CREATE TABLE IF NOT EXISTS workbench_resource_forks (
 id VARCHAR(36) PRIMARY KEY,
 tenant_id BIGINT NOT NULL, owner_id VARCHAR(36) NOT NULL,
 kind VARCHAR(32) NOT NULL, source_id VARCHAR(36) NOT NULL, personal_id VARCHAR(36) NOT NULL,
 name TEXT NOT NULL, base_fingerprint VARCHAR(64) NOT NULL, base_snapshot JSONB NOT NULL,
 no_export BOOLEAN NOT NULL DEFAULT TRUE,
 created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
 UNIQUE(tenant_id,owner_id,kind,source_id), UNIQUE(tenant_id,kind,personal_id)
);
CREATE TABLE IF NOT EXISTS workbench_resource_submissions (
 id VARCHAR(36) PRIMARY KEY, tenant_id BIGINT NOT NULL, owner_id VARCHAR(36) NOT NULL,
 fork_id VARCHAR(36) NOT NULL REFERENCES workbench_resource_forks(id),
 kind VARCHAR(32) NOT NULL, source_id VARCHAR(36) NOT NULL, personal_id VARCHAR(36) NOT NULL,
 name TEXT NOT NULL, status VARCHAR(24) NOT NULL,
 base_fingerprint VARCHAR(64) NOT NULL, personal_fingerprint VARCHAR(64) NOT NULL,
 base_snapshot JSONB NOT NULL, proposed_snapshot JSONB NOT NULL,
 note TEXT NOT NULL DEFAULT '', review_note TEXT NOT NULL DEFAULT '', reviewer_id VARCHAR(36) NOT NULL DEFAULT '',
 reviewed_at TIMESTAMPTZ, created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP
);
CREATE INDEX IF NOT EXISTS resource_submissions_scope ON workbench_resource_submissions(tenant_id,status,created_at DESC);
CREATE UNIQUE INDEX IF NOT EXISTS resource_submissions_pending ON workbench_resource_submissions(tenant_id,fork_id) WHERE status='pending';
CREATE TABLE IF NOT EXISTS workbench_resource_hidden (
 tenant_id BIGINT NOT NULL, owner_id VARCHAR(36) NOT NULL, kind VARCHAR(32) NOT NULL,
 resource_id VARCHAR(36) NOT NULL, created_at TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP,
 PRIMARY KEY(tenant_id,owner_id,kind,resource_id)
);
CREATE TABLE IF NOT EXISTS workbench_resource_version_history (
 id VARCHAR(36) PRIMARY KEY, tenant_id BIGINT NOT NULL, owner_id VARCHAR(36) NOT NULL,
 kind VARCHAR(32) NOT NULL, source_id VARCHAR(36) NOT NULL, name TEXT NOT NULL,
 status VARCHAR(24) NOT NULL CHECK(status IN ('rejected','withdrawn','approved')),
 proposed_snapshot JSONB NOT NULL, review_note TEXT NOT NULL DEFAULT '',
 created_at TIMESTAMPTZ NOT NULL, reviewed_at TIMESTAMPTZ,
 source_system TEXT NOT NULL, source_table TEXT NOT NULL, legacy_id BIGINT NOT NULL,
 source_snapshot JSONB NOT NULL, source_sha256 VARCHAR(64) NOT NULL,
 UNIQUE(tenant_id,source_system,source_table,legacy_id)
);