotenv: 17.4.2
-      exsolve: 1.1.0
-      giget: 3.3.0
-      jiti: 2.7.0
-      ohash: 2.0.11
-      pathe: 2.0.3
-      perfect-debounce: 2.1.0
-      pkg-types: 2.3.1
-      rc9: 3.0.1
-    dev: true
-
   /cac@6.7.14:
     resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
     engines: {node: '>=8'}
 
-  /cac@7.0.0:
-    resolution: {integrity: sha512-tixWYgm5ZoOD+3g6UTea91eow5z6AAHaho3g0V9CNSNb45gM8SmflpAc+GRd1InC4AqN/07Unrgp56Y94N9hJQ==}
-    engines: {node: '>=20.19.0'}
-    dev: true
-
   /callsites@3.1.0:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
@@ -4848,11 +3753,6 @@ packages:
       supports-color: 7.2.0
     dev: true
 
-  /chalk@5.6.2:
-    resolution: {integrity: sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==}
-    engines: {node: ^12.17.0 || ^14.13 || >=16.0.0}
-    dev: true
-
   /change-case@3.1.0:
     resolution: {integrity: sha512-2AZp7uJZbYEzRPsFoa+ijKdvp9zsrnnt6+yFokfwEpeJm0xuJDVoxiRCAaTzyJND8GJkofo2IcKWaUZ/OECVzw==}
     dependencies:
@@ -4888,17 +3788,6 @@ packages:
     resolution: {integrity: sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==}
     engines: {node: '>= 16'}
 
-  /chevrotain@10.5.0:
-    resolution: {integrity: sha512-Pkv5rBY3+CsHOYfV5g/Vs5JY9WTHHDEKOlohI2XeygaZhUeqhAlldZ8Hz9cRmxu709bvS08YzxHdTPHhffc13A==}
-    dependencies:
-      '@chevrotain/cst-dts-gen': 10.5.0
-      '@chevrotain/gast': 10.5.0
-      '@chevrotain/types': 10.5.0
-      '@chevrotain/utils': 10.5.0
-      lodash: 4.17.21
-      regexp-to-ast: 0.5.0
-    dev: true
-
   /chokidar@3.6.0:
     resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
     engines: {node: '>= 8.10.0'}
@@ -4921,13 +3810,6 @@ packages:
       readdirp: 4.1.2
     dev: true
 
-  /chokidar@5.0.0:
-    resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
-    engines: {node: '>= 20.19.0'}
-    dependencies:
-      readdirp: 5.0.0
-    dev: true
-
   /class-variance-authority@0.7.0:
     resolution: {integrity: sha512-jFI8IQw4hczaL4ALINxqLEXQbWcNjoSkloa4IaufXCJr6QawJyw7tuRysRsrE8w2p/4gGaxKIt/hX3qz/IbD1A==}
     dependencies:
@@ -5003,6 +3885,7 @@ packages:
   /commander@12.1.0:
     resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
     engines: {node: '>=18'}
+    dev: false
 
   /commander@4.1.1:
     resolution: {integrity: sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==}
@@ -5017,10 +3900,6 @@ packages:
     resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
     dev: true
 
-  /confbox@0.2.4:
-    resolution: {integrity: sha512-ysOGlgTFbN2/Y6Cg3Iye8YKulHw+R2fNXHrgSmXISQdMnomY6eNDprVdW9R5xBguEqI954+S6709UyiO7B+6OQ==}
-    dev: true
-
   /consola@3.4.2:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
@@ -5033,9 +3912,6 @@ packages:
       upper-case: 1.1.3
     dev: true
 
-  /convert-source-map@2.0.0:
-    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
-
   /core-js-pure@3.49.0:
     resolution: {integrity: sha512-XM4RFka59xATyJv/cS3O3Kml72hQXUeGRuuTmMYFxwzc9/7C8OYTaIR/Ji+Yt8DXzsFLNhat15cE/JP15HrCgw==}
     requiresBuild: true
@@ -5063,10 +3939,6 @@ packages:
   /csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
-  /data-uri-to-buffer@4.0.1:
-    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
-    engines: {node: '>= 12'}
-
   /data-uri-to-buffer@6.0.2:
     resolution: {integrity: sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==}
     engines: {node: '>= 14'}
@@ -5096,32 +3968,15 @@ packages:
     resolution: {integrity: sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==}
     dev: true
 
-  /default-browser-id@5.0.1:
-    resolution: {integrity: sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==}
-    engines: {node: '>=18'}
-    dev: true
-
-  /default-browser@5.5.0:
-    resolution: {integrity: sha512-H9LMLr5zwIbSxrmvikGuI/5KGhZ8E2zH3stkMgM5LpOWDutGM2JZaj460Udnf1a+946zc7YBgrqEWwbk7zHvGw==}
-    engines: {node: '>=18'}
-    dependencies:
-      bundle-name: 4.1.0
-      default-browser-id: 5.0.1
-    dev: true
-
   /defaults@1.0.4:
     resolution: {integrity: sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==}
     dependencies:
       clone: 1.0.4
     dev: true
 
-  /define-lazy-prop@3.0.0:
-    resolution: {integrity: sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==}
-    engines: {node: '>=12'}
-    dev: true
-
   /defu@6.1.7:
     resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
+    dev: false
 
   /degenerator@5.0.1:
     resolution: {integrity: sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==}
@@ -5146,13 +4001,10 @@ packages:
       slash: 3.0.0
     dev: true
 
-  /destr@2.0.5:
-    resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
-    dev: true
-
   /detect-libc@2.0.2:
     resolution: {integrity: sha512-UX6sGumvvqSaXgdKGUsgZWqcUyIXZ/vZTrlRT/iobiKhGL0zL4d3osHj3uqllWJK+i+sixDS/3COVEOFbupFyw==}
     engines: {node: '>=8'}
+    dev: false
 
   /detect-node-es@1.1.0:
     resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==}
@@ -5203,235 +4055,14 @@ packages:
     resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
     engines: {node: '>=12'}
 
-  /dotenv@17.4.2:
-    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
-    engines: {node: '>=12'}
-    dev: true
-
-  /drizzle-kit@0.31.4:
-    resolution: {integrity: sha512-tCPWVZWZqWVx2XUsVpJRnH9Mx0ClVOf5YUHerZ5so1OKSlqww4zy1R5ksEdGRcO3tM3zj0PYN6V48TbQCL1RfA==}
-    hasBin: true
-    dependencies:
-      '@drizzle-team/brocli': 0.10.2
-      '@esbuild-kit/esm-loader': 2.6.5
-      esbuild: 0.25.12
-      esbuild-register: 3.6.0(esbuild@0.25.12)
-    transitivePeerDependencies:
-      - supports-color
-
-  /drizzle-orm@0.45.2(@libsql/client@0.14.0)(kysely@0.28.17):
-    resolution: {integrity: sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q==}
-    peerDependencies:
-      '@aws-sdk/client-rds-data': '>=3'
-      '@cloudflare/workers-types': '>=4'
-      '@electric-sql/pglite': '>=0.2.0'
-      '@libsql/client': '>=0.10.0'
-      '@libsql/client-wasm': '>=0.10.0'
-      '@neondatabase/serverless': '>=0.10.0'
-      '@op-engineering/op-sqlite': '>=2'
-      '@opentelemetry/api': ^1.4.1
-      '@planetscale/database': '>=1.13'
-      '@prisma/client': '*'
-      '@tidbcloud/serverless': '*'
-      '@types/better-sqlite3': '*'
-      '@types/pg': '*'
-      '@types/sql.js': '*'
-      '@upstash/redis': '>=1.34.7'
-      '@vercel/postgres': '>=0.8.0'
-      '@xata.io/client': '*'
-      better-sqlite3: '>=7'
-      bun-types: '*'
-      expo-sqlite: '>=14.0.0'
-      gel: '>=2'
-      knex: '*'
-      kysely: '*'
-      mysql2: '>=2'
-      pg: '>=8'
-      postgres: '>=3'
-      prisma: '*'
-      sql.js: '>=1'
-      sqlite3: '>=5'
-    peerDependenciesMeta:
-      '@aws-sdk/client-rds-data':
-        optional: true
-      '@cloudflare/workers-types':
-        optional: true
-      '@electric-sql/pglite':
-        optional: true
-      '@libsql/client':
-        optional: true
-      '@libsql/client-wasm':
-        optional: true
-      '@neondatabase/serverless':
-        optional: true
-      '@op-engineering/op-sqlite':
-        optional: true
-      '@opentelemetry/api':
-        optional: true
-      '@planetscale/database':
-        optional: true
-      '@prisma/client':
-        optional: true
-      '@tidbcloud/serverless':
-        optional: true
-      '@types/better-sqlite3':
-        optional: true
-      '@types/pg':
-        optional: true
-      '@types/sql.js':
-        optional: true
-      '@upstash/redis':
-        optional: true
-      '@vercel/postgres':
-        optional: true
-      '@xata.io/client':
-        optional: true
-      better-sqlite3:
-        optional: true
-      bun-types:
-        optional: true
-      expo-sqlite:
-        optional: true
-      gel:
-        optional: true
-      knex:
-        optional: true
-      kysely:
-        optional: true
-      mysql2:
-        optional: true
-      pg:
-        optional: true
-      postgres:
-        optional: true
-      prisma:
-        optional: true
-      sql.js:
-        optional: true
-      sqlite3:
-        optional: true
-    dependencies:
-      '@libsql/client': 0.14.0
-      kysely: 0.28.17
-
-  /drizzle-orm@0.45.2(@libsql/client@0.14.0)(postgres@3.4.7):
-    resolution: {integrity: sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q==}
-    peerDependencies:
-      '@aws-sdk/client-rds-data': '>=3'
-      '@cloudflare/workers-types': '>=4'
-      '@electric-sql/pglite': '>=0.2.0'
-      '@libsql/client': '>=0.10.0'
-      '@libsql/client-wasm': '>=0.10.0'
-      '@neondatabase/serverless': '>=0.10.0'
-      '@op-engineering/op-sqlite': '>=2'
-      '@opentelemetry/api': ^1.4.1
-      '@planetscale/database': '>=1.13'
-      '@prisma/client': '*'
-      '@tidbcloud/serverless': '*'
-      '@types/better-sqlite3': '*'
-      '@types/pg': '*'
-      '@types/sql.js': '*'
-      '@upstash/redis': '>=1.34.7'
-      '@vercel/postgres': '>=0.8.0'
-      '@xata.io/client': '*'
-      better-sqlite3: '>=7'
-      bun-types: '*'
-      expo-sqlite: '>=14.0.0'
-      gel: '>=2'
-      knex: '*'
-      kysely: '*'
-      mysql2: '>=2'
-      pg: '>=8'
-      postgres: '>=3'
-      prisma: '*'
-      sql.js: '>=1'
-      sqlite3: '>=5'
-    peerDependenciesMeta:
-      '@aws-sdk/client-rds-data':
-        optional: true
-      '@cloudflare/workers-types':
-        optional: true
-      '@electric-sql/pglite':
-        optional: true
-      '@libsql/client':
-        optional: true
-      '@libsql/client-wasm':
-        optional: true
-      '@neondatabase/serverless':
-        optional: true
-      '@op-engineering/op-sqlite':
-        optional: true
-      '@opentelemetry/api':
-        optional: true
-      '@planetscale/database':
-        optional: true
-      '@prisma/client':
-        optional: true
-      '@tidbcloud/serverless':
-        optional: true
-      '@types/better-sqlite3':
-        optional: true
-      '@types/pg':
-        optional: true
-      '@types/sql.js':
-        optional: true
-      '@upstash/redis':
-        optional: true
-      '@vercel/postgres':
-        optional: true
-      '@xata.io/client':
-        optional: true
-      better-sqlite3:
-        optional: true
-      bun-types:
-        optional: true
-      expo-sqlite:
-        optional: true
-      gel:
-        optional: true
-      knex:
-        optional: true
-      kysely:
-        optional: true
-      mysql2:
-        optional: true
-      pg:
-        optional: true
-      postgres:
-        optional: true
-      prisma:
-        optional: true
-      sql.js:
-        optional: true
-      sqlite3:
-        optional: true
-    dependencies:
-      '@libsql/client': 0.14.0
-      postgres: 3.4.7
-    dev: false
-
-  /dts-resolver@3.0.0:
-    resolution: {integrity: sha512-1T1f+z+4tl9XD+m+0HBgWoL/nm0bOIffyWaUuUSBlFg/86IWvfx+wjNaO/ybU0AJzG9/Mi5hBUgGV6zCmWEN7Q==}
-    engines: {node: ^22.18.0 || >=24.0.0}
-    peerDependencies:
-      oxc-resolver: '>=11.0.0'
-    peerDependenciesMeta:
-      oxc-resolver:
-        optional: true
-    dev: true
-
   /electron-to-chromium@1.5.389:
     resolution: {integrity: sha512-cEto7aeOqBfU1D+c5py5pE+ooscKE75JifxLBdFUZsqAxRS6y7kebtxAZvICszSl05gPjYHDTjY+lXpyGvpJbg==}
+    dev: true
 
   /emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
     dev: true
 
-  /empathic@2.0.1:
-    resolution: {integrity: sha512-YGRs8knHhKHVShLkFET/rWAU8kmHbOV5LwN938RHI0pljAJ1Gf6SzXsSmRaEzcXTtOOmVqJ5+WtQPL5uigY50Q==}
-    engines: {node: '>=14'}
-    dev: true
-
   /es-errors@1.3.0:
     resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
     engines: {node: '>= 0.4'}
@@ -5440,78 +4071,6 @@ packages:
   /es-module-lexer@1.7.0:
     resolution: {integrity: sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==}
 
-  /esbuild-register@3.6.0(esbuild@0.25.12):
-    resolution: {integrity: sha512-H2/S7Pm8a9CL1uhp9OvjwrBh5Pvx0H8qVOxNu8Wed9Y7qv56MPtq+GGM8RJpq6glYJn9Wspr8uw7l55uyinNeg==}
-    peerDependencies:
-      esbuild: '>=0.12 <1'
-    dependencies:
-      debug: 4.4.3
-      esbuild: 0.25.12
-    transitivePeerDependencies:
-      - supports-color
-
-  /esbuild@0.18.20:
-    resolution: {integrity: sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA==}
-    engines: {node: '>=12'}
-    hasBin: true
-    requiresBuild: true
-    optionalDependencies:
-      '@esbuild/android-arm': 0.18.20
-      '@esbuild/android-arm64': 0.18.20
-      '@esbuild/android-x64': 0.18.20
-      '@esbuild/darwin-arm64': 0.18.20
-      '@esbuild/darwin-x64': 0.18.20
-      '@esbuild/freebsd-arm64': 0.18.20
-      '@esbuild/freebsd-x64': 0.18.20
-      '@esbuild/linux-arm': 0.18.20
-      '@esbuild/linux-arm64': 0.18.20
-      '@esbuild/linux-ia32': 0.18.20
-      '@esbuild/linux-loong64': 0.18.20
-      '@esbuild/linux-mips64el': 0.18.20
-      '@esbuild/linux-ppc64': 0.18.20
-      '@esbuild/linux-riscv64': 0.18.20
-      '@esbuild/linux-s390x': 0.18.20
-      '@esbuild/linux-x64': 0.18.20
-      '@esbuild/netbsd-x64': 0.18.20
-      '@esbuild/openbsd-x64': 0.18.20
-      '@esbuild/sunos-x64': 0.18.20
-      '@esbuild/win32-arm64': 0.18.20
-      '@esbuild/win32-ia32': 0.18.20
-      '@esbuild/win32-x64': 0.18.20
-
-  /esbuild@0.25.12:
-    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
-    engines: {node: '>=18'}
-    hasBin: true
-    requiresBuild: true
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.25.12
-      '@esbuild/android-arm': 0.25.12
-      '@esbuild/android-arm64': 0.25.12
-      '@esbuild/android-x64': 0.25.12
-      '@esbuild/darwin-arm64': 0.25.12
-      '@esbuild/darwin-x64': 0.25.12
-      '@esbuild/freebsd-arm64': 0.25.12
-      '@esbuild/freebsd-x64': 0.25.12
-      '@esbuild/linux-arm': 0.25.12
-      '@esbuild/linux-arm64': 0.25.12
-      '@esbuild/linux-ia32': 0.25.12
-      '@esbuild/linux-loong64': 0.25.12
-      '@esbuild/linux-mips64el': 0.25.12
-      '@esbuild/linux-ppc64': 0.25.12
-      '@esbuild/linux-riscv64': 0.25.12
-      '@esbuild/linux-s390x': 0.25.12
-      '@esbuild/linux-x64': 0.25.12
-      '@esbuild/netbsd-arm64': 0.25.12
-      '@esbuild/netbsd-x64': 0.25.12
-      '@esbuild/openbsd-arm64': 0.25.12
-      '@esbuild/openbsd-x64': 0.25.12
-      '@esbuild/openharmony-arm64': 0.25.12
-      '@esbuild/sunos-x64': 0.25.12
-      '@esbuild/win32-arm64': 0.25.12
-      '@esbuild/win32-ia32': 0.25.12
-      '@esbuild/win32-x64': 0.25.12
-
   /esbuild@0.27.7:
     resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==}
     engines: {node: '>=18'}
@@ -5582,6 +4141,7 @@ packages:
   /escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
+    dev: true
 
   /escape-string-regexp@1.0.5:
     resolution: {integrity: sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==}
@@ -5729,10 +4289,6 @@ packages:
     resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
     engines: {node: '>=12.0.0'}
 
-  /exsolve@1.1.0:
-    resolution: {integrity: sha512-D+42+T12DdIlJM3uepa55qGiL3sYdLBOxIl2ifQCzCHz4c7eiolaHsi3BIqEr7JxBzxv2pYZQX9kw16ziMcEmw==}
-    dev: true
-
   /external-editor@3.1.0:
     resolution: {integrity: sha512-hMQ4CX1p1izmuLYyZqLMO/qGNw10wSv9QDCPfzXfyFrOaCSSoRfqE1Kf1s5an66J5JZC62NewG+mK49jOCtQew==}
     engines: {node: '>=4'}
@@ -5789,13 +4345,6 @@ packages:
     dependencies:
       picomatch: 4.0.5
 
-  /fetch-blob@3.2.0:
-    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
-    engines: {node: ^12.20 || >= 14.13}
-    dependencies:
-      node-domexception: 1.0.0
-      web-streams-polyfill: 3.3.3
-
   /figures@3.2.0:
     resolution: {integrity: sha512-yaduQFRKLXYOGgEn6AZau90j3ggSOyiqXU0F9JZfeXYhNa+Jk4X+s45A2zg5jns87GAFa34BBm2kXw4XpNcbdg==}
     engines: {node: '>=8'}
@@ -5843,13 +4392,7 @@ packages:
 
   /flatted@3.4.2:
     resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
-    dev: true
-
-  /formdata-polyfill@4.0.10:
-    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
-    engines: {node: '>=12.20.0'}
-    dependencies:
-      fetch-blob: 3.2.0
+    dev: true
 
   /fraction.js@4.3.7:
     resolution: {integrity: sha512-ZsDfxO51wGAXREY55a7la9LScWpwv9RxIrYABrlvOFBlH/ShPnrtsXeuUIfXKKOVicNxQ+o8JTbJvjS4M89yew==}
@@ -5879,9 +4422,11 @@ packages:
     resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
     dev: true
 
-  /gensync@1.0.0-beta.2:
-    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
-    engines: {node: '>=6.9.0'}
+  /generate-function@2.3.1:
+    resolution: {integrity: sha512-eeB5GfMNeevm/GRYq20ShmsaGcmI81kIX2K9XQx5miC8KdHaC6Jm0qQ8ZNeGOi7wYB8OsdxKs+Y2oVuTFuVwKQ==}
+    dependencies:
+      is-property: 1.0.2
+    dev: false
 
   /get-nonce@1.0.1:
     resolution: {integrity: sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==}
@@ -5893,18 +4438,6 @@ packages:
     engines: {node: '>=10'}
     dev: true
 
-  /get-tsconfig@4.14.0:
-    resolution: {integrity: sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA==}
-    dependencies:
-      resolve-pkg-maps: 1.0.0
-
-  /get-tsconfig@5.0.0-beta.5:
-    resolution: {integrity: sha512-/6gFNr0N04nob252sTQxyFLi3eKFRqIg1I87YcqAMT1i6SQrSF6KujUEQrtrjMV0H/eejTCltLdDSTEMzHbnsQ==}
-    engines: {node: '>=20.20.0'}
-    dependencies:
-      resolve-pkg-maps: 1.0.0
-    dev: true
-
   /get-uri@6.0.5:
     resolution: {integrity: sha512-b1O07XYq8eRuVzBNgJLstU6FYc1tS6wnMtF1I1D9lE8LxZSOGZ7LhxN54yPP6mGw5f2CkXY2BQUL9Fx41qvcIg==}
     engines: {node: '>= 14'}
@@ -5916,11 +4449,6 @@ packages:
       - supports-color
     dev: true
 
-  /giget@3.3.0:
-    resolution: {integrity: sha512-gzi2D96p+AMfDcmJHGDj3KJ9NRiwvlFAU5yfa3ROwWZmFUjX4P43x3BcyRaOMMLto1vUo7C+86+MFhYTl6Ryiw==}
-    hasBin: true
-    dev: true
-
   /glob-parent@5.1.2:
     resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
     engines: {node: '>= 6'}
@@ -6014,10 +4542,6 @@ packages:
       upper-case: 1.1.3
     dev: true
 
-  /hookable@6.1.1:
-    resolution: {integrity: sha512-U9LYDy1CwhMCnprUfeAZWZGByVbhd54hwepegYTK7Pi5NvqEj63ifz5z+xukznehT7i6NIZRu89Ay1AZmRsLEQ==}
-    dev: true
-
   /http-proxy-agent@7.0.2:
     resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
     engines: {node: '>= 14'}
@@ -6055,7 +4579,6 @@ packages:
     engines: {node: '>=0.10.0'}
     dependencies:
       safer-buffer: 2.1.2
-    dev: true
 
   /ieee754@1.2.1:
     resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
@@ -6074,11 +4597,6 @@ packages:
       resolve-from: 4.0.0
     dev: true
 
-  /import-without-cache@0.4.0:
-    resolution: {integrity: sha512-NkJQA7oZ4YHQhd2+H3BoRFKF3d/XNsiKpHZCQEMH9pDX27hQQLsTyOocyRgaIVtf8gHX3Nt3LPkR4e5EdtPAGQ==}
-    engines: {node: ^22.18.0 || >=24.0.0}
-    dev: true
-
   /imurmurhash@0.1.4:
     resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
     engines: {node: '>=0.8.19'}
@@ -6166,12 +4684,6 @@ packages:
       hasown: 2.0.4
     dev: true
 
-  /is-docker@3.0.0:
-    resolution: {integrity: sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-    hasBin: true
-    dev: true
-
   /is-extglob@2.1.1:
     resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
     engines: {node: '>=0.10.0'}
@@ -6189,14 +4701,6 @@ packages:
       is-extglob: 2.1.1
     dev: true
 
-  /is-inside-container@1.0.0:
-    resolution: {integrity: sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==}
-    engines: {node: '>=14.16'}
-    hasBin: true
-    dependencies:
-      is-docker: 3.0.0
-    dev: true
-
   /is-interactive@1.0.0:
     resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
     engines: {node: '>=8'}
@@ -6223,6 +4727,10 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
+  /is-property@1.0.2:
+    resolution: {integrity: sha512-Ks/IoX00TtClbGQr4TWXemAnktAQvYB7HzcCxDGqEZU6oCmb2INHuOoKxbtR+HFkmYWBKv/dOZtGRiAjDhj92g==}
+    dev: false
+
   /is-stream@2.0.1:
     resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
     engines: {node: '>=8'}
@@ -6239,13 +4747,6 @@ packages:
       upper-case: 1.1.3
     dev: true
 
-  /is-wsl@3.1.1:
-    resolution: {integrity: sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==}
-    engines: {node: '>=16'}
-    dependencies:
-      is-inside-container: 1.0.0
-    dev: true
-
   /isbinaryfile@4.0.10:
     resolution: {integrity: sha512-iHrqe5shvBUcFbmZq9zOQHBoeOhZJu6RQGrDpBgenUm/Am+F3JM2MgQj+rK3Z601fzrL5gLZWtAPH2OBaSVcyw==}
     engines: {node: '>= 8.0.0'}
@@ -6267,19 +4768,17 @@ packages:
   /jiti@2.7.0:
     resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
     hasBin: true
-    dev: true
+    dev: false
 
   /jose@6.2.3:
     resolution: {integrity: sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==}
+    dev: false
 
   /joycon@3.1.1:
     resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
     engines: {node: '>=10'}
     dev: true
 
-  /js-base64@3.8.1:
-    resolution: {integrity: sha512-5xVjhUZlHHeuO2W7w2rDFj/Kl1xLX+HjZxdOQwCsUOifl6UaoH1o1wsbsTMz+r0aeC7gCijvru02j6TfKZWzKg==}
-
   /js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -6293,11 +4792,6 @@ packages:
       argparse: 2.0.1
     dev: true
 
-  /jsesc@3.1.0:
-    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
-    engines: {node: '>=6'}
-    hasBin: true
-
   /json-buffer@3.0.1:
     resolution: {integrity: sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==}
     dev: true
@@ -6310,11 +4804,6 @@ packages:
     resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
     dev: true
 
-  /json5@2.2.3:
-    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
-    engines: {node: '>=6'}
-    hasBin: true
-
   /jsonfile@6.2.1:
     resolution: {integrity: sha512-zwOTdL3rFQ/lRdBnntKVOX6k5cKJwEc1HdilT71BWEu7J41gXIB2MRp+vxduPSwZJPWBxEzv4yH1wYLJGUHX4Q==}
     dependencies:
@@ -6329,14 +4818,9 @@ packages:
       json-buffer: 3.0.1
     dev: true
 
-  /kleur@3.0.3:
-    resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
-    engines: {node: '>=6'}
-    dev: true
-
-  /kysely@0.28.17:
-    resolution: {integrity: sha512-nbD8lB9EB3wNdMhOCdx5Li8DxnLbvKByylRLcJ1h+4SkrowVeECAyZlyiKMThF7xFdRz0jSQ2MoJr+wXux2y0Q==}
-    engines: {node: '>=20.0.0'}
+  /kysely@0.29.6:
+    resolution: {integrity: sha512-hHaB8C/rfzDDtr/t8YZwxAuPJTT0zHyaPoVzcXwDYhYNAgH/4sIfVhi/XLLIY+bL/FqaIJnjATDbi8ObSELmxg==}
+    engines: {node: '>=22.0.0'}
 
   /levn@0.4.1:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
@@ -6346,21 +4830,24 @@ packages:
       type-check: 0.4.0
     dev: true
 
-  /libsql@0.4.7:
-    resolution: {integrity: sha512-T9eIRCs6b0J1SHKYIvD8+KCJMcWZ900iZyxdnSCdqxN12Z1ijzT+jY5nrk72Jw4B0HGzms2NgpryArlJqvc3Lw==}
-    cpu: [x64, arm64, wasm32]
+  /libsql@0.5.29:
+    resolution: {integrity: sha512-8lMP8iMgiBzzoNbAPQ59qdVcj6UaE/Vnm+fiwX4doX4Narook0a4GPKWBEv+CR8a1OwbfkgL18uBfBjWdF0Fzg==}
+    cpu: [x64, arm64, wasm32, arm]
     os: [darwin, linux, win32]
     dependencies:
       '@neon-rs/load': 0.0.4
       detect-libc: 2.0.2
     optionalDependencies:
-      '@libsql/darwin-arm64': 0.4.7
-      '@libsql/darwin-x64': 0.4.7
-      '@libsql/linux-arm64-gnu': 0.4.7
-      '@libsql/linux-arm64-musl': 0.4.7
-      '@libsql/linux-x64-gnu': 0.4.7
-      '@libsql/linux-x64-musl': 0.4.7
-      '@libsql/win32-x64-msvc': 0.4.7
+      '@libsql/darwin-arm64': 0.5.29
+      '@libsql/darwin-x64': 0.5.29
+      '@libsql/linux-arm-gnueabihf': 0.5.29
+      '@libsql/linux-arm-musleabihf': 0.5.29
+      '@libsql/linux-arm64-gnu': 0.5.29
+      '@libsql/linux-arm64-musl': 0.5.29
+      '@libsql/linux-x64-gnu': 0.5.29
+      '@libsql/linux-x64-musl': 0.5.29
+      '@libsql/win32-x64-msvc': 0.5.29
+    dev: false
 
   /lilconfig@2.1.0:
     resolution: {integrity: sha512-utWOt/GHzuUxnLKxB6dk81RoOeoNeHgbrXiuGk4yyF5qlRz+iIVWu56E2fqGHFrXz0QNUhLB/8nKqvRH66JKGQ==}
@@ -6397,10 +4884,6 @@ packages:
     resolution: {integrity: sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==}
     dev: true
 
-  /lodash@4.17.21:
-    resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
-    dev: true
-
   /lodash@4.18.1:
     resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
     dev: true
@@ -6420,6 +4903,10 @@ packages:
       is-unicode-supported: 0.1.0
     dev: true
 
+  /long@5.3.2:
+    resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
+    dev: false
+
   /loose-envify@1.4.0:
     resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
     hasBin: true
@@ -6439,16 +4926,16 @@ packages:
     resolution: {integrity: sha512-2Fgx1Ycm599x+WGpIYwJOvsjmXFzTSc34IwDWALRA/8AopUKAVPwfJ+h5+f85BCp0PWmmJcWzEpxOpoXycMpdA==}
     dev: true
 
-  /lru-cache@5.1.1:
-    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
-    dependencies:
-      yallist: 3.1.1
-
   /lru-cache@7.18.3:
     resolution: {integrity: sha512-jumlc0BIUrS3qJGgIkWZsyfAM7NCWiBcCDhnd+3NNM5KbBmLTgHVfWBcg6W+rLUsIpzpERPsvwUP7CckAQSOoA==}
     engines: {node: '>=12'}
     dev: true
 
+  /lru.min@1.1.5:
+    resolution: {integrity: sha512-5J9ysMYUpYIg9RF2vJpy9SinEmSviFSe0GyPpCQ4L5QSkLAgeLXlTAOu2ZwWUU5m+0SBl6gUU1R1ZQB3aKypfA==}
+    engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
+    dev: false
+
   /magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
     dependencies:
@@ -6520,6 +5007,22 @@ packages:
     resolution: {integrity: sha512-nnbWWOkoWyUsTjKrhgD0dcz22mdkSnpYqbEjIm2nhwhuxlSkpywJmBo8h0ZqJdkp73mb90SssHkN4rsRaBAfAA==}
     dev: true
 
+  /mysql2@3.24.4(@types/node@22.18.6):
+    resolution: {integrity: sha512-A2olluVlj0mvgyIRRISMEzXc51m+21mRtcMVjJyIpt2GG98+XrC9m9HzsqcMsX2LcnfccJvY5NB22g8fENBnOA==}
+    engines: {node: '>= 8.0'}
+    peerDependencies:
+      '@types/node': '>= 8'
+    dependencies:
+      '@types/node': 22.18.6
+      aws-ssl-profiles: 1.1.2
+      generate-function: 2.3.1
+      iconv-lite: 0.7.3
+      long: 5.3.2
+      lru.min: 1.1.5
+      named-placeholders: 1.1.6
+      sql-escaper: 1.5.2
+    dev: false
+
   /mz@2.7.0:
     resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
     dependencies:
@@ -6528,6 +5031,13 @@ packages:
       thenify-all: 1.6.0
     dev: true
 
+  /named-placeholders@1.1.6:
+    resolution: {integrity: sha512-Tz09sEL2EEuv5fFowm419c1+a/jSMiBjI9gHxVLrVdbUkkNUUfjsVYs9pVZu5oCon/kmRh9TfLEObFtkVxmY0w==}
+    engines: {node: '>=8.0.0'}
+    dependencies:
+      lru.min: 1.1.5
+    dev: false
+
   /nanoid@3.3.15:
     resolution: {integrity: sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
@@ -6536,6 +5046,7 @@ packages:
   /nanostores@1.4.0:
     resolution: {integrity: sha512-i0tloweeudshAEuddpDxcg9Ik6pkPfVsHIgKyf143JrgG7/MOh0+q7BypdLXZPoOP7fOYt1eTcwGkyiVmhJFkA==}
     engines: {node: ^20.0.0 || >=22.0.0}
+    dev: false
 
   /natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
@@ -6550,7 +5061,7 @@ packages:
     engines: {node: '>= 0.4.0'}
     dev: true
 
-  /next@14.2.35(@babel/core@7.29.7)(react-dom@18.3.1)(react@18.3.1):
+  /next@14.2.35(react-dom@18.3.1)(react@18.3.1):
     resolution: {integrity: sha512-KhYd2Hjt/O1/1aZVX3dCwGXM1QmOV4eNM2UTacK5gipDdPN/oHHK/4oVGy7X8GMfPMsUTUEmGlsy0EY1YGAkig==}
     engines: {node: '>=18.17.0'}
     hasBin: true
@@ -6576,7 +5087,7 @@ packages:
       postcss: 8.4.31
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
-      styled-jsx: 5.1.1(@babel/core@7.29.7)(react@18.3.1)
+      styled-jsx: 5.1.1(react@18.3.1)
     optionalDependencies:
       '@next/swc-darwin-arm64': 14.2.33
       '@next/swc-darwin-x64': 14.2.33
@@ -6597,18 +5108,9 @@ packages:
       lower-case: 1.1.4
     dev: true
 
-  /node-domexception@1.0.0:
-    resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==}
-    engines: {node: '>=10.5.0'}
-    deprecated: Use your platform's native DOMException instead
-
-  /node-fetch@3.3.2:
-    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-    dependencies:
-      data-uri-to-buffer: 4.0.1
-      fetch-blob: 3.2.0
-      formdata-polyfill: 4.0.10
+  /node-addon-api@8.9.2:
+    resolution: {integrity: sha512-VijLXbi3UACN69I0JVXJsX4tjACjNoQDgv2gTF6sx2wWEi8tkSg2eX8p5gSIFi8z2+DL3oHmY6OyKce38SDolg==}
+    engines: {node: ^18 || ^20 || >= 21}
 
   /node-plop@0.26.3:
     resolution: {integrity: sha512-Cov028YhBZ5aB7MdMWJEmwyBig43aGL5WT4vdoB28Oitau1zZAcHUn8Sgfk9HM33TqhtLJ9PlM/O0Mv+QpV/4Q==}
@@ -6630,6 +5132,7 @@ packages:
   /node-releases@2.0.51:
     resolution: {integrity: sha512-wRNIrw4DmVLKQlbgOMdkMx27Wrpzes2hh5Jtbi2bjPd+4wJstWIqP5A+lscnqbm0xxmT5Bpg8Lec5ItEBwx6BQ==}
     engines: {node: '>=18'}
+    dev: true
 
   /normalize-path@3.0.0:
     resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
@@ -6658,15 +5161,6 @@ packages:
     engines: {node: '>= 6'}
     dev: true
 
-  /obug@2.1.4:
-    resolution: {integrity: sha512-4a+OsYv9UktOJKE+l1A4OufDgdRF9PifWj+tJnHURo/P+WOxpG4GzUFL9qCalmWauao6ogiG+QvnCovwPoyAWA==}
-    engines: {node: '>=12.20.0'}
-    dev: true
-
-  /ohash@2.0.11:
-    resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
-    dev: true
-
   /once@1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
     dependencies:
@@ -6680,16 +5174,6 @@ packages:
       mimic-fn: 2.1.0
     dev: true
 
-  /open@10.2.0:
-    resolution: {integrity: sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA==}
-    engines: {node: '>=18'}
-    dependencies:
-      default-browser: 5.5.0
-      define-lazy-prop: 3.0.0
-      is-inside-container: 1.0.0
-      wsl-utils: 0.1.0
-    dev: true
-
   /optionator@0.9.4:
     resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
     engines: {node: '>= 0.8.0'}
@@ -6838,9 +5322,75 @@ packages:
     resolution: {integrity: sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==}
     engines: {node: '>= 14.16'}
 
-  /perfect-debounce@2.1.0:
-    resolution: {integrity: sha512-LjgdTytVFXeUgtHZr9WYViYSM/g8MkcTPYDlPa3cDqMirHjKiSZPYd6DoL7pK8AJQr+uWkQvCjHNdiMqsrJs+g==}
-    dev: true
+  /pg-cloudflare@1.4.0:
+    resolution: {integrity: sha512-Vo7z/6rrQYxpNRylp4Tlob2elzbh+N/MOQbxFVWCxS7oEx6jF53GTJFxK2WWpKuBRkmiin4Mt+xofFDjx09R0A==}
+    requiresBuild: true
+    dev: false
+    optional: true
+
+  /pg-connection-string@2.14.0:
+    resolution: {integrity: sha512-XwWDGcLRGCXAR8F/AM5bG7Q+A3Wm2s6QeEjlOKZLlH3UYcguiqCWKyWXVag5TLTIjR7oOJUY8kcADaZgWPyLeg==}
+    dev: false
+
+  /pg-cursor@2.22.0(pg@8.23.0):
+    resolution: {integrity: sha512-knzXLKqarTjOvb3qDSW0JiGsazmxwEKXrqHfWRte7XUsOYccQRafn3BLnQobWwInkzFJSyOej8y8cQRh2z3kGw==}
+    peerDependencies:
+      pg: ^8
+    dependencies:
+      pg: 8.23.0
+    dev: false
+
+  /pg-int8@1.0.1:
+    resolution: {integrity: sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==}
+    engines: {node: '>=4.0.0'}
+    dev: false
+
+  /pg-pool@3.14.0(pg@8.23.0):
+    resolution: {integrity: sha512-gKtPkFdQPU3DksooVLi9LsjZxrsBUZIpa+7aVx+LV5pNh0KzP4Zleud2po+ConrxbuXGBJ6Hfer6hdgpIBpBaw==}
+    peerDependencies:
+      pg: '>=8.0'
+    dependencies:
+      pg: 8.23.0
+    dev: false
+
+  /pg-protocol@1.16.0:
+    resolution: {integrity: sha512-sILXutLVjCLjcDuOmvhX5e2Z4cS5qG/6Bu3VkpFwdf/633ElGLpEh9bgmuI5I4sqKqkifQiGyiCcx1HdtrK7tg==}
+    dev: false
+
+  /pg-types@2.2.0:
+    resolution: {integrity: sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==}
+    engines: {node: '>=4'}
+    dependencies:
+      pg-int8: 1.0.1
+      postgres-array: 2.0.0
+      postgres-bytea: 1.0.1
+      postgres-date: 1.0.7
+      postgres-interval: 1.2.0
+    dev: false
+
+  /pg@8.23.0:
+    resolution: {integrity: sha512-Ip2EQCngowJLGOfCwkFhPXU7/ljlhn6Rxlmy4XYfL2Y+vyRM59+8uR2xqRWKdYmbXmxCFOAmKxBuSUCdF34qLg==}
+    engines: {node: '>= 16.0.0'}
+    peerDependencies:
+      pg-native: '>=3.0.1'
+    peerDependenciesMeta:
+      pg-native:
+        optional: true
+    dependencies:
+      pg-connection-string: 2.14.0
+      pg-pool: 3.14.0(pg@8.23.0)
+      pg-protocol: 1.16.0
+      pg-types: 2.2.0
+      pgpass: 1.0.5
+    optionalDependencies:
+      pg-cloudflare: 1.4.0
+    dev: false
+
+  /pgpass@1.0.5:
+    resolution: {integrity: sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug==}
+    dependencies:
+      split2: 4.2.0
+    dev: false
 
   /picocolors@1.0.1:
     resolution: {integrity: sha512-anP1Z8qwhkbmu7MFP5iTt+wQKXgwzf7zTyGlcdzabySa9vd0Xt392U0rVmz9poOaBj0uHJKyyo9/upk0HrEQew==}
@@ -6876,14 +5426,6 @@ packages:
       pathe: 2.0.3
     dev: true
 
-  /pkg-types@2.3.1:
-    resolution: {integrity: sha512-y+ichcgc2LrADuhLNAx8DFjVfgz91pRxfZdI3UDhxHvcVEZsenLO+7XaU5vOp0u/7V/wZ+plyuQxtrDlZJ+yeg==}
-    dependencies:
-      confbox: 0.2.4
-      exsolve: 1.1.0
-      pathe: 2.0.3
-    dev: true
-
   /postcss-import@15.1.0(postcss@8.4.39):
     resolution: {integrity: sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==}
     engines: {node: '>=14.0.0'}
@@ -6992,9 +5534,42 @@ packages:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
-  /postgres@3.4.7:
-    resolution: {integrity: sha512-Jtc2612XINuBjIl/QTWsV5UvE8UHuNblcO3vVADSrKsrc6RqGX6lOW1cEo3CM2v0XG4Nat8nI+YM7/f26VxXLw==}
+  /postgres-array@2.0.0:
+    resolution: {integrity: sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==}
+    engines: {node: '>=4'}
+    dev: false
+
+  /postgres-array@3.0.4:
+    resolution: {integrity: sha512-nAUSGfSDGOaOAEGwqsRY27GPOea7CNipJPOA7lPbdEpx5Kg3qzdP0AaWC5MlhTWV9s4hFX39nomVZ+C4tnGOJQ==}
+    engines: {node: '>=12'}
+    dev: false
+
+  /postgres-bytea@1.0.1:
+    resolution: {integrity: sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ==}
+    engines: {node: '>=0.10.0'}
+    dev: false
+
+  /postgres-date@1.0.7:
+    resolution: {integrity: sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q==}
+    engines: {node: '>=0.10.0'}
+    dev: false
+
+  /postgres-date@2.1.0:
+    resolution: {integrity: sha512-K7Juri8gtgXVcDfZttFKVmhglp7epKb1K4pgrkLxehjqkrgPhfG6OO8LHLkfaqkbpjNRnra018XwAr1yQFWGcA==}
+    engines: {node: '>=12'}
+    dev: false
+
+  /postgres-interval@1.2.0:
+    resolution: {integrity: sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==}
+    engines: {node: '>=0.10.0'}
+    dependencies:
+      xtend: 4.0.2
+    dev: false
+
+  /postgres-interval@4.1.0:
+    resolution: {integrity: sha512-nJLACcOHi2iyRuMJeW6CuIA0Dc0i1YEpRr26XDyHAfxPjYUJOFxwZjmOc5oFFctTTh/OlRAMlnlXEJvr170fJg==}
     engines: {node: '>=12'}
+    dev: false
 
   /prelude-ls@1.2.1:
     resolution: {integrity: sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g==}
@@ -7061,23 +5636,6 @@ packages:
     engines: {node: '>=14'}
     hasBin: true
 
-  /prettier@3.9.5:
-    resolution: {integrity: sha512-/FVl766LpUfB5vXgCYOYa0MeV/441Ia99AeICQIQFTY/Nw0roZwULcXpku5i1/m5kt/baz+s4Zogspd839HSMg==}
-    engines: {node: '>=14'}
-    hasBin: true
-    dev: true
-
-  /promise-limit@2.7.0:
-    resolution: {integrity: sha512-7nJ6v5lnJsXwGprnGXga4wx6d1POjvi5Qmf1ivTRxTjH4Z/9Czja/UCMLVmB9N93GeWOU93XaFaEt6jbuoagNw==}
-
-  /prompts@2.4.2:
-    resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
-    engines: {node: '>= 6'}
-    dependencies:
-      kleur: 3.0.3
-      sisteransi: 1.0.5
-    dev: true
-
   /proxy-agent@6.5.0:
     resolution: {integrity: sha512-TmatMXdr2KlRiA2CyDu8GqR8EjahTG3aY3nXjdzFyoZbmB8hrBsTyMezhULIXKnC0jpfjlmiZ3+EaCzoInSu/A==}
     engines: {node: '>= 14'}
@@ -7111,21 +5669,10 @@ packages:
       react: 18.3.1
     dev: false
 
-  /quansync@1.0.0:
-    resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
-    dev: true
-
   /queue-microtask@1.2.3:
     resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}
     dev: true
 
-  /rc9@3.0.1:
-    resolution: {integrity: sha512-gMDyleLWVE+i6Sgtc0QbbY6pEKqYs97NGi6isHQPqYlLemPoO8dxQ3uGi0f4NiP98c+jMW6cG1Kx9dDwfvqARQ==}
-    dependencies:
-      defu: 6.1.7
-      destr: 2.0.5
-    dev: true
-
   /rc@1.2.8:
     resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
     hasBin: true
@@ -7238,15 +5785,6 @@ packages:
     engines: {node: '>= 14.18.0'}
     dev: true
 
-  /readdirp@5.0.0:
-    resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
-    engines: {node: '>= 20.19.0'}
-    dev: true
-
-  /regexp-to-ast@0.5.0:
-    resolution: {integrity: sha512-tlbJqcMHnPKI9zSrystikWKwHkBqu2a/Sgw01h3zFjvYrMxEDYHzzoMZnUrbIfpTFEsoRnnviOXNCzFiSc54Qw==}
-    dev: true
-
   /registry-auth-token@3.3.2:
     resolution: {integrity: sha512-JL39c60XlzCVgNrO+qq68FoNb56w/m7JYvGR2jT5iR1xBrUA3Mfx5Twk5rqTThPmQKMWydGmq8oFtDlxfrmxnQ==}
     dependencies:
@@ -7271,9 +5809,6 @@ packages:
     engines: {node: '>=8'}
     dev: true
 
-  /resolve-pkg-maps@1.0.0:
-    resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==}
-
   /resolve@1.22.12:
     resolution: {integrity: sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==}
     engines: {node: '>= 0.4'}
@@ -7306,61 +5841,6 @@ packages:
       glob: 7.2.3
     dev: true
 
-  /rolldown-plugin-dts@0.27.14(rolldown@1.2.3)(typescript@5.5.3):
-    resolution: {integrity: sha512-ZvuDDwoIpRK9RPxDXratCpklFO9QZZWndf/sd0VBFb4LEj0jj07UcHK9OCh7V4XiFz2Z89ziyBC2K6tJiDjrbw==}
-    engines: {node: ^22.18.0 || >=24.11.0}
-    peerDependencies:
-      '@typescript/native-preview': '*'
-      '@volar/typescript': ~2.4.0
-      rolldown: ^1.0.0
-      typescript: ^5.0.0 || ^6.0.0 || ~7.0.0
-      vue-tsc: ~3.2.0 || ~3.3.0
-    peerDependenciesMeta:
-      '@typescript/native-preview':
-        optional: true
-      '@volar/typescript':
-        optional: true
-      typescript:
-        optional: true
-      vue-tsc:
-        optional: true
-    dependencies:
-      dts-resolver: 3.0.0
-      get-tsconfig: 5.0.0-beta.5
-      obug: 2.1.4
-      rolldown: 1.2.3
-      typescript: 5.5.3
-      yuku-ast: 0.8.3
-      yuku-codegen: 0.8.3
-      yuku-parser: 0.8.3
-    transitivePeerDependencies:
-      - oxc-resolver
-    dev: true
-
-  /rolldown@1.2.3:
-    resolution: {integrity: sha512-rn9wpmxplLf7NLNyCk9FyWh3FM43DbY8jOzCdEPzH7uflhTftRbCEpqi6Ly2osgoU8OwObtmavMbWLaWy4LX7A==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    hasBin: true
-    dependencies:
-      '@oxc-project/types': 0.143.0
-      '@rolldown/pluginutils': 1.0.1
-    optionalDependencies:
-      '@rolldown/binding-android-arm64': 1.2.3
-      '@rolldown/binding-darwin-arm64': 1.2.3
-      '@rolldown/binding-darwin-x64': 1.2.3
-      '@rolldown/binding-freebsd-x64': 1.2.3
-      '@rolldown/binding-linux-arm-gnueabihf': 1.2.3
-      '@rolldown/binding-linux-arm64-gnu': 1.2.3
-      '@rolldown/binding-linux-arm64-musl': 1.2.3
-      '@rolldown/binding-linux-ppc64-gnu': 1.2.3
-      '@rolldown/binding-linux-s390x-gnu': 1.2.3
-      '@rolldown/binding-linux-x64-gnu': 1.2.3
-      '@rolldown/binding-linux-x64-musl': 1.2.3
-      '@rolldown/binding-openharmony-arm64': 1.2.3
-      '@rolldown/binding-win32-arm64-msvc': 1.2.3
-      '@rolldown/binding-win32-x64-msvc': 1.2.3
-    dev: true
-
   /rollup@4.62.2:
     resolution: {integrity: sha512-RFnrW4lhXA3s3eqHDZvN654g8OTjzRfqpIRJYczCGB6HzphckVAi/Qh4tbPUbRuDi7s1Llv8g/NspLkttY3gTA==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
@@ -7395,13 +5875,9 @@ packages:
       '@rollup/rollup-win32-x64-msvc': 4.62.2
       fsevents: 2.3.3
 
-  /rou3@0.7.12:
-    resolution: {integrity: sha512-iFE4hLDuloSWcD7mjdCDhx2bKcIsYbtOTpfH5MHHLSKMOUyjqQXTeZVa289uuwEGEKFoE/BAPbhaU4B774nceg==}
-
-  /run-applescript@7.1.0:
-    resolution: {integrity: sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q==}
-    engines: {node: '>=18'}
-    dev: true
+  /rou3@0.9.2:
+    resolution: {integrity: sha512-3SOzvaAg8rkHrXtRjpCvCvbyO5to9oOO27Z/XqHEYXfMRVSw/qMIVdmaOk9W2lcRLtR6dlqTjo9hDeJk70QBYQ==}
+    dev: false
 
   /run-async@2.4.1:
     resolution: {integrity: sha512-tvVnVv01b8c1RrA6Ep7JkStj85Guv/YrMcwqYQnwjsAS2cTmmPGBBjAjpCW7RrSodNSoE2/qg9O4bceNvUuDgQ==}
@@ -7433,7 +5909,6 @@ packages:
 
   /safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
-    dev: true
 
   /scheduler@0.23.2:
     resolution: {integrity: sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==}
@@ -7444,10 +5919,6 @@ packages:
     resolution: {integrity: sha512-xZocWwfyp4hkbN4hLWxMjmv2Q8aNa9MhmOZ7L9aCZPT+dZsgRr6wZRrSYE3HTdyk/2pZKPSgqI7ns7Een1xMSA==}
     dev: false
 
-  /semver@6.3.1:
-    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
-    hasBin: true
-
   /semver@7.8.5:
     resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
     engines: {node: '>=10'}
@@ -7461,12 +5932,9 @@ packages:
       upper-case-first: 1.1.2
     dev: true
 
-  /server-only@0.0.1:
-    resolution: {integrity: sha512-qepMx2JxAa5jjfzxG79yPPq+8BuFToHd1hm7kI+Z4zAq1ftQiP7HcxMhDDItrbtwVeLg/cY2JnKnrcFkmiswNA==}
-    dev: false
-
   /set-cookie-parser@3.1.2:
     resolution: {integrity: sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==}
+    dev: false
 
   /shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
@@ -7487,10 +5955,6 @@ packages:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
     dev: true
 
-  /sisteransi@1.0.5:
-    resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
-    dev: true
-
   /slash@3.0.0:
     resolution: {integrity: sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==}
     engines: {node: '>=8'}
@@ -7540,21 +6004,31 @@ packages:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
 
-  /source-map-support@0.5.21:
-    resolution: {integrity: sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==}
-    dependencies:
-      buffer-from: 1.1.2
-      source-map: 0.6.1
-
   /source-map@0.6.1:
     resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
     engines: {node: '>=0.10.0'}
+    dev: true
 
   /source-map@0.7.6:
     resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
     engines: {node: '>= 12'}
     dev: true
 
+  /split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+    dev: false
+
+  /sql-escaper@1.5.2:
+    resolution: {integrity: sha512-6CKD38c31SENivxOADeMNLdukOnUxUcflKtzVWzace7Riv1v7cAEym5Cx9Q7gYZ3ezIJI7ZpqecQq8cqNeSSFg==}
+    engines: {bun: '>=1.0.0', deno: '>=2.0.0', node: '>=12.0.0'}
+    dev: false
+
+  /sqlstring@2.3.3:
+    resolution: {integrity: sha512-qC9iz2FlN7DQl3+wjwn3802RTyjCx7sDvfQEXchwa6CWOx07/WVfh91gBmQ9fahw8snwGEWU3xGzOt4tFyHLxg==}
+    engines: {node: '>= 0.6'}
+    dev: false
+
   /stackback@0.0.2:
     resolution: {integrity: sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==}
 
@@ -7611,7 +6085,7 @@ packages:
     resolution: {integrity: sha512-vrN+B7DBIoTTZjnPNewwhx6cBA/H+IS7rfW68n7XxC1y7uoiGQBxaKzqucGUgavX15dJgiGztLJ8vxuEzwqBdA==}
     dev: false
 
-  /styled-jsx@5.1.1(@babel/core@7.29.7)(react@18.3.1):
+  /styled-jsx@5.1.1(react@18.3.1):
     resolution: {integrity: sha512-pW7uC1l4mBZ8ugbiZrcIsiIvVx1UmTfw7UkC3Um2tmfUq9Bhk8IiyEIPl6F8agHgjzku6j0xQEZbfA5uSgSaCw==}
     engines: {node: '>= 12.0.0'}
     peerDependencies:
@@ -7624,7 +6098,6 @@ packages:
       babel-plugin-macros:
         optional: true
     dependencies:
-      '@babel/core': 7.29.7
       client-only: 0.0.1
       react: 18.3.1
 
@@ -7742,11 +6215,6 @@ packages:
   /tinyexec@0.3.2:
     resolution: {integrity: sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==}
 
-  /tinyexec@1.3.0:
-    resolution: {integrity: sha512-QKAl9m8gWWGHV8jZcPeym6j+XULi6tOf1mT83WYJ4Lk2ytW/uwAWkrP0uFsdoYMdueVJ0qs26wZ+23xeB4ibNQ==}
-    engines: {node: '>=18'}
-    dev: true
-
   /tinyglobby@0.2.17:
     resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
     engines: {node: '>=12.0.0'}
@@ -7803,7 +6271,7 @@ packages:
     resolution: {integrity: sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==}
     dev: true
 
-  /ts-node@10.9.2(@types/node@20.14.11)(typescript@5.5.3):
+  /ts-node@10.9.2(@types/node@20.14.11)(typescript@5.9.3):
     resolution: {integrity: sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==}
     hasBin: true
     peerDependencies:
@@ -7829,68 +6297,11 @@ packages:
       create-require: 1.1.1
       diff: 4.0.4
       make-error: 1.3.6
-      typescript: 5.5.3
+      typescript: 5.9.3
       v8-compile-cache-lib: 3.0.1
       yn: 3.1.1
     dev: true
 
-  /tsdown@0.22.14(typescript@5.5.3):
-    resolution: {integrity: sha512-ule7Y+fsAN2iZbLDoo7C4KYljFJNJJ+fLshyn+9gozeTspVersWHxwdGB+Dm2hzA38s6muFnUTl0jK3vJm9ifQ==}
-    engines: {node: ^22.18.0 || >=24.11.0}
-    hasBin: true
-    peerDependencies:
-      '@arethetypeswrong/core': ^0.18.1
-      '@tsdown/css': 0.22.14
-      '@tsdown/exe': 0.22.14
-      '@vitejs/devtools': '*'
-      publint: ^0.3.8
-      tsx: '*'
-      typescript: ^5.0.0 || ^6.0.0 || ^7.0.0
-      unplugin-unused: ^0.5.0
-      unrun: '*'
-    peerDependenciesMeta:
-      '@arethetypeswrong/core':
-        optional: true
-      '@tsdown/css':
-        optional: true
-      '@tsdown/exe':
-        optional: true
-      '@vitejs/devtools':
-        optional: true
-      publint:
-        optional: true
-      tsx:
-        optional: true
-      typescript:
-        optional: true
-      unplugin-unused:
-        optional: true
-      unrun:
-        optional: true
-    dependencies:
-      ansis: 4.3.1
-      cac: 7.0.0
-      defu: 6.1.7
-      empathic: 2.0.1
-      hookable: 6.1.1
-      import-without-cache: 0.4.0
-      obug: 2.1.4
-      picomatch: 4.0.5
-      rolldown: 1.2.3
-      rolldown-plugin-dts: 0.27.14(rolldown@1.2.3)(typescript@5.5.3)
-      tinyexec: 1.3.0
-      tinyglobby: 0.2.17
-      tree-kill: 1.2.2
-      typescript: 5.5.3
-      unconfig-core: 7.5.0
-      verkit: 0.3.2
-    transitivePeerDependencies:
-      - '@typescript/native-preview'
-      - '@volar/typescript'
-      - oxc-resolver
-      - vue-tsc
-    dev: true
-
   /tslib@1.14.1:
     resolution: {integrity: sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==}
     dev: true
@@ -7898,7 +6309,7 @@ packages:
   /tslib@2.8.1:
     resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
 
-  /tsup@8.5.1(jiti@2.4.2)(typescript@5.5.3):
+  /tsup@8.5.1(jiti@2.4.2)(typescript@5.9.3):
     resolution: {integrity: sha512-xtgkqwdhpKWr3tKPmCkvYmS9xnQK3m3XgxZHwSUjvfTjp7YfXe5tT3GgWi0F2N+ZSMsOeWeZFh7ZZFg5iPhing==}
     engines: {node: '>=18'}
     hasBin: true
@@ -7934,7 +6345,7 @@ packages:
       tinyexec: 0.3.2
       tinyglobby: 0.2.17
       tree-kill: 1.2.2
-      typescript: 5.5.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - jiti
       - supports-color
@@ -8014,8 +6425,8 @@ packages:
     engines: {node: '>=10'}
     dev: true
 
-  /typescript@5.5.3:
-    resolution: {integrity: sha512-/hreyEujaB0w76zKo6717l3L0o/qEUtRgdvUBvlkhoWeOVMjMuHNHk0BRBzikzuGDqNmPQbg5ifMEqsHLiIUcQ==}
+  /typescript@5.9.3:
+    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
     engines: {node: '>=14.17'}
     hasBin: true
 
@@ -8031,15 +6442,12 @@ packages:
     dev: true
     optional: true
 
-  /unconfig-core@7.5.0:
-    resolution: {integrity: sha512-Su3FauozOGP44ZmKdHy2oE6LPjk51M/TRRjHv2HNCWiDvfvCoxC2lno6jevMA91MYAdCdwP05QnWdWpSbncX/w==}
-    dependencies:
-      '@quansync/fs': 1.0.0
-      quansync: 1.0.0
-    dev: true
-
   /undici-types@5.26.5:
     resolution: {integrity: sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==}
+    dev: true
+
+  /undici-types@6.21.0:
+    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
   /universalify@2.0.1:
     resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
@@ -8055,6 +6463,7 @@ packages:
       browserslist: 4.28.5
       escalade: 3.2.0
       picocolors: 1.1.1
+    dev: true
 
   /update-check@1.5.4:
     resolution: {integrity: sha512-5YHsflzHP4t1G+8WGPlvKbJEbAJGCgw+Em+dGR1KmBUbr1J36SJBqlHLjR7oob7sco5hWHGQVcr9B2poIVDDTQ==}
@@ -8123,12 +6532,7 @@ packages:
     engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
     dev: true
 
-  /verkit@0.3.2:
-    resolution: {integrity: sha512-zj/ob3UsvJGN0whEAKFp53REA5X66hvffVqoCtVQAakJKnKlH+/PcOfMoFwIG/o4rElqLv/ycAFlx8ZlXUorCg==}
-    engines: {node: '>=18.12.0'}
-    dev: true
-
-  /vite-node@3.2.4(@types/node@20.14.11)(jiti@2.4.2):
+  /vite-node@3.2.4(@types/node@22.18.6)(jiti@2.4.2):
     resolution: {integrity: sha512-EbKSKh+bh1E1IFxeO0pg1n4dvoOTt0UDiXMd/qn++r98+jPO1xtJilvXldeuQ8giIB5IkpjCgMleHMNEsGH6pg==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
@@ -8137,7 +6541,7 @@ packages:
       debug: 4.4.3
       es-module-lexer: 1.7.0
       pathe: 2.0.3
-      vite: 7.3.6(@types/node@20.14.11)(jiti@2.4.2)
+      vite: 7.3.6(@types/node@22.18.6)(jiti@2.4.2)
     transitivePeerDependencies:
       - '@types/node'
       - jiti
@@ -8152,7 +6556,7 @@ packages:
       - tsx
       - yaml
 
-  /vite@7.3.6(@types/node@20.14.11)(jiti@2.4.2):
+  /vite@7.3.6(@types/node@22.18.6)(jiti@2.4.2):
     resolution: {integrity: sha512-4XP60spRGjSZFf1qYH+dJIkK2znL3zQfl9KkOV9MkkRR/3Dls0dxaBsQPTloEc5BLXWPL9vsOxopxyKoMmDueg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     hasBin: true
@@ -8192,7 +6596,7 @@ packages:
       yaml:
         optional: true
     dependencies:
-      '@types/node': 20.14.11
+      '@types/node': 22.18.6
       esbuild: 0.28.1
       fdir: 6.5.0(picomatch@4.0.5)
       jiti: 2.4.2
@@ -8203,7 +6607,7 @@ packages:
     optionalDependencies:
       fsevents: 2.3.3
 
-  /vitest@3.2.4(@types/node@20.14.11)(jiti@2.4.2):
+  /vitest@3.2.4(@types/node@22.18.6)(jiti@2.4.2):
     resolution: {integrity: sha512-LUCP5ev3GURDysTWiP47wRRUpLKMOfPh+yKTx3kVIEiu5KOMeqzpnYNsKyOoVrULivR8tLcks4+lga33Whn90A==}
     engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
     hasBin: true
@@ -8232,7 +6636,7 @@ packages:
         optional: true
     dependencies:
       '@types/chai': 5.2.3
-      '@types/node': 20.14.11
+      '@types/node': 22.18.6
       '@vitest/expect': 3.2.4
       '@vitest/mocker': 3.2.4(vite@7.3.6)
       '@vitest/pretty-format': 3.2.7
@@ -8252,8 +6656,8 @@ packages:
       tinyglobby: 0.2.17
       tinypool: 1.1.1
       tinyrainbow: 2.0.0
-      vite: 7.3.6(@types/node@20.14.11)(jiti@2.4.2)
-      vite-node: 3.2.4(@types/node@20.14.11)(jiti@2.4.2)
+      vite: 7.3.6(@types/node@22.18.6)(jiti@2.4.2)
+      vite-node: 3.2.4(@types/node@22.18.6)(jiti@2.4.2)
       why-is-node-running: 2.3.0
     transitivePeerDependencies:
       - jiti
@@ -8275,10 +6679,6 @@ packages:
       defaults: 1.0.4
     dev: true
 
-  /web-streams-polyfill@3.3.3:
-    resolution: {integrity: sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==}
-    engines: {node: '>= 8'}
-
   /webrtc-adapter@9.0.1:
     resolution: {integrity: sha512-1AQO+d4ElfVSXyzNVTOewgGT/tAomwwztX/6e3totvyyzXPvXIIuUUjAmyZGbKBKbZOXauuJooZm3g6IuFuiNQ==}
     engines: {node: '>=6.0.0', npm: '>=3.10.0'}
@@ -8324,27 +6724,10 @@ packages:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
     dev: true
 
-  /ws@8.21.0:
-    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-
-  /wsl-utils@0.1.0:
-    resolution: {integrity: sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==}
-    engines: {node: '>=18'}
-    dependencies:
-      is-wsl: 3.1.1
-    dev: true
-
-  /yallist@3.1.1:
-    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
+  /xtend@4.0.2:
+    resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
+    engines: {node: '>=0.4'}
+    dev: false
 
   /yaml@2.9.0:
     resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
@@ -8362,69 +6745,13 @@ packages:
     engines: {node: '>=10'}
     dev: true
 
-  /yocto-spinner@0.2.3:
-    resolution: {integrity: sha512-sqBChb33loEnkoXte1bLg45bEBsOP9N1kzQh5JZNKj/0rik4zAPTNSAVPj3uQAdc6slYJ0Ksc403G2XgxsJQFQ==}
-    engines: {node: '>=18.19'}
-    dependencies:
-      yoctocolors: 2.1.2
-    dev: true
-
-  /yoctocolors@2.1.2:
-    resolution: {integrity: sha512-CzhO+pFNo8ajLM2d2IW/R93ipy99LWjtwblvC1RsoSUMZgyLbYFr221TnSNT7GjGdYui6P459mw9JH/g/zW2ug==}
-    engines: {node: '>=18'}
-    dev: true
-
-  /yuku-ast@0.8.3:
-    resolution: {integrity: sha512-8x34yU5uhHUnJXzy2Qvjvec/vE9BzS0/2khVT1MsLmSLO/P8Q1Wp8IxHv+IhD+HMYETk6kherOSvP4JPWw2joQ==}
-    dependencies:
-      '@yuku-toolchain/types': 0.8.3
-    dev: true
-
-  /yuku-codegen@0.8.3:
-    resolution: {integrity: sha512-okdo5bb+TfebQa4JOjz9QxeT34D6CcBxu8dxaPUdFEKRdLkp+D2Fah2OanepK+XTyPXdmAJzAo9iXvYvZ/5rmg==}
-    dependencies:
-      '@yuku-toolchain/types': 0.8.3
-    optionalDependencies:
-      '@yuku-codegen/binding-android-arm64': 0.8.3
-      '@yuku-codegen/binding-darwin-arm64': 0.8.3
-      '@yuku-codegen/binding-darwin-x64': 0.8.3
-      '@yuku-codegen/binding-freebsd-x64': 0.8.3
-      '@yuku-codegen/binding-linux-arm-gnu': 0.8.3
-      '@yuku-codegen/binding-linux-arm-musl': 0.8.3
-      '@yuku-codegen/binding-linux-arm64-gnu': 0.8.3
-      '@yuku-codegen/binding-linux-arm64-musl': 0.8.3
-      '@yuku-codegen/binding-linux-x64-gnu': 0.8.3
-      '@yuku-codegen/binding-linux-x64-musl': 0.8.3
-      '@yuku-codegen/binding-win32-arm64': 0.8.3
-      '@yuku-codegen/binding-win32-x64': 0.8.3
-    dev: true
-
-  /yuku-parser@0.8.3:
-    resolution: {integrity: sha512-KPQcpF9aj77ywlJBIkQWCQ9DObdxnCA8AJdUOmA5CZZx042Xt4+dvbQmPJfWxF3E+KG5dVAZ2fBKuDJ8VsKWgA==}
-    dependencies:
-      '@yuku-toolchain/types': 0.8.3
-      yuku-ast: 0.8.3
-    optionalDependencies:
-      '@yuku-parser/binding-android-arm64': 0.8.3
-      '@yuku-parser/binding-darwin-arm64': 0.8.3
-      '@yuku-parser/binding-darwin-x64': 0.8.3
-      '@yuku-parser/binding-freebsd-x64': 0.8.3
-      '@yuku-parser/binding-linux-arm-gnu': 0.8.3
-      '@yuku-parser/binding-linux-arm-musl': 0.8.3
-      '@yuku-parser/binding-linux-arm64-gnu': 0.8.3
-      '@yuku-parser/binding-linux-arm64-musl': 0.8.3
-      '@yuku-parser/binding-linux-x64-gnu': 0.8.3
-      '@yuku-parser/binding-linux-x64-musl': 0.8.3
-      '@yuku-parser/binding-win32-arm64': 0.8.3
-      '@yuku-parser/binding-win32-x64': 0.8.3
-    dev: true
-
   /zod@3.25.67:
     resolution: {integrity: sha512-idA2YXwpCdqUSKRCACDE6ItZD9TZzy3OZMtpfLoh6oPR47lipysRrJfjzMqFxQ3uJuUPyUeWe1r9vLH33xO/Qw==}
     dev: false
 
-  /zod@4.4.3:
-    resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
+  /zod@4.6.5:
+    resolution: {integrity: sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==}
+    dev: false
 
   /zxing-wasm@1.3.4:
     resolution: {integrity: sha512-9l0QymyATF19FmI92QHe7Dayb+BUN7P7zFAt5iDgTnUf0dFWokz6GVA/W9EepjW5q8s3e89fIE/7uxpX27yqEQ==}
diff --git a/turbo.json b/turbo.json
index 0a8c0215..3e4c602d 100644
--- a/turbo.json
+++ b/turbo.json
@@ -64,24 +64,23 @@
 	"tasks": {
 		"build": {
 			"dependsOn": ["^build"],
-			"outputs": ["dist/**"],
-            "cache": true
+			"outputs": ["dist/**", ".next/**", "!.next/cache/**"],
+			"cache": true
 		},
-        "dev": {
-			"dependsOn": ["^build"],
-			"cache": false,
-			"persistent": true
+		"test": {
+			"cache": true,
+			"dependsOn": ["^build"]
 		},
-        "test": {
-            "cache": true,
-            "dependsOn": ["^build"] 
-        },
 		"lint": {},
 		"start": {
 			"cache": false,
 			"persistent": true,
 			"dependsOn": ["^build"]
+		},
+		"dev": {
+			"dependsOn": ["^build"],
+			"cache": false,
+			"persistent": true
 		}
-
 	}
 }