v1

backend/alembic/env.py

@@ -0,0 +1,74 @@
+import asyncio
+import os
+import sys
+from logging.config import fileConfig
+
+from sqlalchemy import pool
+from sqlalchemy.engine import Connection
+from sqlalchemy.ext.asyncio import async_engine_from_config
+
+from alembic import context
+
+# Make sure the app package is importable
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+
+# Import app settings and models so autogenerate can see them
+from app.config import settings
+from app.models.base import Base
+
+# Import all models to register them with Base.metadata
+import app.models  # noqa: F401
+
+# Alembic Config object — gives access to alembic.ini values
+config = context.config
+
+# Override sqlalchemy.url from our app settings
+config.set_main_option("sqlalchemy.url", settings.DATABASE_URL)
+
+# Interpret the config file for Python logging
+if config.config_file_name is not None:
+    fileConfig(config.config_file_name)
+
+target_metadata = Base.metadata
+
+
+def run_migrations_offline() -> None:
+    """Run migrations in 'offline' mode (no DB connection required)."""
+    url = config.get_main_option("sqlalchemy.url")
+    context.configure(
+        url=url,
+        target_metadata=target_metadata,
+        literal_binds=True,
+        dialect_opts={"paramstyle": "named"},
+    )
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+def do_run_migrations(connection: Connection) -> None:
+    context.configure(connection=connection, target_metadata=target_metadata)
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+async def run_async_migrations() -> None:
+    """Run migrations using an async engine."""
+    connectable = async_engine_from_config(
+        config.get_section(config.config_ini_section, {}),
+        prefix="sqlalchemy.",
+        poolclass=pool.NullPool,
+    )
+    async with connectable.connect() as connection:
+        await connection.run_sync(do_run_migrations)
+    await connectable.dispose()
+
+
+def run_migrations_online() -> None:
+    """Run migrations in 'online' mode with an async engine."""
+    asyncio.run(run_async_migrations())
+
+
+if context.is_offline_mode():
+    run_migrations_offline()
+else:
+    run_migrations_online()

backend/alembic/script.py.mako

@@ -0,0 +1,26 @@
+"""${message}
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+# revision identifiers, used by Alembic.
+revision: str = ${repr(up_revision)}
+down_revision: Union[str, None] = ${repr(down_revision)}
+branch_labels: Union[str, Sequence[str], None] = ${repr(branch_labels)}
+depends_on: Union[str, Sequence[str], None] = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    ${downgrades if downgrades else "pass"}

backend/alembic/versions/3419d4e56131_enrich_analytics_events.py

@@ -0,0 +1,40 @@
+"""enrich analytics events
+
+Revision ID: 3419d4e56131
+Revises: 4f2e3f915e09
+Create Date: 2026-03-29 23:29:47.836569
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = '3419d4e56131'
+down_revision: Union[str, None] = '4f2e3f915e09'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.add_column('analytics_events', sa.Column('ip_partial', sa.String(length=24), nullable=True))
+    op.add_column('analytics_events', sa.Column('user_agent', sa.String(length=512), nullable=True))
+    op.add_column('analytics_events', sa.Column('browser', sa.String(length=100), nullable=True))
+    op.add_column('analytics_events', sa.Column('os_name', sa.String(length=100), nullable=True))
+    op.add_column('analytics_events', sa.Column('country', sa.String(length=100), nullable=True))
+    op.add_column('analytics_events', sa.Column('city', sa.String(length=100), nullable=True))
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_column('analytics_events', 'city')
+    op.drop_column('analytics_events', 'country')
+    op.drop_column('analytics_events', 'os_name')
+    op.drop_column('analytics_events', 'browser')
+    op.drop_column('analytics_events', 'user_agent')
+    op.drop_column('analytics_events', 'ip_partial')
+    # ### end Alembic commands ###

backend/alembic/versions/4f2e3f915e09_add_analytics_events.py

@@ -0,0 +1,48 @@
+"""add analytics events
+
+Revision ID: 4f2e3f915e09
+Revises: 5881f111a194
+Create Date: 2026-03-29 23:22:22.884950
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = '4f2e3f915e09'
+down_revision: Union[str, None] = '5881f111a194'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.create_table('analytics_events',
+    sa.Column('event_type', sa.String(length=64), nullable=False),
+    sa.Column('page', sa.String(length=255), nullable=False),
+    sa.Column('element', sa.String(length=255), nullable=True),
+    sa.Column('metadata', sa.JSON(), nullable=True),
+    sa.Column('session_id', sa.String(length=64), nullable=False),
+    sa.Column('ip_hash', sa.String(length=64), nullable=True),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.PrimaryKeyConstraint('id')
+    )
+    op.create_index(op.f('ix_analytics_events_created_at'), 'analytics_events', ['created_at'], unique=False)
+    op.create_index(op.f('ix_analytics_events_event_type'), 'analytics_events', ['event_type'], unique=False)
+    op.create_index(op.f('ix_analytics_events_page'), 'analytics_events', ['page'], unique=False)
+    op.create_index(op.f('ix_analytics_events_session_id'), 'analytics_events', ['session_id'], unique=False)
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_index(op.f('ix_analytics_events_session_id'), table_name='analytics_events')
+    op.drop_index(op.f('ix_analytics_events_page'), table_name='analytics_events')
+    op.drop_index(op.f('ix_analytics_events_event_type'), table_name='analytics_events')
+    op.drop_index(op.f('ix_analytics_events_created_at'), table_name='analytics_events')
+    op.drop_table('analytics_events')
+    # ### end Alembic commands ###

backend/alembic/versions/5881f111a194_initial.py

@@ -0,0 +1,107 @@
+"""initial
+
+Revision ID: 5881f111a194
+Revises: 
+Create Date: 2026-03-29 17:31:46.624084
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+from sqlalchemy.dialects import postgresql
+
+# revision identifiers, used by Alembic.
+revision: str = '5881f111a194'
+down_revision: Union[str, None] = None
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.create_table('blog_posts',
+    sa.Column('title', sa.String(length=255), nullable=False),
+    sa.Column('slug', sa.String(length=255), nullable=False),
+    sa.Column('excerpt', sa.Text(), nullable=True),
+    sa.Column('body', sa.Text(), nullable=False),
+    sa.Column('author', sa.String(length=255), nullable=True),
+    sa.Column('featured_image_url', sa.String(length=2048), nullable=True),
+    sa.Column('tags', sa.JSON(), nullable=False),
+    sa.Column('published', sa.Boolean(), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.PrimaryKeyConstraint('id'),
+    sa.UniqueConstraint('slug')
+    )
+    op.create_index('ix_blog_posts_slug', 'blog_posts', ['slug'], unique=False)
+    op.create_table('content_sections',
+    sa.Column('key', sa.Text(), nullable=False),
+    sa.Column('data', sa.JSON().with_variant(postgresql.JSONB(astext_type=sa.Text()), 'postgresql'), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.PrimaryKeyConstraint('key')
+    )
+    op.create_table('pages',
+    sa.Column('title', sa.String(length=255), nullable=False),
+    sa.Column('slug', sa.String(length=255), nullable=False),
+    sa.Column('body', sa.Text(), nullable=False),
+    sa.Column('meta_title', sa.String(length=255), nullable=True),
+    sa.Column('meta_description', sa.String(length=500), nullable=True),
+    sa.Column('og_image_url', sa.String(length=2048), nullable=True),
+    sa.Column('published', sa.Boolean(), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.PrimaryKeyConstraint('id'),
+    sa.UniqueConstraint('slug')
+    )
+    op.create_index('ix_pages_slug', 'pages', ['slug'], unique=False)
+    op.create_table('site_settings',
+    sa.Column('site_name', sa.String(length=255), nullable=False),
+    sa.Column('tagline', sa.String(length=500), nullable=True),
+    sa.Column('logo_url', sa.String(length=2048), nullable=True),
+    sa.Column('footer_text', sa.Text(), nullable=True),
+    sa.Column('social_links', sa.JSON(), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.PrimaryKeyConstraint('id')
+    )
+    op.create_table('users',
+    sa.Column('email', sa.String(length=255), nullable=False),
+    sa.Column('hashed_password', sa.String(length=255), nullable=False),
+    sa.Column('is_active', sa.Boolean(), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.PrimaryKeyConstraint('id')
+    )
+    op.create_index(op.f('ix_users_email'), 'users', ['email'], unique=True)
+    op.create_table('refresh_tokens',
+    sa.Column('user_id', sa.Uuid(), nullable=False),
+    sa.Column('token_hash', sa.String(length=255), nullable=False),
+    sa.Column('expires_at', sa.DateTime(timezone=True), nullable=False),
+    sa.Column('revoked', sa.Boolean(), nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+    sa.Column('id', sa.Uuid(), nullable=False),
+    sa.ForeignKeyConstraint(['user_id'], ['users.id'], ondelete='CASCADE'),
+    sa.PrimaryKeyConstraint('id')
+    )
+    op.create_index(op.f('ix_refresh_tokens_user_id'), 'refresh_tokens', ['user_id'], unique=False)
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_index(op.f('ix_refresh_tokens_user_id'), table_name='refresh_tokens')
+    op.drop_table('refresh_tokens')
+    op.drop_index(op.f('ix_users_email'), table_name='users')
+    op.drop_table('users')
+    op.drop_table('site_settings')
+    op.drop_index('ix_pages_slug', table_name='pages')
+    op.drop_table('pages')
+    op.drop_table('content_sections')
+    op.drop_index('ix_blog_posts_slug', table_name='blog_posts')
+    op.drop_table('blog_posts')
+    # ### end Alembic commands ###

backend/alembic/versions/6c3f4e2a1b90_add_member_feature_flags.py

@@ -0,0 +1,37 @@
+"""add member feature flags
+
+Revision ID: 6c3f4e2a1b90
+Revises: f25d0f745a17
+Create Date: 2026-04-07 18:25:00.000000
+"""
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = "6c3f4e2a1b90"
+down_revision = "f25d0f745a17"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "site_settings",
+        sa.Column("bookings_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("walks_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("messages_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("site_settings", "messages_enabled")
+    op.drop_column("site_settings", "walks_enabled")
+    op.drop_column("site_settings", "bookings_enabled")

backend/alembic/versions/8b1a2c7d9e4f_merge_feature_flags_and_admin_notifications_heads.py

@@ -0,0 +1,22 @@
+"""merge feature flags and admin notifications heads
+
+Revision ID: 8b1a2c7d9e4f
+Revises: 6c3f4e2a1b90, d4f6a2b1c9e8
+Create Date: 2026-04-07 22:15:00.000000
+
+"""
+from typing import Sequence, Union
+
+
+revision: str = "8b1a2c7d9e4f"
+down_revision: Union[str, tuple[str, str], None] = ("6c3f4e2a1b90", "d4f6a2b1c9e8")
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    pass
+
+
+def downgrade() -> None:
+    pass

backend/alembic/versions/9d3c5b7a1f2e_add_member_notifications.py

@@ -0,0 +1,76 @@
+"""add member notifications
+
+Revision ID: 9d3c5b7a1f2e
+Revises: e2a1f9c4b6d3, f25d0f745a17
+Create Date: 2026-04-01 11:30:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "9d3c5b7a1f2e"
+down_revision: Union[str, tuple[str, str], None] = ("e2a1f9c4b6d3", "f25d0f745a17")
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("members", sa.Column("notifications_enabled", sa.Boolean(), nullable=False, server_default=sa.true()))
+
+    op.add_column(
+        "site_settings",
+        sa.Column("automatic_member_notifications_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("nz_public_holiday_notifications_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("invoice_reminder_notifications_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("invoice_day_of_week", sa.Integer(), nullable=False, server_default="1"),
+    )
+
+    op.create_table(
+        "member_notification_dispatches",
+        sa.Column("member_id", sa.Uuid(), nullable=False),
+        sa.Column("notification_type", sa.String(length=64), nullable=False),
+        sa.Column("dispatch_key", sa.String(length=255), nullable=False),
+        sa.Column("metadata", sa.JSON(), nullable=True),
+        sa.Column("id", sa.Uuid(), nullable=False),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
+        sa.ForeignKeyConstraint(["member_id"], ["members.id"], ondelete="CASCADE"),
+        sa.PrimaryKeyConstraint("id"),
+        sa.UniqueConstraint("member_id", "dispatch_key", name="uq_member_notification_dispatches_member_key"),
+    )
+    op.create_index(
+        op.f("ix_member_notification_dispatches_member_id"),
+        "member_notification_dispatches",
+        ["member_id"],
+        unique=False,
+    )
+    op.create_index(
+        op.f("ix_member_notification_dispatches_notification_type"),
+        "member_notification_dispatches",
+        ["notification_type"],
+        unique=False,
+    )
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_member_notification_dispatches_notification_type"), table_name="member_notification_dispatches")
+    op.drop_index(op.f("ix_member_notification_dispatches_member_id"), table_name="member_notification_dispatches")
+    op.drop_table("member_notification_dispatches")
+
+    op.drop_column("site_settings", "invoice_day_of_week")
+    op.drop_column("site_settings", "invoice_reminder_notifications_enabled")
+    op.drop_column("site_settings", "nz_public_holiday_notifications_enabled")
+    op.drop_column("site_settings", "automatic_member_notifications_enabled")
+    op.drop_column("members", "notifications_enabled")

backend/alembic/versions/a1b2c3d4e5f6_add_members.py

@@ -0,0 +1,126 @@
+"""add members area tables
+
+Revision ID: a1b2c3d4e5f6
+Revises: f25d0f745a17
+Create Date: 2026-03-31 12:00:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+revision: str = 'a1b2c3d4e5f6'
+down_revision: Union[str, None] = 'f25d0f745a17'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        'members',
+        sa.Column('email', sa.String(255), nullable=False),
+        sa.Column('hashed_password', sa.String(255), nullable=True),
+        sa.Column('first_name', sa.String(100), nullable=False),
+        sa.Column('last_name', sa.String(100), nullable=False),
+        sa.Column('phone', sa.String(50), nullable=True),
+        sa.Column('address', sa.String(500), nullable=True),
+        sa.Column('emergency_contact', sa.String(255), nullable=True),
+        sa.Column('is_claimed', sa.Boolean(), nullable=False, server_default='false'),
+        sa.Column('is_active', sa.Boolean(), nullable=False, server_default='true'),
+        sa.Column('onboarding_data', sa.JSON(), nullable=True),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_members_email'), 'members', ['email'], unique=True)
+
+    op.create_table(
+        'member_verification_codes',
+        sa.Column('member_id', sa.Uuid(), nullable=False),
+        sa.Column('code_hash', sa.String(255), nullable=False),
+        sa.Column('purpose', sa.String(20), nullable=False),
+        sa.Column('expires_at', sa.DateTime(timezone=True), nullable=False),
+        sa.Column('used_at', sa.DateTime(timezone=True), nullable=True),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.ForeignKeyConstraint(['member_id'], ['members.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_member_verification_codes_member_id'), 'member_verification_codes', ['member_id'], unique=False)
+
+    op.create_table(
+        'member_refresh_tokens',
+        sa.Column('member_id', sa.Uuid(), nullable=False),
+        sa.Column('token_hash', sa.String(255), nullable=False),
+        sa.Column('expires_at', sa.DateTime(timezone=True), nullable=False),
+        sa.Column('revoked', sa.Boolean(), nullable=False, server_default='false'),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.ForeignKeyConstraint(['member_id'], ['members.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_member_refresh_tokens_member_id'), 'member_refresh_tokens', ['member_id'], unique=False)
+
+    op.create_table(
+        'walks',
+        sa.Column('member_id', sa.Uuid(), nullable=False),
+        sa.Column('walked_at', sa.DateTime(timezone=True), nullable=False),
+        sa.Column('service_type', sa.String(50), nullable=False),
+        sa.Column('duration_minutes', sa.Integer(), nullable=False, server_default='60'),
+        sa.Column('notes', sa.Text(), nullable=True),
+        sa.Column('recorded_by', sa.String(255), nullable=True),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.ForeignKeyConstraint(['member_id'], ['members.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_walks_member_id'), 'walks', ['member_id'], unique=False)
+
+    op.create_table(
+        'bookings',
+        sa.Column('member_id', sa.Uuid(), nullable=False),
+        sa.Column('service_type', sa.String(50), nullable=False),
+        sa.Column('requested_date', sa.DateTime(timezone=True), nullable=True),
+        sa.Column('status', sa.String(20), nullable=False, server_default='pending'),
+        sa.Column('notes', sa.Text(), nullable=True),
+        sa.Column('admin_notes', sa.Text(), nullable=True),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.ForeignKeyConstraint(['member_id'], ['members.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_bookings_member_id'), 'bookings', ['member_id'], unique=False)
+
+    op.create_table(
+        'admin_messages',
+        sa.Column('member_id', sa.Uuid(), nullable=False),
+        sa.Column('subject', sa.String(255), nullable=False),
+        sa.Column('body', sa.Text(), nullable=False),
+        sa.Column('read_at', sa.DateTime(timezone=True), nullable=True),
+        sa.Column('sent_by', sa.String(255), nullable=True),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('now()'), nullable=False),
+        sa.ForeignKeyConstraint(['member_id'], ['members.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_admin_messages_member_id'), 'admin_messages', ['member_id'], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index(op.f('ix_admin_messages_member_id'), table_name='admin_messages')
+    op.drop_table('admin_messages')
+    op.drop_index(op.f('ix_bookings_member_id'), table_name='bookings')
+    op.drop_table('bookings')
+    op.drop_index(op.f('ix_walks_member_id'), table_name='walks')
+    op.drop_table('walks')
+    op.drop_index(op.f('ix_member_refresh_tokens_member_id'), table_name='member_refresh_tokens')
+    op.drop_table('member_refresh_tokens')
+    op.drop_index(op.f('ix_member_verification_codes_member_id'), table_name='member_verification_codes')
+    op.drop_table('member_verification_codes')
+    op.drop_index(op.f('ix_members_email'), table_name='members')
+    op.drop_table('members')

backend/alembic/versions/a4d9c7e18b21_add_service_pricing_and_member_security_controls.py

@@ -0,0 +1,38 @@
+"""add service pricing and member security controls
+
+Revision ID: a4d9c7e18b21
+Revises: f9c2d7a14b6e
+Create Date: 2026-04-08 12:15:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "a4d9c7e18b21"
+down_revision: Union[str, None] = "f9c2d7a14b6e"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "site_settings",
+        sa.Column("service_pricing", sa.JSON(), nullable=False, server_default=sa.text("'{}'")),
+    )
+    op.add_column(
+        "members",
+        sa.Column("service_pricing_overrides", sa.JSON(), nullable=False, server_default=sa.text("'{}'")),
+    )
+    op.add_column(
+        "members",
+        sa.Column("force_two_factor", sa.Boolean(), nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("members", "force_two_factor")
+    op.drop_column("members", "service_pricing_overrides")
+    op.drop_column("site_settings", "service_pricing")

backend/alembic/versions/a7f3e2c1b8d4_add_message_soft_delete_and_reply.py

@@ -0,0 +1,53 @@
+"""add message soft-delete and member reply
+
+Revision ID: a7f3e2c1b8d4
+Revises: f9c2d7a14b6e
+Create Date: 2026-04-09 10:00:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "a7f3e2c1b8d4"
+down_revision: Union[str, None] = "f9c2d7a14b6e"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # Soft-delete support for admin_messages (member can dismiss/delete)
+    op.add_column(
+        "admin_messages",
+        sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True),
+    )
+
+    # Member reply messages — stored alongside admin messages in same table,
+    # distinguished by direction field.
+    op.add_column(
+        "admin_messages",
+        sa.Column(
+            "direction",
+            sa.String(16),
+            nullable=False,
+            server_default="inbound",
+        ),
+    )
+    # reply_to_id links a member reply back to the original admin message
+    op.add_column(
+        "admin_messages",
+        sa.Column(
+            "reply_to_id",
+            sa.Uuid(as_uuid=True),
+            sa.ForeignKey("admin_messages.id", ondelete="SET NULL"),
+            nullable=True,
+        ),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("admin_messages", "reply_to_id")
+    op.drop_column("admin_messages", "direction")
+    op.drop_column("admin_messages", "deleted_at")

backend/alembic/versions/b2d4f1e8c9a3_merge_booking_indexes_and_message_reply.py

@@ -0,0 +1,22 @@
+"""merge booking indexes and message reply heads
+
+Revision ID: b2d4f1e8c9a3
+Revises: c1e4b8f2a7d9, a7f3e2c1b8d4
+Create Date: 2026-04-09 11:00:00.000000
+
+"""
+from typing import Sequence, Union
+
+
+revision: str = "b2d4f1e8c9a3"
+down_revision: Union[str, tuple[str, str], None] = ("c1e4b8f2a7d9", "a7f3e2c1b8d4")
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    pass
+
+
+def downgrade() -> None:
+    pass

backend/alembic/versions/b3e7c9a2f1d4_add_audit_logs.py

@@ -0,0 +1,52 @@
+"""add audit logs
+
+Revision ID: b3e7c9a2f1d4
+Revises: 9d3c5b7a1f2e
+Create Date: 2026-04-01 12:00:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "b3e7c9a2f1d4"
+down_revision: Union[str, None] = "9d3c5b7a1f2e"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "audit_logs",
+        sa.Column("id", sa.Uuid(), nullable=False),
+        sa.Column("timestamp", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
+        sa.Column("member_id", sa.Uuid(), nullable=True),
+        sa.Column("member_email", sa.String(length=255), nullable=True),
+        sa.Column("action_type", sa.String(length=64), nullable=False),
+        sa.Column("area", sa.String(length=255), nullable=False),
+        sa.Column("description", sa.String(length=500), nullable=False),
+        sa.Column("status", sa.String(length=16), nullable=False, server_default="success"),
+        sa.Column("booking_id", sa.Uuid(), nullable=True),
+        sa.Column("error_message", sa.Text(), nullable=True),
+        sa.Column("error_detail", sa.Text(), nullable=True),
+        sa.Column("ip_address", sa.String(length=64), nullable=True),
+        sa.Column("user_agent", sa.String(length=512), nullable=True),
+        sa.Column("extra", sa.JSON(), nullable=True),
+        sa.ForeignKeyConstraint(["member_id"], ["members.id"], ondelete="SET NULL"),
+        sa.ForeignKeyConstraint(["booking_id"], ["bookings.id"], ondelete="SET NULL"),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index("ix_audit_logs_timestamp", "audit_logs", ["timestamp"], unique=False)
+    op.create_index("ix_audit_logs_member_id", "audit_logs", ["member_id"], unique=False)
+    op.create_index("ix_audit_logs_action_type", "audit_logs", ["action_type"], unique=False)
+    op.create_index("ix_audit_logs_status", "audit_logs", ["status"], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index("ix_audit_logs_status", table_name="audit_logs")
+    op.drop_index("ix_audit_logs_action_type", table_name="audit_logs")
+    op.drop_index("ix_audit_logs_member_id", table_name="audit_logs")
+    op.drop_index("ix_audit_logs_timestamp", table_name="audit_logs")
+    op.drop_table("audit_logs")

backend/alembic/versions/bd9f6a8b7c1d_add_experiments.py

@@ -0,0 +1,96 @@
+"""add experiments
+
+Revision ID: bd9f6a8b7c1d
+Revises: 3419d4e56131
+Create Date: 2026-03-30 23:40:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = 'bd9f6a8b7c1d'
+down_revision: Union[str, None] = '3419d4e56131'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        'experiments',
+        sa.Column('experiment_key', sa.String(length=64), nullable=False),
+        sa.Column('name', sa.String(length=120), nullable=False),
+        sa.Column('description', sa.String(length=512), nullable=True),
+        sa.Column('enabled', sa.Boolean(), nullable=False),
+        sa.Column('eligible_routes', sa.JSON(), nullable=False),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=False),
+        sa.PrimaryKeyConstraint('id'),
+        sa.UniqueConstraint('experiment_key'),
+    )
+    op.create_index(op.f('ix_experiments_enabled'), 'experiments', ['enabled'], unique=False)
+    op.create_index(op.f('ix_experiments_experiment_key'), 'experiments', ['experiment_key'], unique=False)
+
+    op.create_table(
+        'experiment_variants',
+        sa.Column('experiment_id', sa.Uuid(), nullable=False),
+        sa.Column('variant_key', sa.String(length=64), nullable=False),
+        sa.Column('label', sa.String(length=120), nullable=False),
+        sa.Column('allocation', sa.Integer(), nullable=False),
+        sa.Column('is_control', sa.Boolean(), nullable=False),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=False),
+        sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=False),
+        sa.ForeignKeyConstraint(['experiment_id'], ['experiments.id'], ondelete='CASCADE'),
+        sa.PrimaryKeyConstraint('id'),
+        sa.UniqueConstraint('experiment_id', 'variant_key', name='uq_experiment_variants_experiment_variant'),
+    )
+    op.create_index(op.f('ix_experiment_variants_experiment_id'), 'experiment_variants', ['experiment_id'], unique=False)
+
+    op.create_table(
+        'experiment_events',
+        sa.Column('experiment_key', sa.String(length=64), nullable=False),
+        sa.Column('variant_key', sa.String(length=64), nullable=False),
+        sa.Column('session_id', sa.String(length=128), nullable=False),
+        sa.Column('user_id', sa.String(length=64), nullable=True),
+        sa.Column('path', sa.String(length=255), nullable=False),
+        sa.Column('event_type', sa.String(length=64), nullable=False),
+        sa.Column('conversion_value', sa.Numeric(precision=12, scale=2), nullable=True),
+        sa.Column('metadata', sa.JSON(), nullable=True),
+        sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=False),
+        sa.Column('id', sa.Uuid(), nullable=False),
+        sa.PrimaryKeyConstraint('id'),
+    )
+    op.create_index(op.f('ix_experiment_events_created_at'), 'experiment_events', ['created_at'], unique=False)
+    op.create_index(op.f('ix_experiment_events_event_type'), 'experiment_events', ['event_type'], unique=False)
+    op.create_index(op.f('ix_experiment_events_experiment_key'), 'experiment_events', ['experiment_key'], unique=False)
+    op.create_index(op.f('ix_experiment_events_path'), 'experiment_events', ['path'], unique=False)
+    op.create_index(op.f('ix_experiment_events_session_id'), 'experiment_events', ['session_id'], unique=False)
+    op.create_index(op.f('ix_experiment_events_user_id'), 'experiment_events', ['user_id'], unique=False)
+    op.create_index(op.f('ix_experiment_events_variant_key'), 'experiment_events', ['variant_key'], unique=False)
+    op.create_index('ix_experiment_events_experiment_variant_created_at', 'experiment_events', ['experiment_key', 'variant_key', 'created_at'], unique=False)
+    op.create_index('ix_experiment_events_session_created_at', 'experiment_events', ['session_id', 'created_at'], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index('ix_experiment_events_session_created_at', table_name='experiment_events')
+    op.drop_index('ix_experiment_events_experiment_variant_created_at', table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_variant_key'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_user_id'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_session_id'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_path'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_experiment_key'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_event_type'), table_name='experiment_events')
+    op.drop_index(op.f('ix_experiment_events_created_at'), table_name='experiment_events')
+    op.drop_table('experiment_events')
+
+    op.drop_index(op.f('ix_experiment_variants_experiment_id'), table_name='experiment_variants')
+    op.drop_table('experiment_variants')
+
+    op.drop_index(op.f('ix_experiments_experiment_key'), table_name='experiments')
+    op.drop_index(op.f('ix_experiments_enabled'), table_name='experiments')
+    op.drop_table('experiments')

backend/alembic/versions/c1e4b8f2a7d9_add_booking_indexes.py

@@ -0,0 +1,36 @@
+"""add booking performance indexes
+
+Revision ID: c1e4b8f2a7d9
+Revises: a4d9c7e18b21
+Create Date: 2026-04-08 14:00:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+
+revision: str = 'c1e4b8f2a7d9'
+down_revision: Union[str, None] = 'a4d9c7e18b21'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # Speed up filtering bookings by status (most common admin query filter)
+    op.create_index('ix_bookings_status', 'bookings', ['status'])
+
+    # Speed up date-range queries and ordering used by the schedule view
+    op.create_index('ix_bookings_requested_date', 'bookings', ['requested_date'])
+
+    # Speed up the SSE signature query: max(updated_at) table scan → index scan
+    op.create_index('ix_bookings_updated_at', 'bookings', ['updated_at'])
+
+    # Composite: member + status used by member-facing /members/bookings endpoint
+    op.create_index('ix_bookings_member_id_status', 'bookings', ['member_id', 'status'])
+
+
+def downgrade() -> None:
+    op.drop_index('ix_bookings_member_id_status', table_name='bookings')
+    op.drop_index('ix_bookings_updated_at', table_name='bookings')
+    op.drop_index('ix_bookings_requested_date', table_name='bookings')
+    op.drop_index('ix_bookings_status', table_name='bookings')

backend/alembic/versions/c7d2b6f4a9e1_add_member_onboarding_lifecycle.py

@@ -0,0 +1,43 @@
+"""add member onboarding lifecycle
+
+Revision ID: c7d2b6f4a9e1
+Revises: a1b2c3d4e5f6
+Create Date: 2026-03-31 23:25:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "c7d2b6f4a9e1"
+down_revision: Union[str, None] = "a1b2c3d4e5f6"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column("members", sa.Column("member_status", sa.String(length=32), nullable=False, server_default="invited"))
+    op.add_column("members", sa.Column("claimed_at", sa.DateTime(timezone=True), nullable=True))
+    op.add_column("members", sa.Column("onboarding_completed_at", sa.DateTime(timezone=True), nullable=True))
+    op.add_column("members", sa.Column("contract_signed_at", sa.DateTime(timezone=True), nullable=True))
+    op.add_column("members", sa.Column("contract_signer_name", sa.String(length=255), nullable=True))
+    op.add_column("members", sa.Column("contract_version", sa.String(length=50), nullable=True))
+    op.add_column("members", sa.Column("activated_at", sa.DateTime(timezone=True), nullable=True))
+    op.create_index(op.f("ix_members_member_status"), "members", ["member_status"], unique=False)
+
+    op.execute("UPDATE members SET member_status = 'active' WHERE is_claimed = true")
+    op.execute("UPDATE members SET member_status = 'invited' WHERE is_claimed = false")
+    op.alter_column("members", "member_status", server_default=None)
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_members_member_status"), table_name="members")
+    op.drop_column("members", "activated_at")
+    op.drop_column("members", "contract_version")
+    op.drop_column("members", "contract_signer_name")
+    op.drop_column("members", "contract_signed_at")
+    op.drop_column("members", "onboarding_completed_at")
+    op.drop_column("members", "claimed_at")
+    op.drop_column("members", "member_status")

backend/alembic/versions/d4f6a2b1c9e8_add_admin_notifications_clear_cutoff.py

@@ -0,0 +1,28 @@
+"""add admin notifications clear cutoff
+
+Revision ID: d4f6a2b1c9e8
+Revises: b3e7c9a2f1d4
+Create Date: 2026-04-07 20:45:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "d4f6a2b1c9e8"
+down_revision: Union[str, None] = "b3e7c9a2f1d4"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "site_settings",
+        sa.Column("admin_notifications_cleared_before", sa.DateTime(timezone=True), nullable=True),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("site_settings", "admin_notifications_cleared_before")

backend/alembic/versions/e2a1f9c4b6d3_add_contact_leads.py

@@ -0,0 +1,53 @@
+"""add contact leads
+
+Revision ID: e2a1f9c4b6d3
+Revises: c7d2b6f4a9e1
+Create Date: 2026-03-31 23:55:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "e2a1f9c4b6d3"
+down_revision: Union[str, None] = "c7d2b6f4a9e1"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "contact_leads",
+        sa.Column("full_name", sa.String(length=255), nullable=False),
+        sa.Column("email", sa.String(length=255), nullable=False),
+        sa.Column("phone", sa.String(length=50), nullable=True),
+        sa.Column("requested_services", sa.String(length=255), nullable=True),
+        sa.Column("pet_name", sa.String(length=100), nullable=True),
+        sa.Column("pet_breed", sa.String(length=100), nullable=True),
+        sa.Column("suburb", sa.String(length=100), nullable=True),
+        sa.Column("service_area_status", sa.String(length=32), nullable=True),
+        sa.Column("message", sa.Text(), nullable=True),
+        sa.Column("source", sa.String(length=50), nullable=False),
+        sa.Column("status", sa.String(length=32), nullable=False, server_default="invite"),
+        sa.Column("notes", sa.Text(), nullable=True),
+        sa.Column("metadata", sa.JSON(), nullable=True),
+        sa.Column("invited_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("invited_member_id", sa.Uuid(), nullable=True),
+        sa.Column("id", sa.Uuid(), nullable=False),
+        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
+        sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.text("now()"), nullable=False),
+        sa.ForeignKeyConstraint(["invited_member_id"], ["members.id"], ondelete="SET NULL"),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_contact_leads_email"), "contact_leads", ["email"], unique=False)
+    op.create_index(op.f("ix_contact_leads_invited_member_id"), "contact_leads", ["invited_member_id"], unique=False)
+    op.create_index(op.f("ix_contact_leads_status"), "contact_leads", ["status"], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_contact_leads_status"), table_name="contact_leads")
+    op.drop_index(op.f("ix_contact_leads_invited_member_id"), table_name="contact_leads")
+    op.drop_index(op.f("ix_contact_leads_email"), table_name="contact_leads")
+    op.drop_table("contact_leads")

backend/alembic/versions/f25d0f745a17_add_experiment_cookie_name.py

@@ -0,0 +1,39 @@
+"""add experiment cookie name
+
+Revision ID: f25d0f745a17
+Revises: bd9f6a8b7c1d
+Create Date: 2026-03-31 00:15:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = 'f25d0f745a17'
+down_revision: Union[str, None] = 'bd9f6a8b7c1d'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column('experiments', sa.Column('cookie_name', sa.String(length=96), nullable=True))
+    op.execute(
+        """
+        UPDATE experiments
+        SET cookie_name =
+            CASE experiment_key
+                WHEN 'homepage_hero_test' THEN 'exp_homepage_hero'
+                WHEN 'pricing_cta_test' THEN 'exp_pricing_cta'
+                ELSE 'exp_' || experiment_key
+            END
+        """
+    )
+    op.alter_column('experiments', 'cookie_name', nullable=False)
+    op.create_unique_constraint('uq_experiments_cookie_name', 'experiments', ['cookie_name'])
+
+
+def downgrade() -> None:
+    op.drop_constraint('uq_experiments_cookie_name', 'experiments', type_='unique')
+    op.drop_column('experiments', 'cookie_name')

backend/alembic/versions/f9c2d7a14b6e_add_global_site_control_flags.py

@@ -0,0 +1,38 @@
+"""add global site control flags
+
+Revision ID: f9c2d7a14b6e
+Revises: 8b1a2c7d9e4f
+Create Date: 2026-04-08 10:20:00.000000
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "f9c2d7a14b6e"
+down_revision: Union[str, None] = "8b1a2c7d9e4f"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "site_settings",
+        sa.Column("two_factor_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("audit_history_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+    op.add_column(
+        "site_settings",
+        sa.Column("experiments_enabled", sa.Boolean(), nullable=False, server_default=sa.true()),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("site_settings", "experiments_enabled")
+    op.drop_column("site_settings", "audit_history_enabled")
+    op.drop_column("site_settings", "two_factor_enabled")