refactor(structure): group platform, infra, and shared packages

Reorganize internal packages into platform/infra/shared layers and update imports, docs, and seed-count tests to match current system configs.
2026-10-09 09:06:36 +08:00 · 2026-07-24 15:41:59 +08:00
parent 68d730a388
commit 33a1c32cf8
470 changed files with 646 additions and 646 deletions
@@ -0,0 +1,7 @@
+-- +goose Up
+-- Historical Wavelet→OpenFlare table rename bridge (formerly Go migration).
+-- Fresh installs and current of_* schemas need no action.
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,184 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS users (
+    id BIGINT PRIMARY KEY,
+    username VARCHAR(64) UNIQUE,
+    password VARCHAR(255),
+    nickname VARCHAR(255),
+    email VARCHAR(255),
+    avatar_url VARCHAR(255),
+    is_active BOOLEAN DEFAULT TRUE,
+    is_admin BOOLEAN DEFAULT FALSE,
+    bio VARCHAR(500),
+    phone VARCHAR(32),
+    gender VARCHAR(16),
+    website VARCHAR(255),
+    location VARCHAR(255),
+    last_login_at DATETIME,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_users_email ON users (email);
+CREATE INDEX IF NOT EXISTS idx_users_is_active ON users (is_active);
+CREATE INDEX IF NOT EXISTS idx_users_last_login_at ON users (last_login_at);
+CREATE INDEX IF NOT EXISTS idx_users_created_at ON users (created_at);
+
+CREATE TABLE IF NOT EXISTS auth_sources (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name VARCHAR(80) NOT NULL UNIQUE,
+    type VARCHAR(20) NOT NULL,
+    display_name VARCHAR(100),
+    is_active BOOLEAN NOT NULL DEFAULT FALSE,
+    client_id VARCHAR(255),
+    client_secret VARCHAR(1024),
+    openid_discovery_url VARCHAR(1024),
+    scopes VARCHAR(255),
+    icon_url VARCHAR(1024),
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_auth_sources_is_active ON auth_sources (is_active);
+
+CREATE TABLE IF NOT EXISTS external_accounts (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    auth_source_id BIGINT,
+    user_id BIGINT NOT NULL,
+    external_id VARCHAR(255) NOT NULL,
+    external_username VARCHAR(255),
+    email VARCHAR(255),
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_external_accounts_auth_source_id ON external_accounts (auth_source_id);
+CREATE INDEX IF NOT EXISTS idx_external_accounts_user_id ON external_accounts (user_id);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_external_accounts_source_external ON external_accounts (auth_source_id, external_id);
+
+CREATE TABLE IF NOT EXISTS system_configs (
+    key VARCHAR(64) PRIMARY KEY,
+    value TEXT NOT NULL,
+    type VARCHAR(32) NOT NULL DEFAULT 'system',
+    visibility INTEGER NOT NULL DEFAULT 0,
+    description VARCHAR(255),
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS uploads (
+    id BIGINT PRIMARY KEY,
+    user_id BIGINT NOT NULL,
+    file_name VARCHAR(255) NOT NULL,
+    file_path VARCHAR(500) NOT NULL,
+    file_size BIGINT NOT NULL,
+    mime_type VARCHAR(100) NOT NULL,
+    extension VARCHAR(50) NOT NULL,
+    hash VARCHAR(64),
+    storage_driver VARCHAR(50) NOT NULL,
+    type VARCHAR(50) NOT NULL,
+    status VARCHAR(20) NOT NULL,
+    metadata JSON,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_uploads_user_id ON uploads (user_id);
+CREATE INDEX IF NOT EXISTS idx_uploads_file_path ON uploads (file_path);
+CREATE INDEX IF NOT EXISTS idx_uploads_hash ON uploads (hash);
+CREATE INDEX IF NOT EXISTS idx_uploads_type ON uploads (type);
+
+CREATE TABLE IF NOT EXISTS access_tokens (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    user_id BIGINT NOT NULL,
+    name VARCHAR(128) NOT NULL,
+    token_hash VARCHAR(64) NOT NULL UNIQUE,
+    masked_token VARCHAR(64) NOT NULL,
+    last_used_at DATETIME,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_access_tokens_user_id ON access_tokens (user_id);
+
+CREATE TABLE IF NOT EXISTS task_executions (
+    id BIGINT PRIMARY KEY,
+    task_id VARCHAR(128) NOT NULL UNIQUE,
+    task_type VARCHAR(64) NOT NULL,
+    task_name VARCHAR(128),
+    status VARCHAR(32) NOT NULL,
+    retryable BOOLEAN NOT NULL DEFAULT FALSE,
+    max_retry INTEGER NOT NULL DEFAULT 0,
+    retry_count INTEGER NOT NULL DEFAULT 0,
+    log TEXT,
+    error_message TEXT,
+    result TEXT,
+    started_at DATETIME,
+    finished_at DATETIME,
+    duration BIGINT,
+    payload TEXT,
+    triggered_by VARCHAR(32) NOT NULL DEFAULT 'system',
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_task_executions_task_type ON task_executions (task_type);
+CREATE INDEX IF NOT EXISTS idx_task_executions_status ON task_executions (status);
+CREATE INDEX IF NOT EXISTS idx_task_executions_started_at ON task_executions (started_at);
+CREATE INDEX IF NOT EXISTS idx_task_executions_created_at ON task_executions (created_at);
+
+CREATE TABLE IF NOT EXISTS templates (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    key VARCHAR(80) NOT NULL UNIQUE,
+    name VARCHAR(100) NOT NULL,
+    type VARCHAR(20) NOT NULL DEFAULT 'email',
+    subject VARCHAR(255),
+    content TEXT NOT NULL,
+    description VARCHAR(255),
+    is_system BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_templates_is_system ON templates (is_system);
+CREATE INDEX IF NOT EXISTS idx_templates_created_at ON templates (created_at);
+CREATE INDEX IF NOT EXISTS idx_templates_updated_at ON templates (updated_at);
+
+INSERT INTO system_configs (key, value, type, visibility, description, created_at, updated_at) VALUES
+    ('cap_login_enabled', 'false', 'system', 1, '是否启用登录人机验证（true/false）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_auto_solve', 'true', 'system', 1, '打开页面后是否自动开始计算，关闭则需用户手动点击触发', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_challenge_count', '1', 'system', 0, '客户端需求解的 PoW 难题总数，默认 1，推荐 1～5', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_challenge_size', '32', 'system', 0, '人机验证盐值长度', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_challenge_difficulty', '4', 'system', 0, '人机验证 PoW 难度（目标前缀长度）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_challenge_ttl_seconds', '600', 'system', 0, '人机验证难题有效时间（秒）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('cap_token_ttl_seconds', '1200', 'system', 0, '人机验证兑换凭证有效时间（秒）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('server_address', '', 'system', 0, '服务器地址（用于跨域源控制，不设定则允许任意源）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('smtp_host', '', 'system', 0, 'SMTP 服务器地址（例如 smtp.example.com）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('smtp_port', '587', 'system', 0, 'SMTP 端口（例如 587 或 465）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('smtp_username', '', 'system', 0, 'SMTP 账户（如 sender@example.com）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('smtp_password', '', 'system', 0, 'SMTP 访问凭证（授权码/密码）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('upload_allowed_extensions', 'jpg,png,webp', 'system', 1, '允许上传的图片扩展名（逗号分隔）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('site_name', 'OpenFlare', 'system', 1, '系统平台的展示名称', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('password_login_enabled', 'true', 'system', 1, '是否允许使用账号密码登录', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('registration_enabled', 'false', 'system', 1, '控制普通用户是否可以自主注册（true/false）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('password_register_enabled', 'false', 'system', 1, '是否允许通过密码创建本地账号', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('oidc_login_enabled', 'true', 'system', 1, '是否允许使用第三方 OIDC 认证源登录', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('max_api_keys_per_user', '5', 'business', 1, '限制每个普通用户可以创建的 API Key 最大数量', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('email_login_verification_enabled', 'false', 'system', 1, '是否开启邮箱登录验证（true/false）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('email_register_verification_enabled', 'false', 'system', 1, '是否开启邮箱注册验证（true/false）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('menu_display_config', '{}', 'system', 1, '目录显示配置（JSON 字符串，格式为 {url: enabled}）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('search_engine_indexing_enabled', 'false', 'system', 1, '是否允许搜索引擎爬取/检索该站点（true/false）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('update_upstream_repository', 'Rain-kl/OpenFlare', 'system', 0, 'GitHub Actions Release 上游仓库（owner/repo 或 GitHub 仓库地址）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('storage_config', '{"driver":"local","local":{"root":"."},"s3":{"region":"us-east-1"},"r2":{"region":"auto"},"minio":{"region":"us-east-1","path_style":true},"oss":{},"webdav":{}}', 'system', 0, '文件存储驱动及连接配置（JSON）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+INSERT INTO users (id, username, password, nickname, avatar_url, is_active, is_admin, last_login_at, created_at, updated_at)
+VALUES (1, 'admin', '12345678', 'Administrator', '', TRUE, TRUE, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (username) DO NOTHING;
+
+INSERT INTO templates (key, name, type, subject, content, description, is_system, created_at, updated_at) VALUES
+    ('login_email', '登录验证码邮件', 'email', 'OpenFlare 登录验证码', '<h3>OpenFlare 登录验证</h3><p>您的登录验证码为：<strong>{{.Code}}</strong>，5分钟内有效，请勿将验证码泄露给他人。</p>', '用户密码登录时发送的验证码邮件模板，支持变量：{{.Code}}', TRUE, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    ('register_email', '注册验证码邮件', 'email', 'OpenFlare 注册验证码', '<h3>OpenFlare 注册验证</h3><p>您的注册验证码为：<strong>{{.Code}}</strong>，5分钟内有效，请勿泄露给他人。</p>', '用户注册时发送的验证码邮件模板，支持变量：{{.Code}}', TRUE, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DROP TABLE IF EXISTS templates;
+DROP TABLE IF EXISTS task_executions;
+DROP TABLE IF EXISTS access_tokens;
+DROP TABLE IF EXISTS uploads;
+DROP TABLE IF EXISTS system_configs;
+DROP TABLE IF EXISTS external_accounts;
+DROP TABLE IF EXISTS auth_sources;
+DROP TABLE IF EXISTS users;
@@ -0,0 +1,20 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS schedules (
+    id BIGINT PRIMARY KEY,
+    name VARCHAR(128) NOT NULL,
+    task_type VARCHAR(64) NOT NULL,
+    cron VARCHAR(64) NOT NULL,
+    payload TEXT,
+    is_active BOOLEAN NOT NULL DEFAULT TRUE,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_schedules_is_active ON schedules (is_active);
+
+-- Seed initial cleanup task
+INSERT INTO schedules (id, name, task_type, cron, payload, is_active, created_at, updated_at)
+VALUES (1, '清理未使用上传', 'cleanup_unused_uploads', '0 */2 * * *', '{}', TRUE, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (id) DO NOTHING;
+
+-- +goose Down
+DROP TABLE IF EXISTS schedules;
@@ -0,0 +1,5 @@
+-- +goose Up
+ALTER TABLE access_tokens ADD COLUMN is_admin BOOLEAN NOT NULL DEFAULT 0;
+
+-- +goose Down
+ALTER TABLE access_tokens DROP COLUMN is_admin;
@@ -0,0 +1,9 @@
+-- +goose Up
+-- +goose StatementBegin
+ALTER TABLE access_tokens DROP COLUMN last_used_at;
+-- +goose StatementEnd
+
+-- +goose Down
+-- +goose StatementBegin
+ALTER TABLE access_tokens ADD COLUMN last_used_at DATETIME;
+-- +goose StatementEnd
@@ -0,0 +1,32 @@
+-- +goose Up
+-- +goose StatementBegin
+-- 1. Rename existing schedules table
+ALTER TABLE schedules RENAME TO schedules_old;
+
+-- 2. Create new schedules table with AUTOINCREMENT
+CREATE TABLE schedules (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name VARCHAR(128) NOT NULL,
+    task_type VARCHAR(64) NOT NULL,
+    cron VARCHAR(64) NOT NULL,
+    payload TEXT,
+    is_active BOOLEAN NOT NULL DEFAULT TRUE,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+-- 3. Copy existing data
+INSERT INTO schedules (id, name, task_type, cron, payload, is_active, created_at, updated_at)
+SELECT id, name, task_type, cron, payload, is_active, created_at, updated_at FROM schedules_old;
+
+-- 4. Drop the old table
+DROP TABLE schedules_old;
+
+-- 5. Recreate index
+CREATE INDEX IF NOT EXISTS idx_schedules_is_active ON schedules (is_active);
+-- +goose StatementEnd
+
+-- +goose Down
+-- +goose StatementBegin
+-- Re-creating table with AUTOINCREMENT cannot be undone simply without recreating table again.
+-- +goose StatementEnd
@@ -0,0 +1,123 @@
+-- +goose Up
+ALTER TABLE users RENAME TO w_users;
+ALTER TABLE auth_sources RENAME TO w_auth_sources;
+ALTER TABLE external_accounts RENAME TO w_external_accounts;
+ALTER TABLE system_configs RENAME TO w_system_configs;
+ALTER TABLE uploads RENAME TO w_uploads;
+ALTER TABLE access_tokens RENAME TO w_access_tokens;
+ALTER TABLE task_executions RENAME TO w_task_executions;
+ALTER TABLE templates RENAME TO w_templates;
+ALTER TABLE schedules RENAME TO w_schedules;
+
+-- Drop and Recreate SQLite indexes
+DROP INDEX IF EXISTS idx_users_email;
+CREATE INDEX IF NOT EXISTS idx_w_users_email ON w_users (email);
+DROP INDEX IF EXISTS idx_users_is_active;
+CREATE INDEX IF NOT EXISTS idx_w_users_is_active ON w_users (is_active);
+DROP INDEX IF EXISTS idx_users_last_login_at;
+CREATE INDEX IF NOT EXISTS idx_w_users_last_login_at ON w_users (last_login_at);
+DROP INDEX IF EXISTS idx_users_created_at;
+CREATE INDEX IF NOT EXISTS idx_w_users_created_at ON w_users (created_at);
+
+DROP INDEX IF EXISTS idx_auth_sources_is_active;
+CREATE INDEX IF NOT EXISTS idx_w_auth_sources_is_active ON w_auth_sources (is_active);
+
+DROP INDEX IF EXISTS idx_external_accounts_auth_source_id;
+CREATE INDEX IF NOT EXISTS idx_w_external_accounts_auth_source_id ON w_external_accounts (auth_source_id);
+DROP INDEX IF EXISTS idx_external_accounts_user_id;
+CREATE INDEX IF NOT EXISTS idx_w_external_accounts_user_id ON w_external_accounts (user_id);
+DROP INDEX IF EXISTS idx_external_accounts_source_external;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_w_external_accounts_source_external ON w_external_accounts (auth_source_id, external_id);
+
+DROP INDEX IF EXISTS idx_uploads_user_id;
+CREATE INDEX IF NOT EXISTS idx_w_uploads_user_id ON w_uploads (user_id);
+DROP INDEX IF EXISTS idx_uploads_file_path;
+CREATE INDEX IF NOT EXISTS idx_w_uploads_file_path ON w_uploads (file_path);
+DROP INDEX IF EXISTS idx_uploads_hash;
+CREATE INDEX IF NOT EXISTS idx_w_uploads_hash ON w_uploads (hash);
+DROP INDEX IF EXISTS idx_uploads_type;
+CREATE INDEX IF NOT EXISTS idx_w_uploads_type ON w_uploads (type);
+
+DROP INDEX IF EXISTS idx_access_tokens_user_id;
+CREATE INDEX IF NOT EXISTS idx_w_access_tokens_user_id ON w_access_tokens (user_id);
+
+DROP INDEX IF EXISTS idx_task_executions_task_type;
+CREATE INDEX IF NOT EXISTS idx_w_task_executions_task_type ON w_task_executions (task_type);
+DROP INDEX IF EXISTS idx_task_executions_status;
+CREATE INDEX IF NOT EXISTS idx_w_task_executions_status ON w_task_executions (status);
+DROP INDEX IF EXISTS idx_task_executions_started_at;
+CREATE INDEX IF NOT EXISTS idx_w_task_executions_started_at ON w_task_executions (started_at);
+DROP INDEX IF EXISTS idx_task_executions_created_at;
+CREATE INDEX IF NOT EXISTS idx_w_task_executions_created_at ON w_task_executions (created_at);
+
+DROP INDEX IF EXISTS idx_templates_is_system;
+CREATE INDEX IF NOT EXISTS idx_w_templates_is_system ON w_templates (is_system);
+DROP INDEX IF EXISTS idx_templates_created_at;
+CREATE INDEX IF NOT EXISTS idx_w_templates_created_at ON w_templates (created_at);
+DROP INDEX IF EXISTS idx_templates_updated_at;
+CREATE INDEX IF NOT EXISTS idx_w_templates_updated_at ON w_templates (updated_at);
+
+DROP INDEX IF EXISTS idx_schedules_is_active;
+CREATE INDEX IF NOT EXISTS idx_w_schedules_is_active ON w_schedules (is_active);
+
+-- +goose Down
+ALTER TABLE w_schedules RENAME TO schedules;
+ALTER TABLE w_templates RENAME TO templates;
+ALTER TABLE w_task_executions RENAME TO task_executions;
+ALTER TABLE w_access_tokens RENAME TO access_tokens;
+ALTER TABLE w_uploads RENAME TO uploads;
+ALTER TABLE w_system_configs RENAME TO system_configs;
+ALTER TABLE w_external_accounts RENAME TO external_accounts;
+ALTER TABLE w_auth_sources RENAME TO auth_sources;
+ALTER TABLE w_users RENAME TO users;
+
+-- Revert indexes
+DROP INDEX IF EXISTS idx_w_users_email;
+CREATE INDEX IF NOT EXISTS idx_users_email ON users (email);
+DROP INDEX IF EXISTS idx_w_users_is_active;
+CREATE INDEX IF NOT EXISTS idx_users_is_active ON users (is_active);
+DROP INDEX IF EXISTS idx_w_users_last_login_at;
+CREATE INDEX IF NOT EXISTS idx_users_last_login_at ON users (last_login_at);
+DROP INDEX IF EXISTS idx_w_users_created_at;
+CREATE INDEX IF NOT EXISTS idx_users_created_at ON users (created_at);
+
+DROP INDEX IF EXISTS idx_w_auth_sources_is_active;
+CREATE INDEX IF NOT EXISTS idx_auth_sources_is_active ON auth_sources (is_active);
+
+DROP INDEX IF EXISTS idx_w_external_accounts_auth_source_id;
+CREATE INDEX IF NOT EXISTS idx_external_accounts_auth_source_id ON external_accounts (auth_source_id);
+DROP INDEX IF EXISTS idx_w_external_accounts_user_id;
+CREATE INDEX IF NOT EXISTS idx_external_accounts_user_id ON external_accounts (user_id);
+DROP INDEX IF EXISTS idx_w_external_accounts_source_external;
+CREATE UNIQUE INDEX IF NOT EXISTS idx_external_accounts_source_external ON external_accounts (auth_source_id, external_id);
+
+DROP INDEX IF EXISTS idx_w_uploads_user_id;
+CREATE INDEX IF NOT EXISTS idx_uploads_user_id ON uploads (user_id);
+DROP INDEX IF EXISTS idx_w_uploads_file_path;
+CREATE INDEX IF NOT EXISTS idx_uploads_file_path ON uploads (file_path);
+DROP INDEX IF EXISTS idx_w_uploads_hash;
+CREATE INDEX IF NOT EXISTS idx_uploads_hash ON uploads (hash);
+DROP INDEX IF EXISTS idx_w_uploads_type;
+CREATE INDEX IF NOT EXISTS idx_uploads_type ON uploads (type);
+
+DROP INDEX IF EXISTS idx_w_access_tokens_user_id;
+CREATE INDEX IF NOT EXISTS idx_access_tokens_user_id ON access_tokens (user_id);
+
+DROP INDEX IF EXISTS idx_w_task_executions_task_type;
+CREATE INDEX IF NOT EXISTS idx_task_executions_task_type ON task_executions (task_type);
+DROP INDEX IF EXISTS idx_w_task_executions_status;
+CREATE INDEX IF NOT EXISTS idx_task_executions_status ON task_executions (status);
+DROP INDEX IF EXISTS idx_w_task_executions_started_at;
+CREATE INDEX IF NOT EXISTS idx_task_executions_started_at ON task_executions (started_at);
+DROP INDEX IF EXISTS idx_w_task_executions_created_at;
+CREATE INDEX IF NOT EXISTS idx_task_executions_created_at ON task_executions (created_at);
+
+DROP INDEX IF EXISTS idx_w_templates_is_system;
+CREATE INDEX IF NOT EXISTS idx_templates_is_system ON templates (is_system);
+DROP INDEX IF EXISTS idx_w_templates_created_at;
+CREATE INDEX IF NOT EXISTS idx_templates_created_at ON templates (created_at);
+DROP INDEX IF EXISTS idx_w_templates_updated_at;
+CREATE INDEX IF NOT EXISTS idx_templates_updated_at ON templates (updated_at);
+
+DROP INDEX IF EXISTS idx_w_schedules_is_active;
+CREATE INDEX IF NOT EXISTS idx_schedules_is_active ON schedules (is_active);
@@ -0,0 +1,7 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES ('file_access_whitelist', '["avatar"]', 'system', 1, '免登录访问的文件业务类型白名单 (JSON 数组格式)', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key = 'file_access_whitelist';
@@ -0,0 +1,10 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES 
+  ('disk_cache_max_size_mb', '100', 'system', 0, '磁盘缓存最大空间大小 (MB)', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('disk_cache_ttl_minutes', '60', 'system', 0, '磁盘缓存默认有效期 (分钟)', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('disk_cache_lru_enabled', 'true', 'system', 0, '是否启用 LRU 淘汰机制', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key IN ('disk_cache_max_size_mb', 'disk_cache_ttl_minutes', 'disk_cache_lru_enabled');
@@ -0,0 +1,8 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES 
+  ('login_session_ttl_hours', '0', 'system', 0, '登录会话过期时间 (小时，0表示浏览器关闭后自动退出，-1表示永不过期)', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key = 'login_session_ttl_hours';
@@ -0,0 +1,7 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES ('update_upstream_repository', 'Rain-kl/OpenFlare', 'system', 0, 'GitHub Actions Release 上游仓库（owner/repo 或 GitHub 仓库地址）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key = 'update_upstream_repository';
@@ -0,0 +1,6 @@
+-- +goose Up
+ALTER TABLE w_uploads ADD COLUMN access_mode INTEGER NOT NULL DEFAULT 0;
+UPDATE w_uploads SET access_mode = 1 WHERE type = 'avatar';
+
+-- +goose Down
+ALTER TABLE w_uploads DROP COLUMN access_mode;
@@ -0,0 +1,6 @@
+-- +goose Up
+-- SQLite stores VARCHAR and TEXT with the same TEXT affinity.
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,15 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES (
+  'storage_config',
+  '{"driver":"local","local":{"root":"."},"s3":{"region":"us-east-1"},"r2":{"region":"auto"},"minio":{"region":"us-east-1","path_style":true},"oss":{},"webdav":{}}',
+  'system',
+  0,
+  '文件存储驱动及连接配置（JSON）',
+  CURRENT_TIMESTAMP,
+  CURRENT_TIMESTAMP
+)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key = 'storage_config';
@@ -0,0 +1,34 @@
+-- +goose Up
+CREATE TABLE w_push_events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    event_key TEXT NOT NULL UNIQUE,
+    name TEXT NOT NULL,
+    channels TEXT NOT NULL,
+    targets TEXT NOT NULL,
+    template TEXT NOT NULL,
+    enabled BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at DATETIME NOT NULL,
+    updated_at DATETIME NOT NULL
+);
+
+CREATE INDEX idx_w_push_events_enabled ON w_push_events(enabled);
+
+CREATE TABLE w_push_histories (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    event_key TEXT NOT NULL,
+    channel TEXT NOT NULL,
+    target TEXT NOT NULL,
+    title TEXT NOT NULL,
+    content TEXT NOT NULL,
+    level TEXT NOT NULL,
+    status TEXT NOT NULL,
+    error_msg TEXT,
+    created_at DATETIME NOT NULL
+);
+
+CREATE INDEX idx_w_push_histories_event ON w_push_histories(event_key);
+CREATE INDEX idx_w_push_histories_created ON w_push_histories(created_at);
+
+-- +goose Down
+DROP TABLE IF EXISTS w_push_histories;
+DROP TABLE IF EXISTS w_push_events;
@@ -0,0 +1,7 @@
+-- +goose Up
+INSERT INTO w_users (id, username, password, nickname, avatar_url, is_active, is_admin, last_login_at, created_at, updated_at)
+VALUES (999, 'system', '*', '系统', '', TRUE, FALSE, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (username) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_users WHERE username = 'system';
@@ -0,0 +1,19 @@
+-- +goose Up
+CREATE TABLE w_push_channels (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL UNIQUE,
+    description TEXT,
+    type TEXT NOT NULL DEFAULT 'custom',
+    token TEXT,
+    url TEXT NOT NULL,
+    other TEXT NOT NULL,
+    enabled BOOLEAN NOT NULL DEFAULT TRUE,
+    created_at DATETIME NOT NULL,
+    updated_at DATETIME NOT NULL
+);
+
+CREATE INDEX idx_w_push_channels_name ON w_push_channels(name);
+CREATE INDEX idx_w_push_channels_enabled ON w_push_channels(enabled);
+
+-- +goose Down
+DROP TABLE IF EXISTS w_push_channels;
@@ -0,0 +1,11 @@
+-- +goose Up
+UPDATE w_schedules
+SET name = '系统定期垃圾清理',
+    task_type = 'system_cleanup'
+WHERE id = 1;
+
+-- +goose Down
+UPDATE w_schedules
+SET name = '清理未使用上传',
+    task_type = 'cleanup_unused_uploads'
+WHERE id = 1;
@@ -0,0 +1,9 @@
+-- +goose Up
+ALTER TABLE w_push_events ADD COLUMN task_type VARCHAR(100) NOT NULL DEFAULT '';
+CREATE INDEX idx_w_push_events_task_type ON w_push_events(task_type);
+
+-- +goose Down
+DROP INDEX IF EXISTS idx_w_push_events_task_type;
+-- SQLite does not support DROP COLUMN in older versions easily, but standard ALTER TABLE DROP COLUMN works in SQLite 3.35.0+.
+-- We can write standard DROP COLUMN.
+ALTER TABLE w_push_events DROP COLUMN task_type;
@@ -0,0 +1,6 @@
+-- +goose Up
+DELETE FROM w_system_configs WHERE key = 'push_config';
+DELETE FROM w_push_events WHERE event_key = 'admin_login';
+DELETE FROM w_system_configs WHERE key = 'push_global_token';
+
+-- +goose Down
@@ -0,0 +1,9 @@
+-- +goose Up
+CREATE INDEX IF NOT EXISTS idx_w_uploads_status_created_at ON w_uploads (status, created_at);
+CREATE INDEX IF NOT EXISTS idx_w_uploads_storage_driver_status ON w_uploads (storage_driver, status);
+CREATE INDEX IF NOT EXISTS idx_w_uploads_hash_file_size_status ON w_uploads (hash, file_size, status);
+
+-- +goose Down
+DROP INDEX IF EXISTS idx_w_uploads_hash_file_size_status;
+DROP INDEX IF EXISTS idx_w_uploads_storage_driver_status;
+DROP INDEX IF EXISTS idx_w_uploads_status_created_at;
@@ -0,0 +1,12 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS w_upload_stats (
+    dimension VARCHAR(32) NOT NULL,
+    stat_key VARCHAR(64) NOT NULL DEFAULT '',
+    file_count BIGINT NOT NULL DEFAULT 0,
+    file_size BIGINT NOT NULL DEFAULT 0,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    PRIMARY KEY (dimension, stat_key)
+);
+
+-- +goose Down
+DROP TABLE IF EXISTS w_upload_stats;
@@ -0,0 +1,67 @@
+-- +goose Up
+INSERT INTO w_upload_stats (dimension, stat_key, file_count, file_size)
+SELECT 'total', '', COUNT(*), COALESCE(SUM(file_size), 0)
+FROM w_uploads
+WHERE status != 'deleted'
+ON CONFLICT (dimension, stat_key) DO UPDATE SET
+    file_count = excluded.file_count,
+    file_size = excluded.file_size,
+    updated_at = CURRENT_TIMESTAMP;
+
+INSERT INTO w_upload_stats (dimension, stat_key, file_count, file_size)
+SELECT
+    'type',
+    COALESCE(NULLIF(type, ''), 'generic'),
+    COUNT(*),
+    COALESCE(SUM(file_size), 0)
+FROM w_uploads
+WHERE status != 'deleted'
+GROUP BY COALESCE(NULLIF(type, ''), 'generic')
+ON CONFLICT (dimension, stat_key) DO UPDATE SET
+    file_count = excluded.file_count,
+    file_size = excluded.file_size,
+    updated_at = CURRENT_TIMESTAMP;
+
+INSERT INTO w_upload_stats (dimension, stat_key, file_count, file_size)
+SELECT
+    'category',
+    CASE
+        WHEN LOWER(mime_type) LIKE 'image/%'
+            OR LOWER(extension) IN ('jpg', 'jpeg', 'png', 'webp', 'gif') THEN '图片'
+        WHEN LOWER(mime_type) LIKE 'video/%' THEN '视频'
+        WHEN LOWER(mime_type) LIKE 'audio/%' THEN '音频'
+        WHEN LOWER(extension) IN ('zip', 'rar', '7z', 'tar', 'gz', 'tgz', 'bz2', 'xz')
+            OR LOWER(mime_type) LIKE '%zip%'
+            OR LOWER(mime_type) LIKE '%tar%'
+            OR LOWER(mime_type) LIKE '%gzip%' THEN '压缩包'
+        WHEN LOWER(extension) IN ('pdf', 'doc', 'docx', 'xls', 'xlsx', 'ppt', 'pptx', 'txt', 'md', 'csv', 'json', 'yaml', 'yml', 'xml')
+            OR LOWER(mime_type) LIKE 'text/%'
+            OR LOWER(mime_type) = 'application/pdf' THEN '文档'
+        ELSE '其他'
+    END,
+    COUNT(*),
+    COALESCE(SUM(file_size), 0)
+FROM w_uploads
+WHERE status != 'deleted'
+GROUP BY 2
+ON CONFLICT (dimension, stat_key) DO UPDATE SET
+    file_count = excluded.file_count,
+    file_size = excluded.file_size,
+    updated_at = CURRENT_TIMESTAMP;
+
+INSERT INTO w_upload_stats (dimension, stat_key, file_count, file_size)
+SELECT
+    'trend',
+    STRFTIME('%Y-%m-%d', created_at),
+    COUNT(*),
+    COALESCE(SUM(file_size), 0)
+FROM w_uploads
+WHERE status != 'deleted'
+GROUP BY STRFTIME('%Y-%m-%d', created_at)
+ON CONFLICT (dimension, stat_key) DO UPDATE SET
+    file_count = excluded.file_count,
+    file_size = excluded.file_size,
+    updated_at = CURRENT_TIMESTAMP;
+
+-- +goose Down
+DELETE FROM w_upload_stats;
@@ -0,0 +1,8 @@
+-- +goose Up
+DROP INDEX IF EXISTS idx_w_uploads_storage_driver_status;
+-- SQLite lacks DROP COLUMN IF EXISTS; goose runs this only after initial schema created the column.
+ALTER TABLE w_uploads DROP COLUMN storage_driver;
+
+-- +goose Down
+ALTER TABLE w_uploads ADD COLUMN storage_driver VARCHAR(50) NOT NULL DEFAULT 'local';
+CREATE INDEX IF NOT EXISTS idx_w_uploads_storage_driver_status ON w_uploads (storage_driver, status);
@@ -0,0 +1,66 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_options (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL DEFAULT ''
+);
+
+INSERT OR IGNORE INTO of_options (key, value) VALUES
+    ('PasswordLoginEnabled', 'true'),
+    ('CapLoginEnabled', 'true'),
+    ('PasswordRegisterEnabled', 'false'),
+    ('EmailVerificationEnabled', 'false'),
+    ('GitHubOAuthEnabled', 'false'),
+    ('WeChatAuthEnabled', 'false'),
+    ('SMTPPort', '587'),
+    ('SystemName', 'OpenFlare'),
+    ('AgentHeartbeatInterval', '10000'),
+    ('AgentWebsocketUpgradeEnabled', 'true'),
+    ('NodeOfflineThreshold', '120000'),
+    ('AgentUpdateRepo', 'Rain-kl/OpenFlare'),
+    ('GeoIPProvider', 'ipinfo'),
+    ('DatabaseAutoCleanupEnabled', 'false'),
+    ('DatabaseAutoCleanupRetentionDays', '30'),
+    ('UptimeKumaEnabled', 'false'),
+    ('UptimeKumaMonitorScope', 'all'),
+    ('UptimeKumaSyncInterval', '5'),
+    ('UptimeKumaInterval', '60'),
+    ('UptimeKumaRetry', '0'),
+    ('UptimeKumaRetryInterval', '60'),
+    ('UptimeKumaTimeout', '48'),
+    ('OpenRestyDefaultServerReturnStatus', '421'),
+    ('OpenRestyWorkerProcesses', 'auto'),
+    ('OpenRestyWorkerConnections', '4096'),
+    ('OpenRestyWorkerRlimitNofile', '65535'),
+    ('OpenRestyEventsUse', 'epoll'),
+    ('OpenRestyEventsMultiAcceptEnabled', 'true'),
+    ('OpenRestyKeepaliveTimeout', '20'),
+    ('OpenRestyKeepaliveRequests', '1000'),
+    ('OpenRestyClientHeaderTimeout', '15'),
+    ('OpenRestyClientBodyTimeout', '15'),
+    ('OpenRestyClientMaxBodySize', '64m'),
+    ('OpenRestyLargeClientHeaderBuffers', '4 16k'),
+    ('OpenRestySendTimeout', '30'),
+    ('OpenRestyProxyConnectTimeout', '3'),
+    ('OpenRestyProxySendTimeout', '60'),
+    ('OpenRestyProxyReadTimeout', '60'),
+    ('OpenRestyWebsocketEnabled', 'true'),
+    ('OpenRestyHTTP3Enabled', 'true'),
+    ('OpenRestyProxyRequestBufferingEnabled', 'false'),
+    ('OpenRestyProxyBufferingEnabled', 'true'),
+    ('OpenRestyProxyBuffers', '16 16k'),
+    ('OpenRestyProxyBufferSize', '8k'),
+    ('OpenRestyProxyBusyBuffersSize', '64k'),
+    ('OpenRestyGzipEnabled', 'true'),
+    ('OpenRestyGzipMinLength', '1024'),
+    ('OpenRestyGzipCompLevel', '5'),
+    ('OpenRestyCacheEnabled', 'false'),
+    ('OpenRestyCacheLevels', '1:2'),
+    ('OpenRestyCacheInactive', '30m'),
+    ('OpenRestyCacheMaxSize', '1g'),
+    ('OpenRestyCacheKeyTemplate', '$scheme$host$request_uri'),
+    ('OpenRestyCacheLockEnabled', 'true'),
+    ('OpenRestyCacheLockTimeout', '5s'),
+    ('OpenRestyCacheUseStale', 'error timeout updating http_500 http_502 http_503 http_504');
+
+-- +goose Down
+DROP TABLE IF EXISTS of_options;
@@ -0,0 +1,13 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_origins (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    address TEXT NOT NULL,
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_origins_address ON of_origins (address);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_origins;
@@ -0,0 +1,19 @@
+-- +goose Up
+CREATE TABLE of_apply_logs (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    version TEXT NOT NULL,
+    result TEXT NOT NULL,
+    message TEXT,
+    checksum TEXT NOT NULL DEFAULT '',
+    main_config_checksum TEXT NOT NULL DEFAULT '',
+    route_config_checksum TEXT NOT NULL DEFAULT '',
+    support_file_count INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL
+);
+
+CREATE INDEX idx_of_apply_logs_node_id ON of_apply_logs(node_id);
+CREATE INDEX idx_of_apply_logs_created_at ON of_apply_logs(created_at);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_apply_logs;
@@ -0,0 +1,43 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_proxy_routes (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    site_name TEXT NOT NULL DEFAULT '',
+    domain TEXT NOT NULL,
+    domains TEXT NOT NULL DEFAULT '[]',
+    origin_id INTEGER,
+    origin_url TEXT NOT NULL,
+    origin_host TEXT NOT NULL DEFAULT '',
+    upstreams TEXT NOT NULL DEFAULT '[]',
+    enabled INTEGER NOT NULL DEFAULT 1,
+    enable_https INTEGER NOT NULL DEFAULT 0,
+    cert_id INTEGER,
+    cert_ids TEXT NOT NULL DEFAULT '[]',
+    domain_cert_ids TEXT NOT NULL DEFAULT '[]',
+    redirect_http INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_server INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_ip INTEGER NOT NULL DEFAULT 0,
+    limit_rate TEXT NOT NULL DEFAULT '',
+    cache_enabled INTEGER NOT NULL DEFAULT 0,
+    cache_policy TEXT NOT NULL DEFAULT '',
+    cache_rules TEXT NOT NULL DEFAULT '[]',
+    custom_headers TEXT NOT NULL DEFAULT '[]',
+    basic_auth_enabled INTEGER NOT NULL DEFAULT 0,
+    basic_auth_username TEXT NOT NULL DEFAULT '',
+    basic_auth_password TEXT NOT NULL DEFAULT '',
+    remark TEXT NOT NULL DEFAULT '',
+    upstream_type TEXT NOT NULL DEFAULT 'direct',
+    tunnel_node_id INTEGER,
+    tunnel_target_addr TEXT NOT NULL DEFAULT '',
+    tunnel_target_protocol TEXT NOT NULL DEFAULT '',
+    pages_project_id INTEGER,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_proxy_routes_domain ON of_proxy_routes (domain);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_proxy_routes_site_name ON of_proxy_routes (site_name);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_origin_id ON of_proxy_routes (origin_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_tunnel_node_id ON of_proxy_routes (tunnel_node_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_pages_project_id ON of_proxy_routes (pages_project_id);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_proxy_routes;
@@ -0,0 +1,44 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_nodes (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    name TEXT NOT NULL,
+    ip TEXT NOT NULL DEFAULT '',
+    ip_manual_override INTEGER NOT NULL DEFAULT 0,
+    geo_name TEXT NOT NULL DEFAULT '',
+    geo_latitude REAL,
+    geo_longitude REAL,
+    geo_manual_override INTEGER NOT NULL DEFAULT 0,
+    access_token TEXT NOT NULL DEFAULT '',
+    auto_update_enabled INTEGER NOT NULL DEFAULT 0,
+    update_requested INTEGER NOT NULL DEFAULT 0,
+    update_channel TEXT NOT NULL DEFAULT 'stable',
+    update_tag TEXT NOT NULL DEFAULT '',
+    restart_openresty_requested INTEGER NOT NULL DEFAULT 0,
+    version TEXT NOT NULL DEFAULT '',
+    ext_version TEXT NOT NULL DEFAULT '',
+    openresty_status TEXT NOT NULL DEFAULT 'unknown',
+    openresty_message TEXT,
+    status TEXT NOT NULL DEFAULT 'offline',
+    current_version TEXT NOT NULL DEFAULT '',
+    last_seen_at DATETIME,
+    last_error TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    node_type TEXT NOT NULL DEFAULT 'edge_node',
+    relay_bind_port INTEGER NOT NULL DEFAULT 0,
+    relay_vhost_http_port INTEGER NOT NULL DEFAULT 0,
+    relay_auth_token TEXT NOT NULL DEFAULT '',
+    relay_agent_access_addr TEXT NOT NULL DEFAULT '',
+    relay_client_access_addr TEXT NOT NULL DEFAULT '',
+    relay_client_proxy_url TEXT NOT NULL DEFAULT '',
+    capabilities_json TEXT NOT NULL DEFAULT '[]',
+    relay_status TEXT NOT NULL DEFAULT 'unknown',
+    relay_web_server_enabled INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_nodes_node_id ON of_nodes (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_nodes_access_token ON of_nodes (access_token);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_nodes;
@@ -0,0 +1,60 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_waf_rule_groups (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    enabled BOOLEAN NOT NULL DEFAULT TRUE,
+    is_global BOOLEAN NOT NULL DEFAULT FALSE,
+    block_status_code INTEGER NOT NULL DEFAULT 418,
+    block_response_body TEXT NOT NULL DEFAULT '',
+    ip_whitelist TEXT NOT NULL DEFAULT '[]',
+    ip_blacklist TEXT NOT NULL DEFAULT '[]',
+    ip_whitelist_groups TEXT NOT NULL DEFAULT '[]',
+    ip_blacklist_groups TEXT NOT NULL DEFAULT '[]',
+    country_whitelist TEXT NOT NULL DEFAULT '[]',
+    country_blacklist TEXT NOT NULL DEFAULT '[]',
+    region_whitelist TEXT NOT NULL DEFAULT '[]',
+    region_blacklist TEXT NOT NULL DEFAULT '[]',
+    pow_enabled BOOLEAN NOT NULL DEFAULT FALSE,
+    pow_config TEXT NOT NULL DEFAULT '{}',
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_of_waf_rule_groups_is_global ON of_waf_rule_groups (is_global);
+
+CREATE TABLE IF NOT EXISTS of_waf_ip_groups (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    type TEXT NOT NULL,
+    enabled BOOLEAN NOT NULL DEFAULT TRUE,
+    ip_list TEXT NOT NULL DEFAULT '[]',
+    auto_config TEXT NOT NULL DEFAULT '{}',
+    ext_ips TEXT NOT NULL DEFAULT '[]',
+    subscription_url TEXT NOT NULL DEFAULT '',
+    subscription_format TEXT NOT NULL DEFAULT 'text',
+    subscription_mapping_rule TEXT NOT NULL DEFAULT '',
+    sync_interval_minutes INTEGER NOT NULL DEFAULT 1440,
+    last_synced_at DATETIME,
+    next_sync_at DATETIME,
+    last_sync_status TEXT NOT NULL DEFAULT '',
+    last_sync_message TEXT NOT NULL DEFAULT '',
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_of_waf_ip_groups_type ON of_waf_ip_groups (type);
+CREATE INDEX IF NOT EXISTS idx_of_waf_ip_groups_next_sync_at ON of_waf_ip_groups (next_sync_at);
+
+CREATE TABLE IF NOT EXISTS of_waf_rule_group_bindings (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    rule_group_id INTEGER NOT NULL,
+    proxy_route_id INTEGER NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_waf_group_route ON of_waf_rule_group_bindings (rule_group_id, proxy_route_id);
+CREATE INDEX IF NOT EXISTS idx_of_waf_rule_group_bindings_proxy_route_id ON of_waf_rule_group_bindings (proxy_route_id);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_waf_rule_group_bindings;
+DROP TABLE IF EXISTS of_waf_ip_groups;
+DROP TABLE IF EXISTS of_waf_rule_groups;
@@ -0,0 +1,61 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_tls_certificates (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    cert_pem TEXT NOT NULL,
+    key_pem TEXT NOT NULL,
+    not_before DATETIME,
+    not_after DATETIME,
+    remark TEXT NOT NULL DEFAULT '',
+    provider TEXT NOT NULL DEFAULT 'upload',
+    acme_account_id INTEGER NOT NULL DEFAULT 0,
+    dns_account_id INTEGER NOT NULL DEFAULT 0,
+    key_algorithm TEXT NOT NULL DEFAULT '',
+    auto_renew INTEGER NOT NULL DEFAULT 0,
+    primary_domain TEXT NOT NULL DEFAULT '',
+    other_domains TEXT NOT NULL DEFAULT '',
+    disable_cname INTEGER NOT NULL DEFAULT 0,
+    skip_dns INTEGER NOT NULL DEFAULT 0,
+    dns1 TEXT NOT NULL DEFAULT '',
+    dns2 TEXT NOT NULL DEFAULT '',
+    apply_status TEXT NOT NULL DEFAULT 'ready',
+    apply_message TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_tls_certificates_name ON of_tls_certificates (name);
+
+CREATE TABLE IF NOT EXISTS of_managed_domains (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    domain TEXT NOT NULL,
+    cert_id INTEGER,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_managed_domains_domain ON of_managed_domains (domain);
+
+CREATE TABLE IF NOT EXISTS of_dns_accounts (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    type TEXT NOT NULL,
+    authorization TEXT NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS of_acme_accounts (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    email TEXT NOT NULL DEFAULT '',
+    url TEXT NOT NULL DEFAULT '',
+    private_key TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_managed_domains;
+DROP TABLE IF EXISTS of_tls_certificates;
+DROP TABLE IF EXISTS of_dns_accounts;
+DROP TABLE IF EXISTS of_acme_accounts;
@@ -0,0 +1,18 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_config_versions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    version TEXT NOT NULL,
+    snapshot_json TEXT NOT NULL,
+    main_config TEXT NOT NULL DEFAULT '',
+    rendered_config TEXT NOT NULL,
+    support_files_json TEXT NOT NULL DEFAULT '[]',
+    checksum TEXT NOT NULL,
+    is_active INTEGER NOT NULL DEFAULT 0,
+    created_by TEXT NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_config_versions_version ON of_config_versions (version);
+CREATE INDEX IF NOT EXISTS idx_of_config_versions_is_active ON of_config_versions (is_active);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_config_versions;
@@ -0,0 +1,53 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_pages_projects (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    description TEXT NOT NULL DEFAULT '',
+    enabled INTEGER NOT NULL DEFAULT 1,
+    spa_fallback_enabled INTEGER NOT NULL DEFAULT 0,
+    spa_fallback_path TEXT NOT NULL DEFAULT '/index.html',
+    api_proxy_enabled INTEGER NOT NULL DEFAULT 0,
+    api_proxy_path TEXT NOT NULL DEFAULT '',
+    api_proxy_pass TEXT NOT NULL DEFAULT '',
+    api_proxy_rewrite TEXT NOT NULL DEFAULT '',
+    active_deployment_id INTEGER,
+    root_dir TEXT NOT NULL DEFAULT '',
+    entry_file TEXT NOT NULL DEFAULT 'index.html',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_pages_projects_slug ON of_pages_projects (slug);
+CREATE INDEX IF NOT EXISTS idx_of_pages_projects_active_deployment_id ON of_pages_projects (active_deployment_id);
+
+CREATE TABLE IF NOT EXISTS of_pages_deployments (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    project_id INTEGER NOT NULL,
+    deployment_number INTEGER NOT NULL,
+    checksum TEXT NOT NULL,
+    status TEXT NOT NULL DEFAULT 'uploaded',
+    artifact_path TEXT NOT NULL,
+    file_count INTEGER NOT NULL DEFAULT 0,
+    total_size INTEGER NOT NULL DEFAULT 0,
+    created_by TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    activated_at DATETIME
+);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_project_id ON of_pages_deployments (project_id);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_checksum ON of_pages_deployments (checksum);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_status ON of_pages_deployments (status);
+
+CREATE TABLE IF NOT EXISTS of_pages_deployment_files (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    deployment_id INTEGER NOT NULL,
+    path TEXT NOT NULL,
+    size INTEGER NOT NULL DEFAULT 0,
+    checksum TEXT NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployment_files_deployment_id ON of_pages_deployment_files (deployment_id);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_pages_deployment_files;
+DROP TABLE IF EXISTS of_pages_deployments;
+DROP TABLE IF EXISTS of_pages_projects;
@@ -0,0 +1,136 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_node_system_profiles (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    hostname TEXT NOT NULL DEFAULT '',
+    os_name TEXT NOT NULL DEFAULT '',
+    os_version TEXT NOT NULL DEFAULT '',
+    kernel_version TEXT NOT NULL DEFAULT '',
+    architecture TEXT NOT NULL DEFAULT '',
+    cpu_model TEXT NOT NULL DEFAULT '',
+    cpu_cores INTEGER NOT NULL DEFAULT 0,
+    total_memory_bytes INTEGER NOT NULL DEFAULT 0,
+    total_disk_bytes INTEGER NOT NULL DEFAULT 0,
+    uptime_seconds INTEGER NOT NULL DEFAULT 0,
+    reported_at DATETIME NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_node_system_profiles_node_id ON of_node_system_profiles (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_system_profiles_reported_at ON of_node_system_profiles (reported_at);
+
+CREATE TABLE IF NOT EXISTS of_node_metric_snapshots (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    cpu_usage_percent REAL NOT NULL DEFAULT 0,
+    memory_used_bytes INTEGER NOT NULL DEFAULT 0,
+    memory_total_bytes INTEGER NOT NULL DEFAULT 0,
+    storage_used_bytes INTEGER NOT NULL DEFAULT 0,
+    storage_total_bytes INTEGER NOT NULL DEFAULT 0,
+    disk_read_bytes INTEGER NOT NULL DEFAULT 0,
+    disk_write_bytes INTEGER NOT NULL DEFAULT 0,
+    network_rx_bytes INTEGER NOT NULL DEFAULT 0,
+    network_tx_bytes INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_metric_snapshots_node_id ON of_node_metric_snapshots (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_metric_snapshots_captured_at ON of_node_metric_snapshots (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_request_reports (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    window_started_at DATETIME NOT NULL,
+    window_ended_at DATETIME NOT NULL,
+    request_count INTEGER NOT NULL DEFAULT 0,
+    error_count INTEGER NOT NULL DEFAULT 0,
+    unique_visitor_count INTEGER NOT NULL DEFAULT 0,
+    status_codes_json TEXT,
+    top_domains_json TEXT,
+    source_countries_json TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_node_id ON of_node_request_reports (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_window_started_at ON of_node_request_reports (window_started_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_window_ended_at ON of_node_request_reports (window_ended_at);
+
+CREATE TABLE IF NOT EXISTS of_node_health_events (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    event_type TEXT NOT NULL,
+    severity TEXT NOT NULL,
+    status TEXT NOT NULL,
+    message TEXT,
+    first_triggered_at DATETIME NOT NULL,
+    last_triggered_at DATETIME NOT NULL,
+    reported_at DATETIME NOT NULL,
+    resolved_at DATETIME,
+    metadata_json TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_node_id ON of_node_health_events (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_event_type ON of_node_health_events (event_type);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_status ON of_node_health_events (status);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_first_triggered_at ON of_node_health_events (first_triggered_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_last_triggered_at ON of_node_health_events (last_triggered_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_reported_at ON of_node_health_events (reported_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_health_events_resolved_at ON of_node_health_events (resolved_at);
+
+CREATE TABLE IF NOT EXISTS of_node_obs_openresty (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    openresty_rx_bytes INTEGER NOT NULL DEFAULT 0,
+    openresty_tx_bytes INTEGER NOT NULL DEFAULT 0,
+    openresty_connections INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_openresty_node_id ON of_node_obs_openresty (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_openresty_captured_at ON of_node_obs_openresty (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_obs_frps (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    frps_connections INTEGER NOT NULL DEFAULT 0,
+    frps_proxy_count INTEGER NOT NULL DEFAULT 0,
+    frps_client_count INTEGER NOT NULL DEFAULT 0,
+    frps_proxies TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frps_node_id ON of_node_obs_frps (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frps_captured_at ON of_node_obs_frps (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_access_logs (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    logged_at DATETIME NOT NULL,
+    remote_addr TEXT NOT NULL DEFAULT '',
+    region TEXT NOT NULL DEFAULT '',
+    host TEXT NOT NULL DEFAULT '',
+    path TEXT NOT NULL DEFAULT '',
+    status_code INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_node_id ON of_node_access_logs (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_logged_at ON of_node_access_logs (logged_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_remote_addr ON of_node_access_logs (remote_addr);
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_host ON of_node_access_logs (host);
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_status_code ON of_node_access_logs (status_code);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_node_access_logs;
+DROP TABLE IF EXISTS of_node_obs_frps;
+DROP TABLE IF EXISTS of_node_obs_openresty;
+DROP TABLE IF EXISTS of_node_health_events;
+DROP TABLE IF EXISTS of_node_request_reports;
+DROP TABLE IF EXISTS of_node_metric_snapshots;
+DROP TABLE IF EXISTS of_node_system_profiles;
@@ -0,0 +1,5 @@
+-- +goose Up
+CREATE INDEX IF NOT EXISTS idx_of_node_access_logs_node_id_logged_at ON of_node_access_logs (node_id, logged_at);
+
+-- +goose Down
+DROP INDEX IF EXISTS idx_of_node_access_logs_node_id_logged_at;
@@ -0,0 +1,15 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_node_obs_frpc (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    tunnel_status TEXT NOT NULL DEFAULT '',
+    connected_relays_count INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frpc_node_id ON of_node_obs_frpc (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frpc_captured_at ON of_node_obs_frpc (captured_at);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_node_obs_frpc;
@@ -0,0 +1,11 @@
+-- +goose Up
+INSERT INTO w_schedules (id, name, task_type, cron, payload, is_active, created_at, updated_at)
+VALUES
+    (101, 'OpenFlare SSL 自动续期', 'of_ssl_renew', '0 0 * * *', '{}', 1, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    (102, 'OpenFlare 可观测数据自动清理', 'of_database_auto_cleanup', '0 3 * * *', '{}', 1, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    (103, 'OpenFlare WAF IP 组同步', 'of_waf_ip_group_sync', '*/5 * * * *', '{}', 1, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+    (104, 'OpenFlare Uptime Kuma 同步', 'of_uptime_kuma_sync', '* * * * *', '{}', 1, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (id) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_schedules WHERE id IN (101, 102, 103, 104);
@@ -0,0 +1,10 @@
+-- +goose Up
+ALTER TABLE of_pages_deployments
+    ADD COLUMN upload_id INTEGER NOT NULL DEFAULT 0;
+
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_upload_id ON of_pages_deployments (upload_id);
+
+-- +goose Down
+DROP INDEX IF EXISTS idx_of_pages_deployments_upload_id;
+
+-- SQLite cannot drop columns without table rebuild; keep upload_id on rollback.
@@ -0,0 +1,31 @@
+-- +goose Up
+UPDATE w_system_configs
+SET value = 'OpenFlare', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'site_name' AND value = 'Wavelet';
+
+UPDATE w_system_configs
+SET value = 'Rain-kl/OpenFlare', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'update_upstream_repository' AND value = 'Rain-kl/Wavelet';
+
+UPDATE w_templates
+SET
+    subject = REPLACE(subject, 'Wavelet', 'OpenFlare'),
+    content = REPLACE(content, 'Wavelet', 'OpenFlare'),
+    updated_at = CURRENT_TIMESTAMP
+WHERE key IN ('login_email', 'register_email');
+
+-- +goose Down
+UPDATE w_system_configs
+SET value = 'Wavelet', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'site_name' AND value = 'OpenFlare';
+
+UPDATE w_system_configs
+SET value = 'Rain-kl/Wavelet', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'update_upstream_repository' AND value = 'Rain-kl/OpenFlare';
+
+UPDATE w_templates
+SET
+    subject = REPLACE(subject, 'OpenFlare', 'Wavelet'),
+    content = REPLACE(content, 'OpenFlare', 'Wavelet'),
+    updated_at = CURRENT_TIMESTAMP
+WHERE key IN ('login_email', 'register_email');
@@ -0,0 +1,17 @@
+-- +goose Up
+UPDATE w_system_configs
+SET value = 'false', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'registration_enabled' AND value = 'true';
+
+UPDATE w_system_configs
+SET value = 'false', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'password_register_enabled' AND value = 'true';
+
+-- +goose Down
+UPDATE w_system_configs
+SET value = 'true', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'registration_enabled' AND value = 'false';
+
+UPDATE w_system_configs
+SET value = 'true', updated_at = CURRENT_TIMESTAMP
+WHERE key = 'password_register_enabled' AND value = 'false';
@@ -0,0 +1,19 @@
+-- +goose Up
+DELETE FROM of_options
+WHERE key IN (
+    'GlobalApiRateLimitNum',
+    'GlobalApiRateLimitDuration',
+    'GlobalWebRateLimitNum',
+    'GlobalWebRateLimitDuration',
+    'CriticalRateLimitNum',
+    'CriticalRateLimitDuration'
+);
+
+-- +goose Down
+INSERT OR IGNORE INTO of_options (key, value) VALUES
+    ('GlobalApiRateLimitNum', '300'),
+    ('GlobalApiRateLimitDuration', '180'),
+    ('GlobalWebRateLimitNum', '300'),
+    ('GlobalWebRateLimitDuration', '180'),
+    ('CriticalRateLimitNum', '100'),
+    ('CriticalRateLimitDuration', '1200');
@@ -0,0 +1,28 @@
+-- +goose Up
+DROP INDEX IF EXISTS idx_of_node_access_logs_node_id_logged_at;
+DROP INDEX IF EXISTS idx_of_node_access_logs_status_code;
+DROP INDEX IF EXISTS idx_of_node_access_logs_host;
+DROP INDEX IF EXISTS idx_of_node_access_logs_remote_addr;
+DROP INDEX IF EXISTS idx_of_node_access_logs_logged_at;
+DROP INDEX IF EXISTS idx_of_node_access_logs_node_id;
+DROP TABLE IF EXISTS of_node_access_logs;
+
+-- +goose Down
+CREATE TABLE of_node_access_logs (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    logged_at DATETIME NOT NULL,
+    remote_addr TEXT NOT NULL DEFAULT '',
+    region TEXT NOT NULL DEFAULT '',
+    host TEXT NOT NULL DEFAULT '',
+    path TEXT NOT NULL DEFAULT '',
+    status_code INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX idx_of_node_access_logs_node_id ON of_node_access_logs (node_id);
+CREATE INDEX idx_of_node_access_logs_logged_at ON of_node_access_logs (logged_at);
+CREATE INDEX idx_of_node_access_logs_remote_addr ON of_node_access_logs (remote_addr);
+CREATE INDEX idx_of_node_access_logs_host ON of_node_access_logs (host);
+CREATE INDEX idx_of_node_access_logs_status_code ON of_node_access_logs (status_code);
+CREATE INDEX idx_of_node_access_logs_node_id_logged_at ON of_node_access_logs (node_id, logged_at);
@@ -0,0 +1,98 @@
+-- +goose Up
+DROP INDEX IF EXISTS idx_of_node_obs_frpc_captured_at;
+DROP INDEX IF EXISTS idx_of_node_obs_frpc_node_id;
+DROP TABLE IF EXISTS of_node_obs_frpc;
+
+DROP INDEX IF EXISTS idx_of_node_obs_frps_captured_at;
+DROP INDEX IF EXISTS idx_of_node_obs_frps_node_id;
+DROP TABLE IF EXISTS of_node_obs_frps;
+
+DROP INDEX IF EXISTS idx_of_node_obs_openresty_captured_at;
+DROP INDEX IF EXISTS idx_of_node_obs_openresty_node_id;
+DROP TABLE IF EXISTS of_node_obs_openresty;
+
+DROP INDEX IF EXISTS idx_of_node_request_reports_window_ended_at;
+DROP INDEX IF EXISTS idx_of_node_request_reports_window_started_at;
+DROP INDEX IF EXISTS idx_of_node_request_reports_node_id;
+DROP TABLE IF EXISTS of_node_request_reports;
+
+DROP INDEX IF EXISTS idx_of_node_metric_snapshots_captured_at;
+DROP INDEX IF EXISTS idx_of_node_metric_snapshots_node_id;
+DROP TABLE IF EXISTS of_node_metric_snapshots;
+
+-- +goose Down
+CREATE TABLE IF NOT EXISTS of_node_metric_snapshots (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    cpu_usage_percent REAL NOT NULL DEFAULT 0,
+    memory_used_bytes INTEGER NOT NULL DEFAULT 0,
+    memory_total_bytes INTEGER NOT NULL DEFAULT 0,
+    storage_used_bytes INTEGER NOT NULL DEFAULT 0,
+    storage_total_bytes INTEGER NOT NULL DEFAULT 0,
+    disk_read_bytes INTEGER NOT NULL DEFAULT 0,
+    disk_write_bytes INTEGER NOT NULL DEFAULT 0,
+    network_rx_bytes INTEGER NOT NULL DEFAULT 0,
+    network_tx_bytes INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_metric_snapshots_node_id ON of_node_metric_snapshots (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_metric_snapshots_captured_at ON of_node_metric_snapshots (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_request_reports (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    window_started_at DATETIME NOT NULL,
+    window_ended_at DATETIME NOT NULL,
+    request_count INTEGER NOT NULL DEFAULT 0,
+    error_count INTEGER NOT NULL DEFAULT 0,
+    unique_visitor_count INTEGER NOT NULL DEFAULT 0,
+    status_codes_json TEXT,
+    top_domains_json TEXT,
+    source_countries_json TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_node_id ON of_node_request_reports (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_window_started_at ON of_node_request_reports (window_started_at);
+CREATE INDEX IF NOT EXISTS idx_of_node_request_reports_window_ended_at ON of_node_request_reports (window_ended_at);
+
+CREATE TABLE IF NOT EXISTS of_node_obs_openresty (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    openresty_rx_bytes INTEGER NOT NULL DEFAULT 0,
+    openresty_tx_bytes INTEGER NOT NULL DEFAULT 0,
+    openresty_connections INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_openresty_node_id ON of_node_obs_openresty (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_openresty_captured_at ON of_node_obs_openresty (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_obs_frps (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    frps_connections INTEGER NOT NULL DEFAULT 0,
+    frps_proxy_count INTEGER NOT NULL DEFAULT 0,
+    frps_client_count INTEGER NOT NULL DEFAULT 0,
+    frps_proxies TEXT,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frps_node_id ON of_node_obs_frps (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frps_captured_at ON of_node_obs_frps (captured_at);
+
+CREATE TABLE IF NOT EXISTS of_node_obs_frpc (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_id TEXT NOT NULL,
+    captured_at DATETIME NOT NULL,
+    tunnel_status TEXT NOT NULL DEFAULT '',
+    connected_relays_count INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frpc_node_id ON of_node_obs_frpc (node_id);
+CREATE INDEX IF NOT EXISTS idx_of_node_obs_frpc_captured_at ON of_node_obs_frpc (captured_at);
@@ -0,0 +1,7 @@
+-- +goose Up
+-- Historical copy from legacy_* tables into of_* / w_* (formerly Go migration).
+-- Already-applied environments keep their data; new installs have no legacy_* sources.
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,5 @@
+-- +goose Up
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,21 @@
+-- +goose Up
+DELETE FROM of_options
+WHERE key IN (
+    'GitHubOAuthEnabled',
+    'GitHubClientId',
+    'GitHubClientSecret',
+    'WeChatAuthEnabled',
+    'WeChatServerAddress',
+    'WeChatServerToken',
+    'WeChatAccountQRCodeImageURL'
+);
+
+-- +goose Down
+INSERT OR IGNORE INTO of_options (key, value) VALUES
+    ('GitHubOAuthEnabled', 'false'),
+    ('GitHubClientId', ''),
+    ('GitHubClientSecret', ''),
+    ('WeChatAuthEnabled', 'false'),
+    ('WeChatServerAddress', ''),
+    ('WeChatServerToken', ''),
+    ('WeChatAccountQRCodeImageURL', '');
@@ -0,0 +1,5 @@
+-- +goose Up
+DELETE FROM of_options WHERE key = 'Notice';
+
+-- +goose Down
+INSERT OR IGNORE INTO of_options (key, value) VALUES ('Notice', '');
@@ -0,0 +1,9 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES 
+  ('relay_frps_web_ui_enabled', 'false', 'business', 0, '是否启用 FRPS 内置 Web 管理界面', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('relay_frps_web_ui_port', '17500', 'business', 0, 'FRPS 内置 Web 管理界面端口', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key IN ('relay_frps_web_ui_enabled', 'relay_frps_web_ui_port');
@@ -0,0 +1,291 @@
+-- +goose Up
+-- 将 of_options 配置迁移到 w_system_configs（仅迁移新配置，已存在的不重复）
+
+-- Agent 相关配置 (business, visibility=0)
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'agent_discovery_token', COALESCE(value, ''), 'business', 0, 'Agent 发现令牌'
+FROM of_options WHERE key = 'AgentDiscoveryToken';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'agent_heartbeat_interval', value, 'business', 0, 'Agent 心跳间隔（毫秒）'
+FROM of_options WHERE key = 'AgentHeartbeatInterval';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'agent_websocket_upgrade_enabled', value, 'business', 0, 'Agent WebSocket 升级开关'
+FROM of_options WHERE key = 'AgentWebsocketUpgradeEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'node_offline_threshold', value, 'business', 0, '节点离线阈值（毫秒）'
+FROM of_options WHERE key = 'NodeOfflineThreshold';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'agent_update_repo', value, 'business', 0, 'Agent 更新仓库'
+FROM of_options WHERE key = 'AgentUpdateRepo';
+
+-- 系统功能配置 (business, visibility=0)
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'geoip_provider', value, 'business', 0, 'GeoIP 服务商'
+FROM of_options WHERE key = 'GeoIPProvider';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'database_auto_cleanup_enabled', value, 'business', 0, '数据库自动清理开关'
+FROM of_options WHERE key = 'DatabaseAutoCleanupEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'database_auto_cleanup_retention_days', value, 'business', 0, '数据库保留天数'
+FROM of_options WHERE key = 'DatabaseAutoCleanupRetentionDays';
+
+-- UptimeKuma 集成配置 (business, visibility=0)
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_enabled', value, 'business', 0, 'UptimeKuma 集成开关'
+FROM of_options WHERE key = 'UptimeKumaEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_url', COALESCE(value, ''), 'business', 0, 'UptimeKuma URL'
+FROM of_options WHERE key = 'UptimeKumaUrl';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_username', COALESCE(value, ''), 'business', 0, 'UptimeKuma 用户名'
+FROM of_options WHERE key = 'UptimeKumaUsername';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_password', COALESCE(value, ''), 'business', 0, 'UptimeKuma 密码'
+FROM of_options WHERE key = 'UptimeKumaPassword';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_monitor_scope', value, 'business', 0, 'UptimeKuma 监控范围'
+FROM of_options WHERE key = 'UptimeKumaMonitorScope';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_selected_sites', COALESCE(value, ''), 'business', 0, 'UptimeKuma 选定站点'
+FROM of_options WHERE key = 'UptimeKumaSelectedSites';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_sync_interval', value, 'business', 0, 'UptimeKuma 同步间隔（分钟）'
+FROM of_options WHERE key = 'UptimeKumaSyncInterval';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_interval', value, 'business', 0, 'UptimeKuma 监控间隔（秒）'
+FROM of_options WHERE key = 'UptimeKumaInterval';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_retry', value, 'business', 0, 'UptimeKuma 重试次数'
+FROM of_options WHERE key = 'UptimeKumaRetry';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_retry_interval', value, 'business', 0, 'UptimeKuma 重试间隔（秒）'
+FROM of_options WHERE key = 'UptimeKumaRetryInterval';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'uptime_kuma_timeout', value, 'business', 0, 'UptimeKuma 超时（秒）'
+FROM of_options WHERE key = 'UptimeKumaTimeout';
+
+-- OpenResty 配置（全部 business 类型，visibility=0）
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_default_server_return_status', value, 'business', 0, '默认服务器返回状态码'
+FROM of_options WHERE key = 'OpenRestyDefaultServerReturnStatus';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_worker_processes', value, 'business', 0, 'Worker 进程数'
+FROM of_options WHERE key = 'OpenRestyWorkerProcesses';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_worker_connections', value, 'business', 0, 'Worker 连接数'
+FROM of_options WHERE key = 'OpenRestyWorkerConnections';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_worker_rlimit_nofile', value, 'business', 0, 'Worker 文件描述符限制'
+FROM of_options WHERE key = 'OpenRestyWorkerRlimitNofile';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_events_use', value, 'business', 0, '事件模型'
+FROM of_options WHERE key = 'OpenRestyEventsUse';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_events_multi_accept_enabled', value, 'business', 0, '多路接受开关'
+FROM of_options WHERE key = 'OpenRestyEventsMultiAcceptEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_keepalive_timeout', value, 'business', 0, 'Keepalive 超时（秒）'
+FROM of_options WHERE key = 'OpenRestyKeepaliveTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_keepalive_requests', value, 'business', 0, 'Keepalive 请求数'
+FROM of_options WHERE key = 'OpenRestyKeepaliveRequests';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_client_header_timeout', value, 'business', 0, '客户端头超时（秒）'
+FROM of_options WHERE key = 'OpenRestyClientHeaderTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_client_body_timeout', value, 'business', 0, '客户端体超时（秒）'
+FROM of_options WHERE key = 'OpenRestyClientBodyTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_client_max_body_size', value, 'business', 0, '客户端最大体大小'
+FROM of_options WHERE key = 'OpenRestyClientMaxBodySize';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_large_client_header_buffers', value, 'business', 0, '大客户端头缓冲区'
+FROM of_options WHERE key = 'OpenRestyLargeClientHeaderBuffers';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_send_timeout', value, 'business', 0, '发送超时（秒）'
+FROM of_options WHERE key = 'OpenRestySendTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_resolvers', COALESCE(value, ''), 'business', 0, 'DNS 解析器'
+FROM of_options WHERE key = 'OpenRestyResolvers';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_connect_timeout', value, 'business', 0, '代理连接超时（秒）'
+FROM of_options WHERE key = 'OpenRestyProxyConnectTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_send_timeout', value, 'business', 0, '代理发送超时（秒）'
+FROM of_options WHERE key = 'OpenRestyProxySendTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_read_timeout', value, 'business', 0, '代理读取超时（秒）'
+FROM of_options WHERE key = 'OpenRestyProxyReadTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_websocket_enabled', value, 'business', 0, 'WebSocket 支持开关'
+FROM of_options WHERE key = 'OpenRestyWebsocketEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_http3_enabled', value, 'business', 0, 'HTTP/3 支持开关'
+FROM of_options WHERE key = 'OpenRestyHTTP3Enabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_request_buffering_enabled', value, 'business', 0, '代理请求缓冲开关'
+FROM of_options WHERE key = 'OpenRestyProxyRequestBufferingEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_buffering_enabled', value, 'business', 0, '代理响应缓冲开关'
+FROM of_options WHERE key = 'OpenRestyProxyBufferingEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_buffers', value, 'business', 0, '代理缓冲区'
+FROM of_options WHERE key = 'OpenRestyProxyBuffers';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_buffer_size', value, 'business', 0, '代理缓冲区大小'
+FROM of_options WHERE key = 'OpenRestyProxyBufferSize';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_proxy_busy_buffers_size', value, 'business', 0, '代理繁忙缓冲区大小'
+FROM of_options WHERE key = 'OpenRestyProxyBusyBuffersSize';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_gzip_enabled', value, 'business', 0, 'Gzip 压缩开关'
+FROM of_options WHERE key = 'OpenRestyGzipEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_gzip_min_length', value, 'business', 0, 'Gzip 最小长度'
+FROM of_options WHERE key = 'OpenRestyGzipMinLength';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_gzip_comp_level', value, 'business', 0, 'Gzip 压缩级别'
+FROM of_options WHERE key = 'OpenRestyGzipCompLevel';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_enabled', value, 'business', 0, '缓存开关'
+FROM of_options WHERE key = 'OpenRestyCacheEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_path', COALESCE(value, ''), 'business', 0, '缓存路径'
+FROM of_options WHERE key = 'OpenRestyCachePath';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_levels', value, 'business', 0, '缓存层级'
+FROM of_options WHERE key = 'OpenRestyCacheLevels';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_inactive', value, 'business', 0, '缓存不活跃时间'
+FROM of_options WHERE key = 'OpenRestyCacheInactive';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_max_size', value, 'business', 0, '缓存最大大小'
+FROM of_options WHERE key = 'OpenRestyCacheMaxSize';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_key_template', value, 'business', 0, '缓存键模板'
+FROM of_options WHERE key = 'OpenRestyCacheKeyTemplate';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_lock_enabled', value, 'business', 0, '缓存锁开关'
+FROM of_options WHERE key = 'OpenRestyCacheLockEnabled';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_lock_timeout', value, 'business', 0, '缓存锁超时'
+FROM of_options WHERE key = 'OpenRestyCacheLockTimeout';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_cache_use_stale', value, 'business', 0, '缓存失效策略'
+FROM of_options WHERE key = 'OpenRestyCacheUseStale';
+
+INSERT OR REPLACE INTO w_system_configs (key, value, type, visibility, description)
+SELECT 'openresty_main_config_template', value, 'business', 0, '主配置模板'
+FROM of_options WHERE key = 'OpenRestyMainConfigTemplate';
+
+-- +goose Down
+-- 回滚时删除所有迁移的配置项
+DELETE FROM w_system_configs WHERE key IN (
+    'agent_discovery_token',
+    'agent_heartbeat_interval',
+    'agent_websocket_upgrade_enabled',
+    'node_offline_threshold',
+    'agent_update_repo',
+    'geoip_provider',
+    'database_auto_cleanup_enabled',
+    'database_auto_cleanup_retention_days',
+    'uptime_kuma_enabled',
+    'uptime_kuma_url',
+    'uptime_kuma_username',
+    'uptime_kuma_password',
+    'uptime_kuma_monitor_scope',
+    'uptime_kuma_selected_sites',
+    'uptime_kuma_sync_interval',
+    'uptime_kuma_interval',
+    'uptime_kuma_retry',
+    'uptime_kuma_retry_interval',
+    'uptime_kuma_timeout',
+    'openresty_default_server_return_status',
+    'openresty_worker_processes',
+    'openresty_worker_connections',
+    'openresty_worker_rlimit_nofile',
+    'openresty_events_use',
+    'openresty_events_multi_accept_enabled',
+    'openresty_keepalive_timeout',
+    'openresty_keepalive_requests',
+    'openresty_client_header_timeout',
+    'openresty_client_body_timeout',
+    'openresty_client_max_body_size',
+    'openresty_large_client_header_buffers',
+    'openresty_send_timeout',
+    'openresty_resolvers',
+    'openresty_proxy_connect_timeout',
+    'openresty_proxy_send_timeout',
+    'openresty_proxy_read_timeout',
+    'openresty_websocket_enabled',
+    'openresty_http3_enabled',
+    'openresty_proxy_request_buffering_enabled',
+    'openresty_proxy_buffering_enabled',
+    'openresty_proxy_buffers',
+    'openresty_proxy_buffer_size',
+    'openresty_proxy_busy_buffers_size',
+    'openresty_gzip_enabled',
+    'openresty_gzip_min_length',
+    'openresty_gzip_comp_level',
+    'openresty_cache_enabled',
+    'openresty_cache_path',
+    'openresty_cache_levels',
+    'openresty_cache_inactive',
+    'openresty_cache_max_size',
+    'openresty_cache_key_template',
+    'openresty_cache_lock_enabled',
+    'openresty_cache_lock_timeout',
+    'openresty_cache_use_stale',
+    'openresty_main_config_template'
+);
@@ -0,0 +1,10 @@
+-- +goose Up
+-- of_options 配置已于 202606220004 迁移至 w_system_configs，删除遗留表。
+DROP TABLE IF EXISTS of_options;
+
+-- +goose Down
+-- 回滚时重建空表结构（数据无法恢复，迁移来源已为 w_system_configs）。
+CREATE TABLE IF NOT EXISTS of_options (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL DEFAULT ''
+);
@@ -0,0 +1,46 @@
+-- +goose Up
+-- SQLite table reconstruction to set version as primary key and drop id column
+
+-- 1. 创建临时新表
+CREATE TABLE of_config_versions_new (
+    version VARCHAR(32) PRIMARY KEY,
+    snapshot_json TEXT NOT NULL,
+    main_config TEXT NOT NULL DEFAULT '',
+    rendered_config TEXT NOT NULL,
+    support_files_json TEXT NOT NULL DEFAULT '[]',
+    checksum VARCHAR(64) NOT NULL,
+    is_active BOOLEAN NOT NULL DEFAULT FALSE,
+    created_by VARCHAR(64) NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- 2. 拷贝数据
+INSERT INTO of_config_versions_new (version, snapshot_json, main_config, rendered_config, support_files_json, checksum, is_active, created_by, created_at)
+SELECT version, snapshot_json, main_config, rendered_config, support_files_json, checksum, is_active, created_by, created_at
+FROM of_config_versions;
+
+-- 3. 删除旧表
+DROP TABLE of_config_versions;
+
+-- 4. 重命名新表
+ALTER TABLE of_config_versions_new RENAME TO of_config_versions;
+
+-- 5. 重建索引（is_active 索引）
+CREATE INDEX IF NOT EXISTS idx_of_config_versions_is_active ON of_config_versions (is_active);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_config_versions;
+CREATE TABLE of_config_versions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    version VARCHAR(32) NOT NULL,
+    snapshot_json TEXT NOT NULL,
+    main_config TEXT NOT NULL DEFAULT '',
+    rendered_config TEXT NOT NULL,
+    support_files_json TEXT NOT NULL DEFAULT '[]',
+    checksum VARCHAR(64) NOT NULL,
+    is_active BOOLEAN NOT NULL DEFAULT FALSE,
+    created_by VARCHAR(64) NOT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_config_versions_version ON of_config_versions (version);
+CREATE INDEX IF NOT EXISTS idx_of_config_versions_is_active ON of_config_versions (is_active);
@@ -0,0 +1,5 @@
+-- +goose Up
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,28 @@
+-- +goose Up
+CREATE TABLE IF NOT EXISTS of_zones (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    domain TEXT NOT NULL,
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_zones_domain ON of_zones (domain);
+
+CREATE TABLE IF NOT EXISTS of_zone_domains (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    zone_id INTEGER NOT NULL,
+    proxy_route_id INTEGER,
+    domain TEXT NOT NULL,
+    cert_id INTEGER,
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_zone_domains_domain ON of_zone_domains (domain);
+CREATE INDEX IF NOT EXISTS idx_of_zone_domains_zone_id ON of_zone_domains (zone_id);
+CREATE INDEX IF NOT EXISTS idx_of_zone_domains_proxy_route_id ON of_zone_domains (proxy_route_id);
+CREATE INDEX IF NOT EXISTS idx_of_zone_domains_cert_id ON of_zone_domains (cert_id);
+
+-- +goose Down
+DROP TABLE IF EXISTS of_zone_domains;
+DROP TABLE IF EXISTS of_zones;
@@ -0,0 +1,8 @@
+-- +goose Up
+-- Marker: Zone 域名从旧路由列 / of_managed_domains 的导入由 migrator.Migrate()
+-- 在全部 goose SQL 应用后自动执行（publicsuffix 根域解析无法用纯 SQL 正确完成）。
+-- 本文件仅占位版本号，保证升级链路有序：建表 → 导入 → 删旧列。
+SELECT 1;
+
+-- +goose Down
+SELECT 1;
@@ -0,0 +1,138 @@
+-- +goose Up
+-- 第二阶段：重建 of_proxy_routes（去掉冗余域名/证书列）并删除 of_managed_domains。
+
+PRAGMA foreign_keys=OFF;
+
+CREATE TABLE of_proxy_routes_new (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    site_name TEXT NOT NULL DEFAULT '',
+    origin_id INTEGER,
+    origin_url TEXT NOT NULL,
+    origin_host TEXT NOT NULL DEFAULT '',
+    upstreams TEXT NOT NULL DEFAULT '[]',
+    enabled INTEGER NOT NULL DEFAULT 1,
+    enable_https INTEGER NOT NULL DEFAULT 0,
+    redirect_http INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_server INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_ip INTEGER NOT NULL DEFAULT 0,
+    limit_rate TEXT NOT NULL DEFAULT '',
+    cache_enabled INTEGER NOT NULL DEFAULT 0,
+    cache_policy TEXT NOT NULL DEFAULT '',
+    cache_rules TEXT NOT NULL DEFAULT '[]',
+    custom_headers TEXT NOT NULL DEFAULT '[]',
+    basic_auth_enabled INTEGER NOT NULL DEFAULT 0,
+    basic_auth_username TEXT NOT NULL DEFAULT '',
+    basic_auth_password TEXT NOT NULL DEFAULT '',
+    remark TEXT NOT NULL DEFAULT '',
+    upstream_type TEXT NOT NULL DEFAULT 'direct',
+    tunnel_node_id INTEGER,
+    tunnel_target_addr TEXT NOT NULL DEFAULT '',
+    tunnel_target_protocol TEXT NOT NULL DEFAULT '',
+    pages_project_id INTEGER,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+INSERT INTO of_proxy_routes_new (
+    id, site_name, origin_id, origin_url, origin_host, upstreams, enabled,
+    enable_https, redirect_http, limit_conn_per_server, limit_conn_per_ip, limit_rate,
+    cache_enabled, cache_policy, cache_rules, custom_headers, basic_auth_enabled,
+    basic_auth_username, basic_auth_password, remark, upstream_type, tunnel_node_id,
+    tunnel_target_addr, tunnel_target_protocol, pages_project_id, created_at, updated_at
+)
+SELECT
+    id, site_name, origin_id, origin_url, origin_host, upstreams, enabled,
+    enable_https, redirect_http, limit_conn_per_server, limit_conn_per_ip, limit_rate,
+    cache_enabled, cache_policy, cache_rules, custom_headers, basic_auth_enabled,
+    basic_auth_username, basic_auth_password, remark, upstream_type, tunnel_node_id,
+    tunnel_target_addr, tunnel_target_protocol, pages_project_id, created_at, updated_at
+FROM of_proxy_routes;
+
+DROP TABLE of_proxy_routes;
+ALTER TABLE of_proxy_routes_new RENAME TO of_proxy_routes;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_proxy_routes_site_name ON of_proxy_routes (site_name);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_origin_id ON of_proxy_routes (origin_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_tunnel_node_id ON of_proxy_routes (tunnel_node_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_pages_project_id ON of_proxy_routes (pages_project_id);
+
+DROP TABLE IF EXISTS of_managed_domains;
+
+PRAGMA foreign_keys=ON;
+
+-- +goose Down
+-- 仅恢复开发库结构，不回填历史域名/证书数据。
+
+PRAGMA foreign_keys=OFF;
+
+CREATE TABLE IF NOT EXISTS of_managed_domains (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    domain TEXT NOT NULL,
+    cert_id INTEGER,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    remark TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_managed_domains_domain ON of_managed_domains (domain);
+
+CREATE TABLE of_proxy_routes_old (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    site_name TEXT NOT NULL DEFAULT '',
+    domain TEXT NOT NULL DEFAULT '',
+    domains TEXT NOT NULL DEFAULT '[]',
+    origin_id INTEGER,
+    origin_url TEXT NOT NULL,
+    origin_host TEXT NOT NULL DEFAULT '',
+    upstreams TEXT NOT NULL DEFAULT '[]',
+    enabled INTEGER NOT NULL DEFAULT 1,
+    enable_https INTEGER NOT NULL DEFAULT 0,
+    cert_id INTEGER,
+    cert_ids TEXT NOT NULL DEFAULT '[]',
+    domain_cert_ids TEXT NOT NULL DEFAULT '[]',
+    redirect_http INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_server INTEGER NOT NULL DEFAULT 0,
+    limit_conn_per_ip INTEGER NOT NULL DEFAULT 0,
+    limit_rate TEXT NOT NULL DEFAULT '',
+    cache_enabled INTEGER NOT NULL DEFAULT 0,
+    cache_policy TEXT NOT NULL DEFAULT '',
+    cache_rules TEXT NOT NULL DEFAULT '[]',
+    custom_headers TEXT NOT NULL DEFAULT '[]',
+    basic_auth_enabled INTEGER NOT NULL DEFAULT 0,
+    basic_auth_username TEXT NOT NULL DEFAULT '',
+    basic_auth_password TEXT NOT NULL DEFAULT '',
+    remark TEXT NOT NULL DEFAULT '',
+    upstream_type TEXT NOT NULL DEFAULT 'direct',
+    tunnel_node_id INTEGER,
+    tunnel_target_addr TEXT NOT NULL DEFAULT '',
+    tunnel_target_protocol TEXT NOT NULL DEFAULT '',
+    pages_project_id INTEGER,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+INSERT INTO of_proxy_routes_old (
+    id, site_name, domain, domains, origin_id, origin_url, origin_host, upstreams, enabled,
+    enable_https, cert_id, cert_ids, domain_cert_ids, redirect_http, limit_conn_per_server,
+    limit_conn_per_ip, limit_rate, cache_enabled, cache_policy, cache_rules, custom_headers,
+    basic_auth_enabled, basic_auth_username, basic_auth_password, remark, upstream_type,
+    tunnel_node_id, tunnel_target_addr, tunnel_target_protocol, pages_project_id, created_at, updated_at
+)
+SELECT
+    id, site_name, '', '[]', origin_id, origin_url, origin_host, upstreams, enabled,
+    enable_https, NULL, '[]', '[]', redirect_http, limit_conn_per_server,
+    limit_conn_per_ip, limit_rate, cache_enabled, cache_policy, cache_rules, custom_headers,
+    basic_auth_enabled, basic_auth_username, basic_auth_password, remark, upstream_type,
+    tunnel_node_id, tunnel_target_addr, tunnel_target_protocol, pages_project_id, created_at, updated_at
+FROM of_proxy_routes;
+
+DROP TABLE of_proxy_routes;
+ALTER TABLE of_proxy_routes_old RENAME TO of_proxy_routes;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_proxy_routes_domain ON of_proxy_routes (domain);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_proxy_routes_site_name ON of_proxy_routes (site_name);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_origin_id ON of_proxy_routes (origin_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_tunnel_node_id ON of_proxy_routes (tunnel_node_id);
+CREATE INDEX IF NOT EXISTS idx_of_proxy_routes_pages_project_id ON of_proxy_routes (pages_project_id);
+
+PRAGMA foreign_keys=ON;
@@ -0,0 +1,17 @@
+-- +goose Up
+-- 移除业务实体上未再使用的备注列（证书与源站备注保留）。
+-- SQLite 3.35+ 支持 DROP COLUMN；goose 仅在列存在的既有库上执行。
+
+ALTER TABLE of_zones DROP COLUMN remark;
+ALTER TABLE of_zone_domains DROP COLUMN remark;
+ALTER TABLE of_proxy_routes DROP COLUMN remark;
+ALTER TABLE of_waf_rule_groups DROP COLUMN remark;
+ALTER TABLE of_waf_ip_groups DROP COLUMN remark;
+
+-- +goose Down
+
+ALTER TABLE of_zones ADD COLUMN remark TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_zone_domains ADD COLUMN remark TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_proxy_routes ADD COLUMN remark TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_waf_rule_groups ADD COLUMN remark TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_waf_ip_groups ADD COLUMN remark TEXT NOT NULL DEFAULT '';
@@ -0,0 +1,10 @@
+-- +goose Up
+ALTER TABLE of_waf_rule_groups
+    ADD COLUMN graph TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_waf_rule_groups ADD COLUMN revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE of_waf_rule_group_bindings ADD COLUMN sequence INTEGER NOT NULL DEFAULT 0;
+
+-- +goose Down
+ALTER TABLE of_waf_rule_group_bindings DROP COLUMN sequence;
+ALTER TABLE of_waf_rule_groups DROP COLUMN revision;
+ALTER TABLE of_waf_rule_groups DROP COLUMN graph;
@@ -0,0 +1,16 @@
+-- +goose Up
+UPDATE of_waf_rule_groups
+SET graph = '{"schema_version":1,"nodes":[{"id":"start","type":"start","position":{"x":0,"y":0},"config":{}},{"id":"allow","type":"allow","position":{"x":320,"y":0},"config":{}}],"edges":[{"id":"start-allow","source":"start","source_handle":"next","target":"allow"}]}',
+    revision = 1;
+
+UPDATE of_waf_rule_group_bindings
+SET sequence = (
+    SELECT COUNT(*)
+    FROM of_waf_rule_group_bindings AS preceding
+    WHERE preceding.proxy_route_id = of_waf_rule_group_bindings.proxy_route_id
+      AND preceding.id < of_waf_rule_group_bindings.id
+);
+
+-- +goose Down
+UPDATE of_waf_rule_group_bindings SET sequence = 0;
+UPDATE of_waf_rule_groups SET revision = 1;
@@ -0,0 +1,27 @@
+-- +goose Up
+ALTER TABLE of_waf_rule_groups DROP COLUMN block_status_code;
+ALTER TABLE of_waf_rule_groups DROP COLUMN block_response_body;
+ALTER TABLE of_waf_rule_groups DROP COLUMN ip_whitelist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN ip_blacklist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN ip_whitelist_groups;
+ALTER TABLE of_waf_rule_groups DROP COLUMN ip_blacklist_groups;
+ALTER TABLE of_waf_rule_groups DROP COLUMN country_whitelist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN country_blacklist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN region_whitelist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN region_blacklist;
+ALTER TABLE of_waf_rule_groups DROP COLUMN pow_enabled;
+ALTER TABLE of_waf_rule_groups DROP COLUMN pow_config;
+
+-- +goose Down
+ALTER TABLE of_waf_rule_groups ADD COLUMN block_status_code INTEGER NOT NULL DEFAULT 418;
+ALTER TABLE of_waf_rule_groups ADD COLUMN block_response_body TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_waf_rule_groups ADD COLUMN ip_whitelist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN ip_blacklist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN ip_whitelist_groups TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN ip_blacklist_groups TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN country_whitelist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN country_blacklist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN region_whitelist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN region_blacklist TEXT NOT NULL DEFAULT '[]';
+ALTER TABLE of_waf_rule_groups ADD COLUMN pow_enabled BOOLEAN NOT NULL DEFAULT 0;
+ALTER TABLE of_waf_rule_groups ADD COLUMN pow_config TEXT NOT NULL DEFAULT '{}';
@@ -0,0 +1,9 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES
+  ('pages_max_package_size_mb', '100', 'business', 0, 'Pages 部署包上传大小上限（MiB）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('pages_max_history_count', '20', 'business', 0, 'Pages 每个项目最大历史部署保留数（0 表示不限制）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key IN ('pages_max_package_size_mb', 'pages_max_history_count');
@@ -0,0 +1,27 @@
+-- +goose Up
+-- 将仍为历史默认值的心跳/离线配置升级为新默认：心跳 3s、离线 60s。
+-- 已由管理员改成其他值的配置不受影响。
+UPDATE w_system_configs
+SET value = '3000',
+    updated_at = CURRENT_TIMESTAMP
+WHERE key = 'agent_heartbeat_interval'
+  AND value = '10000';
+
+UPDATE w_system_configs
+SET value = '60000',
+    updated_at = CURRENT_TIMESTAMP
+WHERE key = 'node_offline_threshold'
+  AND value = '120000';
+
+-- +goose Down
+UPDATE w_system_configs
+SET value = '10000',
+    updated_at = CURRENT_TIMESTAMP
+WHERE key = 'agent_heartbeat_interval'
+  AND value = '3000';
+
+UPDATE w_system_configs
+SET value = '120000',
+    updated_at = CURRENT_TIMESTAMP
+WHERE key = 'node_offline_threshold'
+  AND value = '60000';
@@ -0,0 +1,14 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES
+  ('openresty_default_limit_conn_per_server', '0', 'business', 0, '默认站点并发连接上限（0 关闭）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('openresty_default_limit_conn_per_ip', '0', 'business', 0, '默认单 IP 并发连接上限（0 关闭）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP),
+  ('openresty_default_limit_rate', '', 'business', 0, '默认单请求带宽限速（空关闭）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+-- +goose Down
+DELETE FROM w_system_configs WHERE key IN (
+  'openresty_default_limit_conn_per_server',
+  'openresty_default_limit_conn_per_ip',
+  'openresty_default_limit_rate'
+);
@@ -0,0 +1,151 @@
+-- +goose Up
+ALTER TABLE of_pages_projects
+    ADD COLUMN content_config_version INTEGER NOT NULL DEFAULT 0;
+
+ALTER TABLE of_pages_deployments
+    ADD COLUMN source_type TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_pages_deployments
+    ADD COLUMN source_identity TEXT;
+ALTER TABLE of_pages_deployments
+    ADD COLUMN source_revision TEXT;
+ALTER TABLE of_pages_deployments
+    ADD COLUMN source_label TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_pages_deployments
+    ADD COLUMN source_meta TEXT NOT NULL DEFAULT '';
+ALTER TABLE of_pages_deployments
+    ADD COLUMN trigger_type TEXT NOT NULL DEFAULT '';
+
+UPDATE of_pages_deployments
+SET source_type = 'manual_upload',
+    trigger_type = 'manual_upload';
+
+CREATE TABLE IF NOT EXISTS of_pages_project_sources (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    project_id INTEGER NOT NULL,
+    source_type TEXT NOT NULL DEFAULT '',
+    remote_url TEXT NOT NULL DEFAULT '',
+    allow_insecure INTEGER NOT NULL DEFAULT 0,
+    github_repository TEXT NOT NULL DEFAULT '',
+    release_selector TEXT NOT NULL DEFAULT '',
+    release_tag TEXT NOT NULL DEFAULT '',
+    asset_name TEXT NOT NULL DEFAULT '',
+    auto_update_enabled INTEGER NOT NULL DEFAULT 0,
+    check_interval_minutes INTEGER NOT NULL DEFAULT 0,
+    config_version INTEGER NOT NULL DEFAULT 0,
+    source_identity TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_pages_project_sources_project_id
+    ON of_pages_project_sources (project_id);
+
+CREATE TABLE IF NOT EXISTS of_pages_project_source_runtime (
+    source_id INTEGER PRIMARY KEY,
+    etag TEXT NOT NULL DEFAULT '',
+    last_seen_revision TEXT NOT NULL DEFAULT '',
+    last_seen_detail TEXT NOT NULL DEFAULT '',
+    last_applied_revision TEXT NOT NULL DEFAULT '',
+    last_applied_detail TEXT NOT NULL DEFAULT '',
+    sync_status TEXT NOT NULL DEFAULT '',
+    last_error TEXT NOT NULL DEFAULT '',
+    last_checked_at DATETIME,
+    last_synced_at DATETIME,
+    next_check_at DATETIME,
+    lease_expires_at DATETIME,
+    lease_token TEXT NOT NULL DEFAULT '',
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_of_pages_project_source_runtime_next_check_at
+    ON of_pages_project_source_runtime (next_check_at);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_pages_deployments_project_number
+    ON of_pages_deployments (project_id, deployment_number);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_pages_deployments_source_revision
+    ON of_pages_deployments (project_id, source_identity, source_revision)
+    WHERE source_identity IS NOT NULL AND source_revision IS NOT NULL;
+
+-- +goose Down
+DROP INDEX IF EXISTS idx_of_pages_deployments_source_revision;
+DROP INDEX IF EXISTS idx_of_pages_deployments_project_number;
+DROP INDEX IF EXISTS idx_of_pages_project_source_runtime_next_check_at;
+DROP TABLE IF EXISTS of_pages_project_source_runtime;
+DROP INDEX IF EXISTS idx_of_pages_project_sources_project_id;
+DROP TABLE IF EXISTS of_pages_project_sources;
+
+-- SQLite 的 Down 必须重建受影响表，完整移除新增列并保留原有数据与索引。
+CREATE TABLE of_pages_deployments_before_source (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    project_id INTEGER NOT NULL,
+    deployment_number INTEGER NOT NULL,
+    checksum TEXT NOT NULL,
+    status TEXT NOT NULL DEFAULT 'uploaded',
+    upload_id INTEGER NOT NULL DEFAULT 0,
+    artifact_path TEXT NOT NULL,
+    file_count INTEGER NOT NULL DEFAULT 0,
+    total_size INTEGER NOT NULL DEFAULT 0,
+    created_by TEXT NOT NULL DEFAULT '',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    activated_at DATETIME
+);
+
+INSERT INTO of_pages_deployments_before_source (
+    id, project_id, deployment_number, checksum, status, upload_id, artifact_path,
+    file_count, total_size, created_by, created_at, activated_at
+)
+SELECT
+    id, project_id, deployment_number, checksum, status, upload_id, artifact_path,
+    file_count, total_size, created_by, created_at, activated_at
+FROM of_pages_deployments;
+
+DROP TABLE of_pages_deployments;
+ALTER TABLE of_pages_deployments_before_source RENAME TO of_pages_deployments;
+
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_project_id
+    ON of_pages_deployments (project_id);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_checksum
+    ON of_pages_deployments (checksum);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_status
+    ON of_pages_deployments (status);
+CREATE INDEX IF NOT EXISTS idx_of_pages_deployments_upload_id
+    ON of_pages_deployments (upload_id);
+
+CREATE TABLE of_pages_projects_before_source (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    description TEXT NOT NULL DEFAULT '',
+    enabled INTEGER NOT NULL DEFAULT 1,
+    spa_fallback_enabled INTEGER NOT NULL DEFAULT 0,
+    spa_fallback_path TEXT NOT NULL DEFAULT '/index.html',
+    api_proxy_enabled INTEGER NOT NULL DEFAULT 0,
+    api_proxy_path TEXT NOT NULL DEFAULT '',
+    api_proxy_pass TEXT NOT NULL DEFAULT '',
+    api_proxy_rewrite TEXT NOT NULL DEFAULT '',
+    active_deployment_id INTEGER,
+    root_dir TEXT NOT NULL DEFAULT '',
+    entry_file TEXT NOT NULL DEFAULT 'index.html',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+INSERT INTO of_pages_projects_before_source (
+    id, name, slug, description, enabled, spa_fallback_enabled, spa_fallback_path,
+    api_proxy_enabled, api_proxy_path, api_proxy_pass, api_proxy_rewrite,
+    active_deployment_id, root_dir, entry_file, created_at, updated_at
+)
+SELECT
+    id, name, slug, description, enabled, spa_fallback_enabled, spa_fallback_path,
+    api_proxy_enabled, api_proxy_path, api_proxy_pass, api_proxy_rewrite,
+    active_deployment_id, root_dir, entry_file, created_at, updated_at
+FROM of_pages_projects;
+
+DROP TABLE of_pages_projects;
+ALTER TABLE of_pages_projects_before_source RENAME TO of_pages_projects;
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_of_pages_projects_slug
+    ON of_pages_projects (slug);
+CREATE INDEX IF NOT EXISTS idx_of_pages_projects_active_deployment_id
+    ON of_pages_projects (active_deployment_id);
@@ -0,0 +1,21 @@
+-- +goose Up
+INSERT INTO w_schedules (name, task_type, cron, payload, is_active, created_at, updated_at)
+SELECT
+    'OpenFlare Pages 部署源扫描',
+    'of_pages_source_scan',
+    '0 0 * * *',
+    '{}',
+    1,
+    CURRENT_TIMESTAMP,
+    CURRENT_TIMESTAMP
+WHERE NOT EXISTS (
+    SELECT 1 FROM w_schedules WHERE task_type = 'of_pages_source_scan'
+);
+
+-- +goose Down
+DELETE FROM w_schedules
+WHERE task_type = 'of_pages_source_scan'
+  AND name = 'OpenFlare Pages 部署源扫描'
+  AND cron = '0 0 * * *'
+  AND payload = '{}'
+  AND is_active = 1;
@@ -0,0 +1,12 @@
+-- +goose Up
+INSERT INTO w_system_configs (key, value, type, visibility, description, created_at, updated_at)
+VALUES
+  ('openresty_default_limit_req_per_ip', '', 'business', 0, '默认单 IP 请求频率限制（空关闭，例如 10r/s、100r/m）', CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+ON CONFLICT (key) DO NOTHING;
+
+ALTER TABLE of_proxy_routes ADD COLUMN limit_req_per_ip VARCHAR(32) NOT NULL DEFAULT '';
+
+-- +goose Down
+ALTER TABLE of_proxy_routes DROP COLUMN limit_req_per_ip;
+
+DELETE FROM w_system_configs WHERE key = 'openresty_default_limit_req_per_ip';