diff --git a/.env.example b/.env.example
index 1c279619..ffdca1c1 100644
--- a/.env.example
+++ b/.env.example
@@ -48,6 +48,14 @@ EMAIL_FROM=Livepeer Waitlist <waitlist@mail.example.com>
 EMAIL_REPLY_TO=help@example.com
 INTERNAL_OUTBOX_SECRET=replace-with-at-least-32-random-bytes
 NEXT_PUBLIC_SITE_URL=http://localhost:3000
+# Required in deployed environments. Generate a high-entropy secret and keep it
+# stable so one-hour first-party media links remain valid across instances.
+ASSET_URL_SIGNING_SECRET=replace-with-at-least-32-random-bytes
+# Exact hosts or wildcard subdomains, comma-separated. Redirects are rechecked.
+ASSET_PROXY_ALLOWED_HOSTS=fal.media,*.fal.media
+# Preview-only, branch-scoped verification records. Never enable in production.
+CONSOLE_PREVIEW_FIXTURES=0
+NEXT_PUBLIC_CONSOLE_PREVIEW_FIXTURES=0
 # Publishable token; analytics safely no-ops when unset.
 NEXT_PUBLIC_POSTHOG_KEY=
 
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..d71c301e
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,4 @@
+# Drizzle Kit writes a full schema dump per migration, not a delta.
+# Keep the files for generate/migrate; collapse them in GitHub review.
+drizzle-baseline/meta/*_snapshot.json linguist-generated=true
+drizzle/meta/*_snapshot.json linguist-generated=true
diff --git a/app/(app)/page.tsx b/app/(app)/page.tsx
index 0612d65b..8d859bec 100644
--- a/app/(app)/page.tsx
+++ b/app/(app)/page.tsx
@@ -1,5 +1,4 @@
 import { redirect } from "next/navigation";
-import { identitySyncPath } from "@/lib/identity/sync-return";
 
 export const dynamic = "force-dynamic";
 
@@ -11,5 +10,5 @@ export default async function RootPage({
   const params = await searchParams;
   if (params.ref?.trim())
     redirect(`/waitlist?ref=${encodeURIComponent(params.ref.trim())}`);
-  redirect(identitySyncPath("/home"));
+  redirect("/home");
 }
diff --git a/app/(auth)/login/page.tsx b/app/(auth)/login/page.tsx
index 5eb98f86..c671c992 100644
--- a/app/(auth)/login/page.tsx
+++ b/app/(auth)/login/page.tsx
@@ -2,7 +2,7 @@ import { redirect } from "next/navigation";
 import { getAuthenticatedIdentity } from "@/lib/authentication/session";
 import { authLoginHref, safeReturnTo } from "@/lib/console/auth-login";
 import LoginPage from "@/components/console/LoginPage";
-import { identitySyncPath } from "@/lib/identity/sync-return";
+import { signedInLandingPath } from "@/lib/identity/signed-in-landing";
 
 import type { Metadata } from "next";
 
@@ -26,7 +26,9 @@ export default async function LoginRoute({
 
   const identity = await getAuthenticatedIdentity();
   if (identity)
-    redirect(identitySyncPath(mcpOauth ? MCP_CALLBACK_PATH : returnTo));
+    redirect(
+      await signedInLandingPath(mcpOauth ? MCP_CALLBACK_PATH : returnTo)
+    );
 
   // MCP flow must go directly to Auth0 — no interactive UI step.
   if (mcpOauth) {
diff --git a/app/(auth)/signup/page.tsx b/app/(auth)/signup/page.tsx
index 27c41176..6c3790fa 100644
--- a/app/(auth)/signup/page.tsx
+++ b/app/(auth)/signup/page.tsx
@@ -3,7 +3,7 @@ import { redirect } from "next/navigation";
 import { getAuthenticatedIdentity } from "@/lib/authentication/session";
 import { safeReturnTo } from "@/lib/console/auth-login";
 import LoginPage from "@/components/console/LoginPage";
-import { identitySyncPath } from "@/lib/identity/sync-return";
+import { signedInLandingPath } from "@/lib/identity/signed-in-landing";
 
 export const metadata: Metadata = {
   title: "Sign up — Livepeer Early Access",
@@ -17,6 +17,6 @@ export default async function SignupRoute({
   const params = await searchParams;
   const returnTo = safeReturnTo(params.returnTo);
   const identity = await getAuthenticatedIdentity();
-  if (identity) redirect(identitySyncPath(returnTo));
+  if (identity) redirect(await signedInLandingPath(returnTo));
   return <LoginPage mode="signup" returnTo={returnTo} />;
 }
diff --git a/app/api/admin/runs/[id]/route.ts b/app/api/admin/runs/[id]/route.ts
index c2fa3724..2f1acd3d 100644
--- a/app/api/admin/runs/[id]/route.ts
+++ b/app/api/admin/runs/[id]/route.ts
@@ -1,6 +1,7 @@
 import { getAdminPrincipal } from "@/lib/admin/auth";
 import { getAdminRun } from "@/lib/runs/store";
 import { runError, RUN_HEADERS } from "@/lib/runs/http";
+import { publicRunDetail } from "@/lib/assets/public";
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
 export async function GET(
@@ -17,7 +18,7 @@ export async function GET(
     const { id } = await context.params;
     const result = await getAdminRun(actor, id);
     if (!result) throw new Error("run_not_found");
-    return Response.json(result, { headers: RUN_HEADERS });
+    return Response.json(publicRunDetail(result), { headers: RUN_HEADERS });
   } catch (error) {
     return runError(error);
   }
diff --git a/app/api/assets/[id]/route.ts b/app/api/assets/[id]/route.ts
new file mode 100644
index 00000000..0da51601
--- /dev/null
+++ b/app/api/assets/[id]/route.ts
@@ -0,0 +1,262 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { lookup } from "node:dns/promises";
+import { fetchPinnedAsset } from "@/lib/assets/transport";
+import { isIP } from "node:net";
+import { assetSignature, ASSET_URL_TTL_SECONDS } from "@/lib/assets/public";
+import { getAssetSource } from "@/lib/mcp/store";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+const FORWARDED_HEADERS = [
+  "accept-ranges",
+  "content-length",
+  "content-range",
+  "etag",
+  "last-modified",
+] as const;
+
+const MEDIA_CONTENT_TYPE = /^(?:image|video|audio)\/[a-z0-9.+-]+$/i;
+
+function isPlayableMediaType(type: string): boolean {
+  return MEDIA_CONTENT_TYPE.test(type) && !/^image\/svg\b/i.test(type);
+}
+
+/** Provider media types pass through. HTML/JS/SVG never do; Chrome's player cannot sandbox a video document. */
+function mediaContentType(
+  upstream: string | null,
+  stored: string | null
+): string | null {
+  const offered = (upstream ?? "").split(";")[0]!.trim().toLowerCase();
+  if (isPlayableMediaType(offered)) return offered;
+  if (offered && offered !== "application/octet-stream") return null;
+  const kind = (stored ?? "").trim().toLowerCase();
+  if (isPlayableMediaType(kind)) return kind;
+  if (kind === "video") return "video/mp4";
+  if (kind === "image") return "image/jpeg";
+  if (kind === "audio") return "audio/mpeg";
+  return null;
+}
+
+function notFound(): Response {
+  return new Response("Not found", {
+    status: 404,
+    headers: { "cache-control": "private, no-store" },
+  });
+}
+
+function isPrivateIp(address: string): boolean {
+  let normalized = address.toLowerCase();
+  if (normalized.startsWith("::ffff:")) {
+    normalized = normalized.slice(7);
+    if (!normalized.includes(".")) {
+      const words = normalized.split(":").map((word) => parseInt(word, 16));
+      if (words.length !== 2 || words.some((word) => !Number.isFinite(word)))
+        return true;
+      normalized = [
+        words[0]! >> 8,
+        words[0]! & 255,
+        words[1]! >> 8,
+        words[1]! & 255,
+      ].join(".");
+    }
+  }
+  if (isIP(normalized) === 4) {
+    const [a, b] = normalized.split(".").map(Number);
+    return (
+      a === 0 ||
+      a === 10 ||
+      a === 127 ||
+      (a === 100 && b >= 64 && b <= 127) ||
+      (a === 198 && (b === 18 || b === 19)) ||
+      (a === 192 && b === 0) ||
+      (a === 169 && b === 254) ||
+      (a === 172 && b >= 16 && b <= 31) ||
+      (a === 192 && b === 168) ||
+      a >= 224
+    );
+  }
+  return (
+    isIP(normalized) !== 6 ||
+    !/^[23]/.test(normalized) ||
+    normalized.startsWith("2001:db8:") ||
+    normalized.startsWith("2001:0:") ||
+    normalized.startsWith("2001::") ||
+    normalized.startsWith("2002:") ||
+    normalized === "::" ||
+    normalized === "::1" ||
+    normalized.startsWith("fc") ||
+    normalized.startsWith("fd") ||
+    /^fe[89ab]/.test(normalized)
+  );
+}
+
+function allowedHosts(): string[] {
+  const configured = process.env.ASSET_PROXY_ALLOWED_HOSTS?.trim();
+  if (configured)
+    return configured
+      .split(",")
+      .map((host) => host.trim().toLowerCase())
+      .filter(Boolean);
+  if (process.env.NODE_ENV !== "production")
+    return ["fal.media", "*.fal.media", "media.example.test"];
+  throw new Error("ASSET_PROXY_ALLOWED_HOSTS is required");
+}
+
+function isAllowedHost(hostname: string): boolean {
+  const host = hostname.toLowerCase();
+  return allowedHosts().some((rule) =>
+    rule.startsWith("*.")
+      ? host.endsWith(rule.slice(1)) && host !== rule.slice(2)
+      : host === rule
+  );
+}
+
+async function assertPublicHttps(raw: string) {
+  const url = new URL(raw);
+  if (
+    url.protocol !== "https:" ||
+    url.port ||
+    url.username ||
+    url.password ||
+    !isAllowedHost(url.hostname)
+  )
+    throw new Error("unsafe_asset_origin");
+  const addresses = await lookup(url.hostname, { all: true, verbatim: true });
+  if (
+    !addresses.length ||
+    addresses.some(({ address }) => isPrivateIp(address))
+  )
+    throw new Error("unsafe_asset_origin");
+  return { url, addresses };
+}
+
+function validSignature(
+  id: string,
+  principalId: string,
+  exp: number,
+  supplied: string
+): boolean {
+  const expected = Buffer.from(assetSignature(id, principalId, exp));
+  const actual = Buffer.from(supplied);
+  return expected.length === actual.length && timingSafeEqual(expected, actual);
+}
+
+async function proxy(request: Request, id: string): Promise<Response> {
+  if (!/^[A-Za-z0-9_-]{1,160}$/.test(id)) return notFound();
+  const requestUrl = new URL(request.url);
+  const expText = requestUrl.searchParams.get("exp") ?? "";
+  const sig = requestUrl.searchParams.get("sig") ?? "";
+  const exp = Number(expText);
+  const nowSeconds = Math.floor(Date.now() / 1000);
+  if (
+    !/^\d{10,}$/.test(expText) ||
+    !Number.isSafeInteger(exp) ||
+    exp <= nowSeconds ||
+    exp > nowSeconds + ASSET_URL_TTL_SECONDS
+  )
+    return notFound();
+
+  const asset = await getAssetSource(id);
+  if (
+    !asset ||
+    asset.unavailableAt ||
+    !validSignature(id, asset.principalId, exp, sig) ||
+    (asset.expiresAt && asset.expiresAt.getTime() <= Date.now())
+  )
+    return notFound();
+
+  // Synthetic fixtures are bundled public images, never arbitrary proxy origins.
+  if (
+    process.env.VERCEL_ENV === "preview" &&
+    process.env.CONSOLE_PREVIEW_FIXTURES === "1"
+  ) {
+    const suffix = createHash("sha256")
+      .update(asset.principalId)
+      .digest("hex")
+      .slice(0, 12);
+    const fixturePaths: Record<string, string> = {
+      [`asset_preview_v2_${suffix}_portrait`]:
+        "/images/console/explore/flux-schnell.webp",
+      [`asset_preview_v2_${suffix}_variation`]:
+        "/images/console/explore/img2img-sdxl.webp",
+    };
+    const location = fixturePaths[id];
+    if (location)
+      return new Response(null, {
+        status: 307,
+        headers: { location, "cache-control": "private, no-store" },
+      });
+  }
+
+  try {
+    let target = await assertPublicHttps(asset.url);
+    let upstream: Response | undefined;
+    for (let redirects = 0; redirects <= 3; redirects += 1) {
+      upstream = await fetchPinnedAsset(target.url, target.addresses, {
+        method: request.method,
+        signal: AbortSignal.any([request.signal, AbortSignal.timeout(30_000)]),
+        headers: {
+          Accept: request.headers.get("accept") ?? "*/*",
+          "Accept-Encoding": "identity",
+          ...(request.headers.get("range")
+            ? { Range: request.headers.get("range")! }
+            : {}),
+        },
+      });
+      if (![301, 302, 303, 307, 308].includes(upstream.status)) break;
+      const location = upstream.headers.get("location");
+      await upstream.body?.cancel();
+      if (!location || redirects === 3) throw new Error("asset_redirect");
+      target = await assertPublicHttps(new URL(location, target.url).href);
+    }
+    if (!upstream) throw new Error("asset_unavailable");
+    const providerSeconds = asset.expiresAt
+      ? Math.max(0, Math.floor((asset.expiresAt.getTime() - Date.now()) / 1000))
+      : Number.POSITIVE_INFINITY;
+    const maxAge = Math.max(
+      0,
+      Math.min(60, exp - Math.floor(Date.now() / 1000), providerSeconds)
+    );
+    const type = mediaContentType(
+      upstream.headers.get("content-type"),
+      asset.mediaType
+    );
+    const headers = new Headers({
+      "cache-control": upstream.ok
+        ? `private, max-age=${maxAge}`
+        : "private, no-store",
+      "x-content-type-options": "nosniff",
+      ...(type
+        ? { "content-type": type }
+        : { "content-security-policy": "default-src 'none'; sandbox" }),
+    });
+    for (const name of FORWARDED_HEADERS) {
+      const value = upstream.headers.get(name);
+      if (value) headers.set(name, value);
+    }
+    return new Response(request.method === "HEAD" ? null : upstream.body, {
+      status: upstream.status,
+      headers,
+    });
+  } catch {
+    return new Response("Asset unavailable", {
+      status: 502,
+      headers: { "cache-control": "private, no-store" },
+    });
+  }
+}
+
+export async function GET(
+  request: Request,
+  context: { params: Promise<{ id: string }> }
+) {
+  return proxy(request, (await context.params).id);
+}
+
+export async function HEAD(
+  request: Request,
+  context: { params: Promise<{ id: string }> }
+) {
+  return proxy(request, (await context.params).id);
+}
diff --git a/app/api/console/runs/[id]/route.ts b/app/api/console/runs/[id]/route.ts
index 10b55901..cf58217d 100644
--- a/app/api/console/runs/[id]/route.ts
+++ b/app/api/console/runs/[id]/route.ts
@@ -1,5 +1,6 @@
 import { getOwnRun } from "@/lib/runs/store";
 import { requireRunOwner, runError, RUN_HEADERS } from "@/lib/runs/http";
+import { publicRunDetail } from "@/lib/assets/public";
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
 export async function GET(
@@ -11,7 +12,7 @@ export async function GET(
     const { id } = await context.params;
     const result = await getOwnRun(owner, id);
     if (!result) throw new Error("run_not_found");
-    return Response.json(result, { headers: RUN_HEADERS });
+    return Response.json(publicRunDetail(result), { headers: RUN_HEADERS });
   } catch (error) {
     return runError(error);
   }
diff --git a/app/api/console/runs/[id]/schema/route.ts b/app/api/console/runs/[id]/schema/route.ts
new file mode 100644
index 00000000..3f236035
--- /dev/null
+++ b/app/api/console/runs/[id]/schema/route.ts
@@ -0,0 +1,27 @@
+import { getOwnRun } from "@/lib/runs/store";
+import { requireRunOwner, runError, RUN_HEADERS } from "@/lib/runs/http";
+import {
+  loadFalInputSchema,
+  resolveFalCatalogEntry,
+} from "@/lib/mcp/fal-input-schema";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function GET(
+  _request: Request,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const owner = await requireRunOwner();
+    const result = await getOwnRun(owner, (await context.params).id);
+    if (!result) throw new Error("run_not_found");
+    const catalog = resolveFalCatalogEntry(result);
+    return Response.json(
+      { inputSchema: catalog ? await loadFalInputSchema(catalog) : null },
+      { headers: RUN_HEADERS }
+    );
+  } catch (error) {
+    return runError(error);
+  }
+}
diff --git a/app/api/console/runs/billing-sync/route.ts b/app/api/console/runs/billing-sync/route.ts
new file mode 100644
index 00000000..ee7ddf83
--- /dev/null
+++ b/app/api/console/runs/billing-sync/route.ts
@@ -0,0 +1,39 @@
+import { requireConsoleSession } from "@/lib/console/session-user";
+import { refreshOwnedRunBilling } from "@/lib/runs/manifest-billing";
+import { resolveRunOwner } from "@/lib/runs/store";
+import { runError, RUN_HEADERS } from "@/lib/runs/http";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request) {
+  try {
+    const body = (await request.json()) as { runIds?: unknown };
+    if (
+      !Array.isArray(body.runIds) ||
+      body.runIds.length > 50 ||
+      body.runIds.some((id) => typeof id !== "string" || !id || id.length > 160)
+    )
+      throw new Error("invalid_run_query");
+    const session = await requireConsoleSession();
+    const owner = await resolveRunOwner(session.externalUserId);
+    if (owner.userId !== session.canonicalUserId)
+      throw new Error("run_owner_mismatch");
+    const result = await refreshOwnedRunBilling({
+      owner,
+      externalUserId: session.externalUserId,
+      email: session.email,
+      runIds: body.runIds,
+    });
+    return Response.json(
+      {
+        changedRunIds: result.changedRunIds,
+        changedCount: result.changedRunIds.length,
+        pending: result.pending,
+      },
+      { headers: RUN_HEADERS }
+    );
+  } catch (error) {
+    return runError(error);
+  }
+}
diff --git a/app/api/console/runs/preview-fixtures/route.ts b/app/api/console/runs/preview-fixtures/route.ts
new file mode 100644
index 00000000..2aff4615
--- /dev/null
+++ b/app/api/console/runs/preview-fixtures/route.ts
@@ -0,0 +1,22 @@
+import { requireRunOwner, runError, RUN_HEADERS } from "@/lib/runs/http";
+import {
+  ensurePreviewRunFixtures,
+  previewFixturesEnabled,
+} from "@/lib/runs/preview-fixtures";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+export async function POST(request: Request) {
+  try {
+    if (!previewFixturesEnabled())
+      return new Response("Not found", { status: 404 });
+    const owner = await requireRunOwner();
+    return Response.json(
+      await ensurePreviewRunFixtures(owner, new URL(request.url).origin),
+      { headers: RUN_HEADERS }
+    );
+  } catch (error) {
+    return runError(error);
+  }
+}
diff --git a/app/api/console/runs/route.ts b/app/api/console/runs/route.ts
index 9c5181ef..74d362f6 100644
--- a/app/api/console/runs/route.ts
+++ b/app/api/console/runs/route.ts
@@ -1,4 +1,8 @@
 import { listOwnRuns } from "@/lib/runs/store";
+import {
+  ensurePreviewRunFixtures,
+  previewFixturesEnabled,
+} from "@/lib/runs/preview-fixtures";
 import {
   parseRunQuery,
   requireRunOwner,
@@ -10,7 +14,13 @@ export const dynamic = "force-dynamic";
 export async function GET(request: Request) {
   try {
     const owner = await requireRunOwner();
-    return Response.json(await listOwnRuns(owner, parseRunQuery(request.url)), {
+    const preview = previewFixturesEnabled();
+    if (preview)
+      await ensurePreviewRunFixtures(owner, new URL(request.url).origin);
+    const page = await listOwnRuns(owner, parseRunQuery(request.url), {
+      excludeLegacyPreview: preview,
+    });
+    return Response.json(page, {
       headers: RUN_HEADERS,
     });
   } catch (error) {
diff --git a/app/api/identity/sync/route.ts b/app/api/identity/sync/route.ts
deleted file mode 100644
index af0514ac..00000000
--- a/app/api/identity/sync/route.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import { NextRequest, NextResponse } from "next/server";
-import { getAuthenticatedIdentity } from "@/lib/authentication/session";
-import { resolveProviderIdentity } from "@/lib/identity/provider-user";
-import { enrollAuthenticatedUser } from "@/lib/access/enrollment";
-import {
-  safeIdentityReturnTo,
-  isProtocolReturnPath,
-} from "@/lib/identity/sync-return";
-import { getAccessDecision } from "@/lib/access/service";
-import { getAdminPrincipalForUser } from "@/lib/admin/permissions";
-import { waitlistReturnPath } from "@/lib/waitlist/return-path";
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-export async function GET(request: NextRequest) {
-  // In-flight transactions from the retired Auth0 waitlist CTA return to the
-  // email form. Auth0 remains Console's authentication authority.
-  if (request.nextUrl.searchParams.get("from") === "waitlist")
-    return NextResponse.redirect(
-      new URL(waitlistReturnPath(request.nextUrl.searchParams), request.url)
-    );
-  const returnTo = safeIdentityReturnTo(
-    request.nextUrl.searchParams.get("returnTo")
-  );
-  const identity = await getAuthenticatedIdentity();
-  if (!identity) {
-    const login = new URL("/login", request.url);
-    login.searchParams.set("returnTo", returnTo);
-    return NextResponse.redirect(login);
-  }
-  let destination = "/access-pending";
-  try {
-    const canonical = await resolveProviderIdentity(identity);
-    await enrollAuthenticatedUser(identity, canonical);
-    const decision = await getAccessDecision(canonical.userId);
-    if (decision.state === "approved")
-      destination = (await getAdminPrincipalForUser(canonical.userId))
-        ? "/admin"
-        : "/home";
-    if (returnTo === "/waitlist") destination = "/waitlist";
-  } catch (error) {
-    console.error("identity_sync_failed", {
-      errorType: error instanceof Error ? error.name : "unknown",
-    });
-  }
-  return NextResponse.redirect(
-    new URL(
-      isProtocolReturnPath(returnTo) ? returnTo : destination,
-      request.url
-    )
-  );
-}
diff --git a/app/api/pymthouse/account-requests/route.ts b/app/api/pymthouse/account-requests/route.ts
index f79d2150..c55fd49b 100644
--- a/app/api/pymthouse/account-requests/route.ts
+++ b/app/api/pymthouse/account-requests/route.ts
@@ -4,12 +4,12 @@ import { fetchAccountRequestsForExternalUser } from "@/lib/console/pymthouse-bff
 import { requireConsoleSession } from "@/lib/console/session-user";
 import { AccessError } from "@/lib/access/service";
 import { configuredPymthouseScope } from "@/lib/external-accounts/service";
+import { sanitizeBillingReceipt } from "@/lib/console/billing-receipts";
 import {
   existingRunGatewayIds,
   recordRunUsage,
   resolveRunOwner,
 } from "@/lib/runs/store";
-import type { JsonValue } from "@/lib/runs/types";
 import {
   PYMTHOUSE_NO_STORE_HEADERS,
   pymthouseErrorResponse,
@@ -53,6 +53,7 @@ export async function GET(request: NextRequest) {
         email: session.email,
         cursor: next,
         limit,
+        ...(includeCorrelated ? { recentWindow: true } : {}),
       });
       if (
         payload.externalUserId !== session.externalUserId ||
@@ -66,42 +67,14 @@ export async function GET(request: NextRequest) {
       );
       await recordRunUsage(
         owner,
-        scoped
-          .map((item) => {
-            const metadata: Record<string, JsonValue> = {};
-            for (const key of [
-              "networkFeeUsdMicros",
-              "feeWei",
-              "ethUsdPrice",
-              "pixels",
-            ] as const) {
-              const value = item[key];
-              if (
-                typeof value === "string" &&
-                value.length <= 128 &&
-                /^\d+(?:\.\d+)?$/.test(value)
-              )
-                metadata[key] = value;
-            }
-            return {
-              eventId: item.eventId,
-              gatewayRequestId: item.gatewayRequestId,
-              metadata,
-            };
-          })
-          .filter(
-            (ticket) =>
-              typeof ticket.eventId === "string" &&
-              ticket.eventId.length > 0 &&
-              ticket.eventId.length <= 512 &&
-              typeof ticket.gatewayRequestId === "string" &&
-              ticket.gatewayRequestId.length > 0 &&
-              ticket.gatewayRequestId.length <= 512
-          )
+        scoped.map(sanitizeBillingReceipt).filter((ticket) => ticket !== null)
       );
       if (includeCorrelated) {
         return NextResponse.json(
-          { ...payload, items: scoped },
+          {
+            ...payload,
+            items: await attachOutputsToTickets(session.externalUserId, scoped),
+          },
           { headers: PYMTHOUSE_NO_STORE_HEADERS }
         );
       }
diff --git a/app/api/pymthouse/account-usage/route.ts b/app/api/pymthouse/account-usage/route.ts
index fb6938df..eb10447c 100644
--- a/app/api/pymthouse/account-usage/route.ts
+++ b/app/api/pymthouse/account-usage/route.ts
@@ -5,6 +5,10 @@ import {
   PYMTHOUSE_NO_STORE_HEADERS,
   pymthouseErrorResponse,
 } from "@/app/api/pymthouse/route-helpers";
+import {
+  previewAccountUsage,
+  previewFixturesEnabled,
+} from "@/lib/runs/preview-fixtures";
 
 export const runtime = "nodejs";
 export const dynamic = "force-dynamic";
@@ -37,6 +41,17 @@ export async function GET(request: NextRequest) {
 
   try {
     const session = await requireConsoleSession();
+    if (previewFixturesEnabled()) {
+      return NextResponse.json(
+        previewAccountUsage({
+          externalUserId: session.externalUserId,
+          periodDays,
+          window,
+          includePrior,
+        }),
+        { headers: PYMTHOUSE_NO_STORE_HEADERS }
+      );
+    }
     const payload = await fetchAccountUsageForExternalUser({
       externalUserId: session.externalUserId,
       periodDays,
diff --git a/app/layout.tsx b/app/layout.tsx
index cd0eed2c..d613f9b9 100644
--- a/app/layout.tsx
+++ b/app/layout.tsx
@@ -1,6 +1,7 @@
 import type { Metadata } from "next";
 import type { CSSProperties } from "react";
 import { Toaster } from "sonner";
+import { TooltipProvider } from "@/components/ui/tooltip";
 import "./globals.css";
 
 const SITE_TITLE = "Livepeer Early Access";
@@ -62,7 +63,7 @@ export default function RootLayout({
         <script dangerouslySetInnerHTML={{ __html: THEME_INIT_SCRIPT }} />
       </head>
       <body className="min-h-screen bg-background font-sans text-foreground antialiased">
-        {children}
+        <TooltipProvider>{children}</TooltipProvider>
         <Toaster
           position="bottom-center"
           theme="system"
diff --git a/components/admin/RunsPreview.tsx b/components/admin/RunsPreview.tsx
index ffd6c6cc..5d260a90 100644
--- a/components/admin/RunsPreview.tsx
+++ b/components/admin/RunsPreview.tsx
@@ -179,6 +179,7 @@ export default function RunsPreview() {
         </section>
       </div>
       <CallDetailDrawer
+        variant="admin"
         row={selectedRow}
         rows={rows}
         open={!!selected}
diff --git a/components/admin/SelectionCheckbox.tsx b/components/admin/SelectionCheckbox.tsx
index db19ebdc..2e1d2186 100644
--- a/components/admin/SelectionCheckbox.tsx
+++ b/components/admin/SelectionCheckbox.tsx
@@ -10,7 +10,8 @@ type Props = Omit<
   indeterminate?: boolean;
 };
 
-/** Native checkbox semantics with a stable, explicit checkmark color. */
+/** Native checkbox semantics with a stable, explicit checkmark color.
+ * `autoComplete="off"` stops Firefox from restoring `disabled` across reload. */
 export default function SelectionCheckbox({
   checked,
   indeterminate = false,
@@ -27,6 +28,7 @@ export default function SelectionCheckbox({
         type="checkbox"
         checked={checked}
         disabled={disabled}
+        autoComplete="off"
         ref={(node) => {
           if (node) node.indeterminate = indeterminate;
         }}
diff --git a/components/console/CallDetailDrawer.tsx b/components/console/CallDetailDrawer.tsx
index 381c4e0e..de33bf88 100644
--- a/components/console/CallDetailDrawer.tsx
+++ b/components/console/CallDetailDrawer.tsx
@@ -8,25 +8,45 @@ import {
   type ReactNode,
   type WheelEvent as ReactWheelEvent,
 } from "react";
-import { createPortal } from "react-dom";
+import { ArrowUpRight, Info } from "lucide-react";
 import { formatCallMetric } from "@/lib/console/utils";
-import Tooltip from "@/components/design-system/Tooltip";
+import ModalityChip from "@/components/console/ModalityChip";
+import { LivepeerSymbol } from "@/components/design-system/LivepeerLogo";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Dialog, DialogContent, DialogTitle } from "@/components/ui/dialog";
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipTrigger,
+} from "@/components/ui/tooltip";
 import {
   mediaSpecForRow,
   STATUS_LABEL,
   type MediaSpec,
 } from "@/lib/console/activity-media";
 import type { AccountActivityRow } from "@/lib/console/types";
-import { mediaRetentionNotice } from "@/lib/console/media-retention";
-import type { RunDetail } from "@/lib/runs/types";
+import type {
+  RunDetail,
+  RunInputFieldSchema,
+  RunInputSchema,
+} from "@/lib/runs/types";
 import { requestFeeDisplay } from "@/lib/console/request-fee-display";
+import { capabilityPresentation } from "@/lib/console/capability-modality";
+import { useTickWhileActive } from "@/components/console/useTickWhileActive";
 
 function safeMediaUrl(value: string | undefined): string | undefined {
   try {
     const url = new URL(value ?? "");
-    return url.protocol === "https:" && !url.username && !url.password
-      ? url.href
-      : undefined;
+    const local =
+      process.env.NODE_ENV !== "production" &&
+      typeof window !== "undefined" &&
+      ["localhost", "127.0.0.1", "[::1]"].includes(window.location.hostname) &&
+      url.origin === window.location.origin &&
+      url.protocol === "http:";
+    if ((!local && url.protocol !== "https:") || url.username || url.password)
+      return undefined;
+    return url.href;
   } catch {
     return undefined;
   }
@@ -66,10 +86,26 @@ function CapabilityChip({ children }: { children: ReactNode }) {
   );
 }
 
-function EmptyOutput() {
+function MediaUnavailable() {
+  return (
+    <div className="flex h-full w-full flex-col items-center justify-center gap-4 bg-foreground/[0.015] text-fg-muted">
+      <LivepeerSymbol
+        className="h-14 w-auto text-foreground/15"
+        aria-hidden="true"
+      />
+      <p className="text-sm">Media unavailable</p>
+    </div>
+  );
+}
+
+function MediaLoading() {
   return (
-    <div className="flex h-full w-full items-center justify-center text-sm text-fg-muted">
-      No output stored for this job
+    <div className="flex h-full w-full flex-col items-center justify-center gap-4 bg-foreground/[0.015] text-fg-muted">
+      <LivepeerSymbol
+        className="h-14 w-auto text-foreground/15"
+        aria-hidden="true"
+      />
+      <p className="text-sm">Loading media…</p>
     </div>
   );
 }
@@ -89,7 +125,15 @@ function PreviewLoader() {
   );
 }
 
-function ImagePreview({ src, title }: { src: string; title: string }) {
+function ImagePreview({
+  src,
+  title,
+  onUnavailable,
+}: {
+  src: string;
+  title: string;
+  onUnavailable: () => void;
+}) {
   const [failed, setFailed] = useState(false);
   const [loaded, setLoaded] = useState(false);
 
@@ -99,11 +143,7 @@ function ImagePreview({ src, title }: { src: string; title: string }) {
   }, [src]);
 
   if (failed) {
-    return (
-      <div className="flex h-full w-full items-center justify-center text-sm text-fg-muted">
-        Preview unavailable
-      </div>
-    );
+    return <MediaUnavailable />;
   }
 
   return (
@@ -114,7 +154,10 @@ function ImagePreview({ src, title }: { src: string; title: string }) {
         alt={title}
         decoding="async"
         onLoad={() => setLoaded(true)}
-        onError={() => setFailed(true)}
+        onError={() => {
+          setFailed(true);
+          onUnavailable();
+        }}
         className={`h-full w-full object-contain object-top lg:object-center ${
           loaded ? "opacity-100" : "opacity-0"
         }`}
@@ -123,23 +166,73 @@ function ImagePreview({ src, title }: { src: string; title: string }) {
   );
 }
 
-function VideoPreview({ src }: { src?: string }) {
-  if (!src) return <EmptyOutput />;
+function VideoPreview({
+  src,
+  onUnavailable,
+}: {
+  src?: string;
+  onUnavailable: () => void;
+}) {
+  const [failed, setFailed] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    setFailed(false);
+    setLoaded(false);
+  }, [src]);
+
+  if (!src || failed) return <MediaUnavailable />;
   return (
-    <video
-      src={src}
-      controls
-      playsInline
-      className="h-full w-full bg-background object-contain"
-    />
+    <div className="relative h-full w-full">
+      {!loaded && <MediaLoading />}
+      <video
+        src={src}
+        controls={loaded}
+        playsInline
+        onCanPlay={() => setLoaded(true)}
+        onError={() => {
+          setFailed(true);
+          onUnavailable();
+        }}
+        className={`absolute inset-0 h-full w-full bg-background object-contain ${
+          loaded ? "opacity-100" : "pointer-events-none opacity-0"
+        }`}
+      />
+    </div>
   );
 }
 
-function AudioPreview({ src }: { src?: string }) {
-  if (!src) return <EmptyOutput />;
+function AudioPreview({
+  src,
+  onUnavailable,
+}: {
+  src?: string;
+  onUnavailable: () => void;
+}) {
+  const [failed, setFailed] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+
+  useEffect(() => {
+    setFailed(false);
+    setLoaded(false);
+  }, [src]);
+
+  if (!src || failed) return <MediaUnavailable />;
   return (
-    <div className="flex w-full max-w-3xl flex-col gap-5 rounded-[6px] bg-black/20 px-8 py-7">
-      <audio src={src} controls className="w-full" />
+    <div className="relative flex h-full w-full items-center justify-center">
+      {!loaded && <MediaLoading />}
+      <audio
+        src={src}
+        controls={loaded}
+        onCanPlay={() => setLoaded(true)}
+        onError={() => {
+          setFailed(true);
+          onUnavailable();
+        }}
+        className={`absolute w-full max-w-3xl rounded-[6px] bg-black/20 px-8 py-7 ${
+          loaded ? "opacity-100" : "pointer-events-none opacity-0"
+        }`}
+      />
     </div>
   );
 }
@@ -160,46 +253,800 @@ function JsonPreview({ value }: { value: unknown }) {
   );
 }
 
-function MediaStage({ media }: { media: MediaSpec }) {
-  const retentionNotice = mediaRetentionNotice(
-    media.imageUrl ?? media.videoUrl ?? media.audioUrl
+function remainingTime(expiresAt: string, now: number): string | null {
+  const remaining = Date.parse(expiresAt) - now;
+  if (!Number.isFinite(remaining) || remaining <= 0) return null;
+  const seconds = Math.ceil(remaining / 1000);
+  const days = Math.floor(seconds / 86_400);
+  const hours = Math.floor((seconds % 86_400) / 3_600);
+  const minutes = Math.floor((seconds % 3_600) / 60);
+  const trailingSeconds = seconds % 60;
+  return [days, hours, minutes, trailingSeconds]
+    .map((part) => String(part).padStart(2, "0"))
+    .join(":");
+}
+
+function MediaExpiry({ remaining }: { remaining: string }) {
+  return (
+    <p className="absolute left-1/2 top-3 w-fit -translate-x-1/2 whitespace-nowrap rounded-md bg-background/90 px-3 py-2 text-center text-xs tabular-nums text-muted-foreground shadow-sm backdrop-blur-sm">
+      Expires in {remaining}
+    </p>
   );
+}
+
+type DisplayField = {
+  label: string;
+  value: string;
+  path?: string;
+  kind?: "text" | "asset" | "setting";
+  href?: string;
+  timestamp?: string;
+};
+
+const FIELD_HELP: Array<[RegExp, string]> = [
+  [/^Modality$/, "The input and output media category for this capability."],
+  [/^Agent prompt$/, "The enriched instruction submitted by the agent."],
+  [
+    /^Agent negative prompt$/,
+    "What the render should avoid. Leave empty when the capability does not require one.",
+  ],
+  [
+    /^Keyframe \d+$/,
+    "A referenced image placed at this elapsed timestamp. Other keyframes may be added when supported.",
+  ],
+  [
+    /^(Image|Video|Audio|Mask)$/,
+    "Existing media supplied to this run. It may come from an upload or an earlier platform result.",
+  ],
+  [
+    /^Duration$/,
+    "Requested output length. Available values depend on the selected capability.",
+  ],
+  [
+    /^Aspect Ratio$/,
+    "Sets the shape of the generated frame. Available values depend on the selected capability.",
+  ],
+  [
+    /^Image Size$/,
+    "Output dimensions or preset. Alternatives are defined by the selected image capability.",
+  ],
+  [
+    /^Num Images$/,
+    "Number of outputs requested, when batch generation is supported.",
+  ],
+  [
+    /^Seed$/,
+    "Controls repeatability. Use another integer for a different variation.",
+  ],
+  [
+    /^Generate Audio$/,
+    "Adds model-generated sound to the video. When set to true, describe any important sounds in the agent prompt. You can select true or false.",
+  ],
+  [
+    /^Loop$/,
+    "Makes the video repeat continuously. When set to true, the final frame transitions back to the first, so the first and last keyframes should describe a compatible scene. You can select true or false.",
+  ],
+  [
+    /^Diarize$/,
+    "Separates different speakers in the transcript. When set to true, each detected speaker receives its own label. You can select true or false.",
+  ],
+  [
+    /^Include Streams$/,
+    "Includes details about each audio, video, and subtitle stream found in the media. You can select true or false.",
+  ],
+  [
+    /^Include Format$/,
+    "Includes details about the media container, such as its duration and file format. You can select true or false.",
+  ],
+  [
+    /^Generate Texture$/,
+    "Adds surface color and material detail to the generated 3D model. When set to true, the result also includes texture data. You can select true or false.",
+  ],
+  [
+    /^Interpolation · Easing$/,
+    "Controls how motion speeds up and slows down between keyframes. Available values depend on the selected capability.",
+  ],
+  [
+    /^Interpolation · Motion Strength$/,
+    "How strongly motion is introduced between frames, typically from 0 to 1.",
+  ],
+  [
+    /^Fps$/,
+    "Output frames per second. Available values depend on the selected capability.",
+  ],
+  [
+    /^Language$/,
+    "Spoken-language hint. Available values depend on the selected capability.",
+  ],
+  [
+    /^Timestamp Granularity$/,
+    "Sets how precisely the transcript is timed. You can select segment or word timestamps.",
+  ],
+  [
+    /^Batch Size$/,
+    "Items processed together. Larger values may use more memory.",
+  ],
+  [
+    /^Topology$/,
+    "The requested mesh structure. Available topology modes depend on the 3D capability.",
+  ],
+  [
+    /^Target Face Count$/,
+    "Approximate polygon budget requested for the generated mesh.",
+  ],
+  [
+    /^Texture Resolution$/,
+    "Requested texture size, subject to capability limits.",
+  ],
+  [/^Price$/, "The final network charge recorded for this run."],
+  [
+    /^Render status$/,
+    "Amount of time it took the model to generate your request.",
+  ],
+];
+
+function readableOption(value: string | number | boolean | null): string {
+  return value === null ? "null" : String(value);
+}
+
+function readableList(values: string[]): string {
+  if (values.length < 2) return values[0] ?? "";
+  if (values.length === 2) return `${values[0]} or ${values[1]}`;
+  return `${values.slice(0, -1).join(", ")}, or ${values.at(-1)}`;
+}
+
+function matchingSchemaField(
+  path: string | undefined,
+  schema: RunInputSchema | null | undefined
+): RunInputFieldSchema | null {
+  if (!path || !schema) return null;
+  const normalized = path.replace(/\.\d+(?=\.|$)/g, ".*");
+  const candidates = [normalized];
+  let parent = normalized;
+  while (parent.includes(".")) {
+    parent = parent.slice(0, parent.lastIndexOf("."));
+    candidates.push(parent);
+  }
+  for (const candidate of candidates) {
+    const field = schema.fields.find((item) => item.path === candidate);
+    if (
+      field &&
+      (field.description ||
+        field.options.length ||
+        field.types.includes("boolean") ||
+        field.minimum !== undefined ||
+        field.maximum !== undefined ||
+        field.exclusiveMinimum !== undefined ||
+        field.exclusiveMaximum !== undefined ||
+        field.defaultValue !== undefined)
+    ) {
+      return field;
+    }
+  }
+  return null;
+}
+
+function schemaFieldHelp(
+  field: DisplayField,
+  schema: RunInputSchema | null | undefined
+): FieldHelp | null {
+  const metadata = matchingSchemaField(field.path, schema);
+  if (!metadata) return null;
+  const sentences: string[] = [];
+  if (metadata.description) {
+    sentences.push(
+      /[.!?]$/.test(metadata.description)
+        ? metadata.description
+        : `${metadata.description}.`
+    );
+  }
+
+  const options = metadata.options.map(readableOption);
+  if (!options.length && metadata.types.includes("boolean")) {
+    options.push("true", "false");
+  }
+
+  const minimum = metadata.minimum ?? metadata.exclusiveMinimum;
+  const maximum = metadata.maximum ?? metadata.exclusiveMaximum;
+  if (minimum !== undefined && maximum !== undefined) {
+    sentences.push(`Enter a value from ${minimum} to ${maximum}.`);
+  } else if (minimum !== undefined) {
+    sentences.push(`Enter a value greater than or equal to ${minimum}.`);
+  } else if (maximum !== undefined) {
+    sentences.push(`Enter a value less than or equal to ${maximum}.`);
+  }
+
+  if (metadata.types.includes("object") && field.path && schema) {
+    const prefix = `${metadata.path}.`;
+    const customFields = schema.fields
+      .filter(
+        (candidate) =>
+          candidate.path.startsWith(prefix) &&
+          !candidate.path.slice(prefix.length).includes(".")
+      )
+      .map(
+        (candidate) =>
+          candidate.title?.trim().toLowerCase() ||
+          candidate.path.slice(prefix.length).replace(/_/g, " ")
+      );
+    if (customFields.length) {
+      const customList =
+        customFields.length === 2
+          ? `${customFields[0]} and ${customFields[1]}`
+          : readableList(customFields);
+      sentences.push(`You can also provide custom ${customList} values.`);
+    }
+  }
+
+  if (metadata.required) sentences.push("This input is required.");
+  if (metadata.defaultValue !== undefined) {
+    sentences.push(`The default is ${String(metadata.defaultValue)}.`);
+  }
+  const description = sentences.join(" ");
+  return description || options.length ? { description, options } : null;
+}
+
+type FieldHelp = { description: string; options: string[] };
+
+function fieldHelp(
+  field: DisplayField,
+  schema?: RunInputSchema | null
+): FieldHelp {
+  const dynamic = schemaFieldHelp(field, schema);
+  if (dynamic) return dynamic;
+  const description =
+    FIELD_HELP.find(([pattern]) => pattern.test(field.label))?.[1] ??
+    `A submitted ${field.label.toLowerCase()} value. Available alternatives depend on the selected capability.`;
+  const boolean = field.value === "true" || field.value === "false";
+  return {
+    description: boolean
+      ? description.replace(/\s*You can select true or false\.$/, "")
+      : description,
+    options: boolean ? ["true", "false"] : [],
+  };
+}
+
+function FieldLabel({
+  field,
+  schema,
+}: {
+  field: DisplayField;
+  schema?: RunInputSchema | null;
+}) {
+  const help = fieldHelp(field, schema);
+  return (
+    <div className="flex items-center gap-1.5">
+      <p className="text-xs text-fg-muted">{field.label}</p>
+      <Tooltip>
+        <TooltipTrigger
+          render={
+            <button
+            type="button"
+            aria-label={`About ${field.label}`}
+            className="inline-flex items-center justify-center text-foreground/25 transition-colors hover:text-foreground/45 focus-visible:rounded-full focus-visible:text-foreground/45 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-foreground/20"
+            />
+          }
+        >
+            <Info className="h-3.5 w-3.5" aria-hidden="true" />
+        </TooltipTrigger>
+        <TooltipContent
+          side="right"
+          sideOffset={8}
+          className="z-[120] max-h-[min(70vh,28rem)] w-64 overflow-y-auto p-0 text-left leading-4 text-pretty"
+        >
+          <div
+            data-slot="tooltip-body"
+            className="flex w-full items-start gap-3 px-3 pt-3 pb-4"
+          >
+            {help.description && (
+              <p className="min-w-0 flex-1">{help.description}</p>
+            )}
+            {help.options.length > 0 && (
+              <div
+                className="flex w-[7.5rem] flex-none flex-col items-start gap-1 self-start"
+                aria-label="Options"
+              >
+                {help.options.map((option) => (
+                  <Badge
+                    key={option}
+                    variant="secondary"
+                    className="h-5 bg-white/10 px-1.5 text-[11px] font-normal text-white hover:bg-white/10"
+                  >
+                    {option}
+                  </Badge>
+                ))}
+              </div>
+            )}
+          </div>
+        </TooltipContent>
+      </Tooltip>
+    </div>
+  );
+}
+
+function fieldLabel(path: string[]): string {
+  return path
+    .map((part) =>
+      part
+        .replace(/[_-]+/g, " ")
+        .replace(/\b\w/g, (letter) => letter.toUpperCase())
+    )
+    .join(" · ");
+}
+
+function assetFieldLabel(path: string[]): string {
+  const assetPath = [...path];
+  const last = assetPath.at(-1);
+  if (last) assetPath[assetPath.length - 1] = last.replace(/_?urls?$/i, "");
+  return fieldLabel(assetPath);
+}
+
+type AssetReference = { id: string; displayName: string | null };
+
+function assetReferenceFromUrl(
+  value: string,
+  assets: Map<string, AssetReference>
+): AssetReference | null {
+  const known = assets.get(value);
+  if (known) return known;
+  try {
+    const url = new URL(value);
+    const trusted = [...assets.keys()].some((known) => {
+      try {
+        return new URL(known).origin === url.origin;
+      } catch {
+        return false;
+      }
+    });
+    if (!trusted || url.username || url.password) return null;
+    const match = url.pathname.match(/^\/api\/assets\/([^/]+)$/);
+    const id = match ? decodeURIComponent(match[1]!) : null;
+    return [...assets.values()].find((asset) => asset.id === id) ?? null;
+  } catch {
+    return null;
+  }
+}
+
+function mediaTimestamp(value: unknown): string | null {
+  const numeric = typeof value === "number" ? value : Number(value);
+  if (!Number.isFinite(numeric) || numeric < 0) return null;
+  const totalSeconds = Math.floor(numeric);
+  const hours = Math.floor(totalSeconds / 3_600);
+  const minutes = Math.floor((totalSeconds % 3_600) / 60);
+  const seconds = totalSeconds % 60;
+  const parts = [
+    String(minutes).padStart(2, "0"),
+    String(seconds).padStart(2, "0"),
+  ];
+  if (hours) parts.unshift(String(hours).padStart(2, "0"));
+  return parts.join(":");
+}
+
+function promptFields(value: unknown): DisplayField[] {
+  const fields: DisplayField[] = [];
+  const seen = new Set<string>();
+  const visit = (item: unknown, path: string[]) => {
+    if (!item || typeof item !== "object" || Array.isArray(item)) return;
+    for (const [key, child] of Object.entries(item)) {
+      const next = [...path, key];
+      if (/prompt$/i.test(key) && typeof child === "string" && child.trim()) {
+        const signature = `${key.toLowerCase()}:${child}`;
+        if (!seen.has(signature)) {
+          seen.add(signature);
+          fields.push({
+            label: fieldLabel([key]),
+            value: child,
+            path: next.join("."),
+          });
+        }
+      } else {
+        visit(child, next);
+      }
+    }
+  };
+  visit(value, []);
+  return fields;
+}
+
+function dataFields(
+  value: unknown,
+  assets: Map<string, AssetReference>,
+  root: string[] = []
+): DisplayField[] {
+  const fields: DisplayField[] = [];
+  const visit = (item: unknown, path: string[]) => {
+    if (/prompt$/i.test(path.at(-1) ?? "")) return;
+    if (typeof item === "string") {
+      const asset = assetReferenceFromUrl(item, assets);
+      if (asset) {
+        fields.push({
+          label: assetFieldLabel(path),
+          value: asset.displayName ?? asset.id,
+          path: path.join("."),
+          kind: "asset",
+          href: item,
+        });
+        return;
+      }
+    }
+    if (Array.isArray(item)) {
+      const visible = item;
+      if (!visible.length) return;
+      if (
+        /keyframes?$/i.test(path.at(-1) ?? "") &&
+        visible.every(
+          (child) => child && typeof child === "object" && !Array.isArray(child)
+        )
+      ) {
+        visible.forEach((child, index) => {
+          const keyframe = child as Record<string, unknown>;
+          const timestamp = mediaTimestamp(
+            keyframe.timestamp_seconds ?? keyframe.timestamp ?? keyframe.time
+          );
+          const assetUrl = [
+            keyframe.image_url,
+            keyframe.imageUrl,
+            keyframe.url,
+          ].find(
+            (candidate): candidate is string => typeof candidate === "string"
+          );
+          const asset = assetUrl
+            ? assetReferenceFromUrl(assetUrl, assets)
+            : null;
+          if (timestamp && asset) {
+            fields.push({
+              label: `Keyframe ${index + 1}`,
+              value: asset.displayName ?? asset.id,
+              path: [...path, "*"].join("."),
+              kind: "asset",
+              href: assetUrl,
+              timestamp,
+            });
+          } else {
+            visit(child, [...path, String(index + 1)]);
+          }
+        });
+        return;
+      }
+      if (
+        visible.every((child) => child === null || typeof child !== "object")
+      ) {
+        const assetItems = visible.map((child) =>
+          typeof child === "string"
+            ? { url: child, asset: assetReferenceFromUrl(child, assets) }
+            : null
+        );
+        const allAssets = assetItems.every((item) => Boolean(item?.asset));
+        if (allAssets) {
+          assetItems.forEach((item, index) => {
+            if (!item?.asset) return;
+            fields.push({
+              label:
+                assetItems.length > 1
+                  ? `${assetFieldLabel(path)} ${index + 1}`
+                  : assetFieldLabel(path),
+              value: item.asset.displayName ?? item.asset.id,
+              path: path.join("."),
+              kind: "asset",
+              href: item.url,
+            });
+          });
+          return;
+        }
+        const values = visible.map((child) =>
+          typeof child === "string"
+            ? (assetReferenceFromUrl(child, assets)?.displayName ??
+              assetReferenceFromUrl(child, assets)?.id ??
+              child)
+            : String(child)
+        );
+        fields.push({
+          label: fieldLabel(path),
+          value: values.join(", "),
+          path: path.join("."),
+          kind: "text",
+        });
+      } else {
+        visible.forEach((child, index) =>
+          visit(child, [...path, String(index + 1)])
+        );
+      }
+      return;
+    }
+    if (item && typeof item === "object") {
+      for (const [key, child] of Object.entries(item)) {
+        if (path.length === 0 && key === "capability") continue;
+        visit(child, [...path, key]);
+      }
+      return;
+    }
+    if (path.length) {
+      const milliseconds =
+        /(?:inference|processing).*(?:time|duration).*ms$/i.test(
+          path.join("_")
+        );
+      const numeric = typeof item === "number" ? item : Number.NaN;
+      fields.push({
+        label: milliseconds ? "Inference time" : fieldLabel(path),
+        path: path.join("."),
+        value:
+          milliseconds && Number.isFinite(numeric)
+            ? `${(numeric / 1000).toLocaleString(undefined, {
+                maximumFractionDigits: 2,
+              })} seconds`
+            : item === null
+              ? "None"
+              : String(item),
+      });
+    }
+  };
+  visit(value, root);
+  return fields;
+}
+
+function FieldSection({
+  title,
+  fields,
+}: {
+  title: string;
+  fields: DisplayField[];
+}) {
+  if (!fields.length) return null;
+  return (
+    <section className="mt-5" aria-label={title}>
+      <h3 className="text-xs font-medium text-fg-muted">{title}</h3>
+      <dl className="mt-2 overflow-hidden rounded-md border border-hairline bg-foreground/[0.02]">
+        {fields.map((field, index) => (
+          <div
+            key={`${field.label}-${index}`}
+            className="border-b border-hairline px-3 py-2.5 last:border-b-0"
+          >
+            <dt className="text-[11px] text-fg-muted">{field.label}</dt>
+            <dd className="mt-1 whitespace-pre-wrap break-words text-sm leading-5 text-fg">
+              {field.value}
+            </dd>
+          </div>
+        ))}
+      </dl>
+    </section>
+  );
+}
+
+function UserHistoryDetails({
+  row,
+  cost,
+  prompts,
+  parameters,
+  inference,
+  loading,
+  error,
+  onRetry,
+  errorCode,
+  errorMessage,
+  inputSchema,
+}: {
+  row: AccountActivityRow;
+  cost: string | undefined;
+  prompts: DisplayField[];
+  parameters: DisplayField[];
+  inference: DisplayField[];
+  loading: boolean;
+  error?: string | null;
+  onRetry?: () => void;
+  errorCode?: string | null;
+  errorMessage?: string | null;
+  inputSchema?: RunInputSchema | null;
+}) {
+  const primaryPrompts = prompts.filter(
+    (field) => !/negative/i.test(field.label)
+  );
+  const negativePrompts = prompts.filter((field) =>
+    /negative/i.test(field.label)
+  );
+  const inferenceValue = inference[0]?.value;
+  const capability = capabilityPresentation(row.model, row.modality);
+  const fields = [
+    ...primaryPrompts.map((field) => ({ ...field, label: "Agent prompt" })),
+    ...negativePrompts.map((field) => ({
+      ...field,
+      label: "Agent negative prompt",
+    })),
+    ...parameters.map((field) =>
+      field.kind === "asset" || field.href
+        ? field
+        : { ...field, kind: "setting" as const }
+    ),
+    ...(cost ? [{ label: "Cost", value: cost }] : []),
+    ...(inferenceValue
+      ? [{ label: "Render status", value: inferenceValue }]
+      : []),
+  ];
+
+  return (
+    <div className="space-y-6">
+      <div>
+        <div className="flex flex-wrap items-center gap-2">
+          <h2 className="text-base font-medium leading-6 text-fg">
+            {capability.title}
+          </h2>
+          <ModalityChip>{row.modality}</ModalityChip>
+        </div>
+      </div>
+
+      {loading && (
+        <p role="status" className="text-sm text-fg-muted">
+          Loading run details…
+        </p>
+      )}
+      {error && (
+        <p role="alert" className="text-sm text-fg-muted">
+          {error}{" "}
+          <button type="button" onClick={onRetry} className="underline">
+            Retry
+          </button>
+        </p>
+      )}
+
+      {fields.map((field, index) => (
+        <div key={`${field.label}-${index}`}>
+          <FieldLabel field={field} schema={inputSchema} />
+          {field.href && safeMediaUrl(field.href) ? (
+            <div className="mt-1 flex min-w-0 items-center gap-2">
+              {field.timestamp && (
+                <Badge
+                  variant="secondary"
+                  className="h-5 shrink-0 px-1.5 font-mono text-[11px] tabular-nums text-fg-muted"
+                >
+                  {field.timestamp}
+                </Badge>
+              )}
+              <a
+                href={safeMediaUrl(field.href)}
+                target="_blank"
+                rel="noopener noreferrer"
+                title={field.value}
+                className="inline-flex min-w-0 items-center gap-1 text-xs leading-5 text-fg underline decoration-foreground/25 underline-offset-2 hover:decoration-foreground/70"
+              >
+                <span className="min-w-0 truncate">{field.value}</span>
+                <ArrowUpRight
+                  className="h-3.5 w-3.5 shrink-0"
+                  aria-hidden="true"
+                />
+              </a>
+            </div>
+          ) : (
+            <>
+              {field.timestamp && (
+                <Badge
+                  variant="secondary"
+                  className="mt-1 h-5 px-1.5 font-mono text-[11px] tabular-nums text-fg-muted"
+                >
+                  {field.timestamp}
+                </Badge>
+              )}
+              {field.kind === "setting" ? (
+                <Badge
+                  variant="secondary"
+                  title={field.value}
+                  className="mt-1 h-5 max-w-full px-1.5 text-xs text-fg-muted"
+                >
+                  {field.value}
+                </Badge>
+              ) : (
+                <p className="mt-1 whitespace-pre-wrap text-[15px] leading-6 text-fg">
+                  {field.value}
+                </p>
+              )}
+            </>
+          )}
+        </div>
+      ))}
+
+      {errorCode && (
+        <div>
+          <FieldLabel field={{ label: "Render status", value: "" }} />
+          <p
+            role="alert"
+            className="mt-1 whitespace-pre-wrap text-[15px] leading-6 text-red-400"
+          >
+            {errorMessage ?? errorCode}
+          </p>
+        </div>
+      )}
+    </div>
+  );
+}
+
+function MediaStage({
+  media,
+  expiresAt,
+  unavailable,
+  allowDataPreview,
+  loading,
+}: {
+  media: MediaSpec;
+  expiresAt?: string | null;
+  unavailable?: boolean;
+  allowDataPreview: boolean;
+  loading: boolean;
+}) {
+  const [mediaFailed, setMediaFailed] = useState(false);
+  const now = useTickWhileActive(Boolean(expiresAt));
+  const expiryRemaining = expiresAt ? remainingTime(expiresAt, now) : null;
+  const expired = Boolean(expiresAt && !expiryRemaining);
+  const hasRenderableSource =
+    (media.kind === "image" && Boolean(media.imageUrl)) ||
+    (media.kind === "video" && Boolean(media.videoUrl)) ||
+    (media.kind === "audio" && Boolean(media.audioUrl)) ||
+    (allowDataPreview &&
+      ((media.kind === "text" && Boolean(media.text)) ||
+        media.kind === "json"));
+  const canRender =
+    !unavailable && !expired && !mediaFailed && hasRenderableSource;
+
   return (
     <div className="relative flex aspect-video w-full min-h-0 min-w-0 items-start justify-center overflow-auto bg-background lg:aspect-auto lg:h-full lg:items-center">
-      {media.kind === "image" &&
+      {loading && <MediaLoading />}
+      {!loading && !canRender && <MediaUnavailable />}
+      {!loading &&
+        canRender &&
+        media.kind === "image" &&
         (media.imageUrl ? (
-          <ImagePreview src={media.imageUrl} title={media.title} />
+          <ImagePreview
+            src={media.imageUrl}
+            title={media.title}
+            onUnavailable={() => setMediaFailed(true)}
+          />
         ) : (
-          <EmptyOutput />
+          <MediaUnavailable />
         ))}
-      {media.kind === "video" && <VideoPreview src={media.videoUrl} />}
-      {media.kind === "audio" && <AudioPreview src={media.audioUrl} />}
-      {media.kind === "text" &&
-        (media.text ? <TextPreview text={media.text} /> : <EmptyOutput />)}
-      {media.kind === "json" && <JsonPreview value={media.json} />}
-      {retentionNotice && (
-        <p className="absolute bottom-3 left-3 right-3 rounded-md bg-background/90 px-3 py-2 text-center text-xs text-muted-foreground">
-          {retentionNotice}
-        </p>
+      {!loading && canRender && media.kind === "video" && (
+        <VideoPreview
+          src={media.videoUrl}
+          onUnavailable={() => setMediaFailed(true)}
+        />
+      )}
+      {!loading && canRender && media.kind === "audio" && (
+        <AudioPreview
+          src={media.audioUrl}
+          onUnavailable={() => setMediaFailed(true)}
+        />
+      )}
+      {!loading && canRender && media.kind === "text" && media.text && (
+        <TextPreview text={media.text} />
+      )}
+      {!loading && canRender && media.kind === "json" && (
+        <JsonPreview value={media.json} />
+      )}
+      {!loading && canRender && expiryRemaining && (
+        <MediaExpiry remaining={expiryRemaining} />
       )}
     </div>
   );
 }
 
-function canScrollWithin(target: EventTarget, deltaY: number): boolean {
+function isWithinDetailPanel(target: EventTarget): boolean {
   if (!(target instanceof HTMLElement)) return false;
-  const scrollTarget = target.closest<HTMLElement>("[data-detail-scroll]");
-  if (!scrollTarget) return false;
-  if (scrollTarget.scrollHeight <= scrollTarget.clientHeight) return false;
-
-  if (deltaY > 0) {
-    return (
-      scrollTarget.scrollTop + scrollTarget.clientHeight <
-      scrollTarget.scrollHeight - 1
-    );
-  }
+  return Boolean(target.closest<HTMLElement>("[data-detail-scroll]"));
+}
 
-  return scrollTarget.scrollTop > 0;
+function mediaSpecForAsset(
+  media: MediaSpec,
+  asset: RunDetail["assets"][number] | undefined
+): MediaSpec {
+  const url = safeMediaUrl(asset?.url);
+  if (!asset || !url) return media;
+  const type = asset.mediaType?.toLowerCase() ?? "";
+  if (type === "image" || type.startsWith("image/")) {
+    return { ...media, kind: "image", imageUrl: url };
+  }
+  if (type === "video" || type.startsWith("video/")) {
+    return { ...media, kind: "video", videoUrl: url };
+  }
+  if (type === "audio" || type.startsWith("audio/")) {
+    return { ...media, kind: "audio", audioUrl: url };
+  }
+  return media;
 }
 
 function HistoryEntryRail({
@@ -264,6 +1111,7 @@ export default function CallDetailDrawer({
   detailLoading = false,
   detailError,
   onRetryDetail,
+  variant = "user",
 }: {
   row: AccountActivityRow | null;
   rows?: AccountActivityRow[];
@@ -274,10 +1122,8 @@ export default function CallDetailDrawer({
   detailLoading?: boolean;
   detailError?: string | null;
   onRetryDetail?: () => void;
+  variant?: "user" | "admin";
 }) {
-  const [mounted, setMounted] = useState(false);
-  const panelRef = useRef<HTMLDivElement>(null);
-  const previousActiveRef = useRef<HTMLElement | null>(null);
   const wheelDeltaRef = useRef(0);
   const lastWheelNavigationRef = useRef(0);
   const [selectedAsset, setSelectedAsset] = useState<{
@@ -285,13 +1131,16 @@ export default function CallDetailDrawer({
     id: string;
   } | null>(null);
   const activeDetail = detail?.id === row?.id ? detail : null;
+  const outputAssets = activeDetail?.assets.filter(
+    (item) => item.role !== "input"
+  );
   const asset =
-    activeDetail?.assets.find(
+    outputAssets?.find(
       (item) =>
         selectedAsset &&
         selectedAsset.runId === row?.id &&
         item.id === selectedAsset.id
-    ) ?? activeDetail?.assets[0];
+    ) ?? outputAssets?.find((item) => /^(?:image|video|audio)(?:\/|$)/i.test(item.mediaType ?? "")) ?? outputAssets?.[0];
   let media = row
     ? mediaSpecForRow({
         ...row,
@@ -299,6 +1148,7 @@ export default function CallDetailDrawer({
         outputUrl: safeMediaUrl(asset?.url ?? row.outputUrl),
       })
     : null;
+  if (media) media = mediaSpecForAsset(media, asset);
   if (row && activeDetail && !asset) {
     media = {
       kind: "json",
@@ -309,7 +1159,7 @@ export default function CallDetailDrawer({
       metricValue: activeDetail.result ? "Recorded" : "Not available",
       source: row.signerLabel,
       json:
-        activeDetail.result ??
+        activeDetail.result?.value ??
         (activeDetail.errorCode
           ? {
               error: activeDetail.errorCode,
@@ -318,41 +1168,32 @@ export default function CallDetailDrawer({
           : { status: activeDetail.status, result: null }),
     };
   }
-
-  useEffect(() => {
-    setMounted(true);
-    return () => setMounted(false);
-  }, []);
-
-  useEffect(() => {
-    if (!open) return;
-    const original = document.body.style.overflow;
-    document.body.style.overflow = "hidden";
-    return () => {
-      document.body.style.overflow = original;
-    };
-  }, [open]);
-
-  useEffect(() => {
-    if (!open) return;
-    const handler = (event: KeyboardEvent) => {
-      if (event.key === "Escape") onClose();
-    };
-    document.addEventListener("keydown", handler);
-    return () => document.removeEventListener("keydown", handler);
-  }, [open, onClose]);
-
-  useEffect(() => {
-    if (open) {
-      previousActiveRef.current = document.activeElement as HTMLElement | null;
-      requestAnimationFrame(() =>
-        panelRef.current?.focus({ preventScroll: true })
-      );
-    } else if (previousActiveRef.current) {
-      previousActiveRef.current.focus?.({ preventScroll: true });
-      previousActiveRef.current = null;
-    }
-  }, [open]);
+  const assetReferences = new Map(
+    activeDetail?.assets.map(
+      (item) =>
+        [
+          item.url,
+          { id: item.id, displayName: item.displayName ?? null },
+        ] as const
+    ) ?? []
+  );
+  const submittedPrompts = promptFields(activeDetail?.submittedArguments);
+  const submittedInputs = activeDetail?.submittedArguments?.inputs;
+  const submittedFields = dataFields(
+    submittedInputs && typeof submittedInputs === "object"
+      ? submittedInputs
+      : activeDetail?.submittedArguments,
+    assetReferences
+  );
+  const returnedFields = dataFields(
+    activeDetail?.result?.value,
+    assetReferences
+  );
+  const inferenceFields = returnedFields.filter(
+    (field) => field.label === "Inference time"
+  );
+  const costDisplay = row?.costDisplay;
+  const costExact = row?.costExact;
 
   const selectAdjacentRow = useCallback(
     (offset: number) => {
@@ -377,7 +1218,7 @@ export default function CallDetailDrawer({
       !onSelectRow ||
       rows.length <= 1 ||
       window.matchMedia("(max-width: 1023px)").matches ||
-      canScrollWithin(event.target, event.deltaY)
+      isWithinDetailPanel(event.target)
     ) {
       return;
     }
@@ -394,271 +1235,320 @@ export default function CallDetailDrawer({
     wheelDeltaRef.current = 0;
   };
 
-  if (!mounted) return null;
-
-  return createPortal(
-    <div
-      className={`fixed inset-0 z-[100] flex items-center justify-center bg-black p-3 pt-14 transition-opacity duration-200 sm:p-6 sm:pt-16 ${
-        open ? "visible opacity-100" : "invisible opacity-0"
-      }`}
-      aria-hidden={!open}
-    >
-      <button
-        type="button"
-        tabIndex={-1}
-        aria-label="Close detail"
-        onClick={onClose}
-        className="absolute inset-0 h-full w-full cursor-default bg-transparent"
-      />
-      <button
-        type="button"
+  return (
+    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
+      <DialogContent
+        showCloseButton={false}
+        onWheel={handleWheel}
+        className="fixed inset-0 top-0 left-0 z-[100] flex h-dvh w-screen max-w-none translate-x-0 translate-y-0 items-center justify-center gap-0 rounded-none bg-black p-3 pt-14 shadow-none ring-0 sm:max-w-none sm:p-6 sm:pt-16"
+      >
+      <DialogTitle className="sr-only">
+        {row ? `${row.model} detail` : "Run detail"}
+      </DialogTitle>
+      <Button
+        variant="ghost"
         onClick={onClose}
-        className="absolute left-1/2 top-3 z-20 inline-flex -translate-x-1/2 items-center gap-1.5 text-sm font-medium text-white transition-colors hover:text-white/70 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-white/40 sm:top-4"
+        className="absolute left-1/2 top-3 z-20 -translate-x-1/2 gap-1.5 text-sm font-medium text-white hover:bg-transparent hover:text-white/70 sm:top-4"
       >
         <span aria-hidden="true">&larr;</span>
         Return to dashboard
-      </button>
+      </Button>
 
       {row && media && (
-        <div
-          ref={panelRef}
-          role="dialog"
-          aria-modal="true"
-          aria-label={`${row.model} detail`}
-          tabIndex={-1}
-          onWheel={handleWheel}
-          className={`relative z-10 flex max-h-[calc(100dvh-68px)] w-[min(1240px,calc(100vw-32px))] items-stretch gap-3 overflow-y-auto outline-none transition-[opacity,transform] duration-200 ease-out sm:max-h-[calc(100dvh-96px)] lg:h-[calc(100dvh-96px)] lg:max-h-[760px] lg:overflow-visible ${
-            open ? "scale-100 opacity-100" : "scale-[0.98] opacity-0"
-          }`}
-        >
+          <div className="relative z-10 flex max-h-[calc(100dvh-68px)] w-[min(1240px,calc(100vw-32px))] items-stretch gap-3 overflow-y-auto outline-none sm:max-h-[calc(100dvh-96px)] lg:h-[calc(100dvh-96px)] lg:max-h-[760px] lg:overflow-visible">
           <div className="grid h-auto min-w-0 flex-1 grid-rows-[auto_auto] overflow-hidden rounded-sm bg-background shadow-2xl shadow-black/55 lg:h-full lg:grid-cols-[minmax(0,1fr)_350px] lg:grid-rows-none">
-            <MediaStage key={row.id} media={media} />
+            <MediaStage
+              key={`${row.id}-${asset?.id ?? "none"}`}
+              media={media}
+              expiresAt={asset?.expiresAt}
+              unavailable={Boolean(asset?.unavailableAt)}
+              allowDataPreview={variant === "admin"}
+              loading={detailLoading}
+            />
 
             <aside className="flex min-h-0 flex-col border-t border-hairline bg-background lg:border-l lg:border-t-0">
               <dl
                 className="min-h-0 overflow-y-auto px-5 py-5"
                 data-detail-scroll
               >
-                <DetailRow label="Capability">
-                  <CapabilityChip>{row.model}</CapabilityChip>
-                </DetailRow>
-                <DetailRow label="Modality">
-                  <CapabilityChip>{row.modality}</CapabilityChip>
-                </DetailRow>
-                <DetailRow label="Job">
-                  <span className="font-mono text-[13px] tabular-nums">
-                    {row.gatewayRequestId ?? row.id}
-                  </span>
-                </DetailRow>
-                {row.providerRequestId ? (
-                  <DetailRow label="Request">
-                    <span className="font-mono text-[13px] tabular-nums">
-                      {row.providerRequestId}
-                    </span>
-                  </DetailRow>
-                ) : null}
-                <DetailRow label="Format">{media.format}</DetailRow>
-                <DetailRow label={media.metricLabel}>
-                  {media.metricValue}
-                </DetailRow>
-                <DetailRow label="Source">{media.source}</DetailRow>
-                <DetailRow label="Status">{STATUS_LABEL[row.status]}</DetailRow>
-                <DetailRow label={row.kind === "live" ? "Duration" : "Latency"}>
-                  {formatCallMetric(row)}
-                </DetailRow>
-                <DetailRow label="Cost">
-                  {row.costExact && row.costExact !== row.costDisplay ? (
-                    <Tooltip
-                      content={
-                        <span className="font-mono tabular-nums">
-                          {row.costExact}
-                        </span>
-                      }
-                      side="left"
-                    >
-                      <span className="cursor-help font-mono tabular-nums">
-                        {row.costDisplay}
-                      </span>
-                    </Tooltip>
-                  ) : (
-                    row.costDisplay
-                  )}
-                </DetailRow>
-                <DetailRow label="Time">
-                  {formatTimestamp(row.timestamp)}
-                </DetailRow>
-                {row.recordKind === "usage" && (
-                  <p className="mt-4 text-xs text-fg-muted">
-                    Usage-only record. Execution outcome and submitted arguments
-                    were not captured.
-                  </p>
-                )}
-                {detailLoading && (
-                  <p role="status" className="mt-4 text-xs text-fg-muted">
-                    Loading run details…
-                  </p>
-                )}
-                {detailError && (
-                  <p role="alert" className="mt-4 text-xs text-fg-muted">
-                    {detailError}{" "}
-                    <button
-                      type="button"
-                      onClick={onRetryDetail}
-                      className="underline"
-                    >
-                      Retry
-                    </button>
-                  </p>
+                {variant === "user" && (
+                  <UserHistoryDetails
+                    row={row}
+                    cost={costDisplay}
+                    prompts={submittedPrompts}
+                    parameters={submittedFields}
+                    inference={inferenceFields}
+                    loading={detailLoading}
+                    error={detailError}
+                    onRetry={onRetryDetail}
+                    errorCode={activeDetail?.errorCode}
+                    errorMessage={activeDetail?.errorMessage}
+                    inputSchema={activeDetail?.inputSchema}
+                  />
                 )}
-                {activeDetail && (
+                {variant === "admin" && (
                   <>
-                    <DetailRow label="Run">
-                      <span className="break-all font-mono text-xs">
-                        {activeDetail.id}
-                      </span>
+                    <DetailRow label="Capability">
+                      <CapabilityChip>{row.model}</CapabilityChip>
                     </DetailRow>
-                    {activeDetail.assets.length > 0 && (
-                      <div className="mt-4 space-y-2">
-                        <p className="text-xs text-fg-muted">Assets</p>
-                        {activeDetail.assets.map((item, index) => (
-                          <div
-                            key={item.id}
-                            className="flex flex-wrap items-center gap-2 text-xs"
-                          >
-                            <button
-                              type="button"
-                              aria-pressed={asset?.id === item.id}
-                              onClick={() =>
-                                setSelectedAsset({
-                                  runId: activeDetail.id,
-                                  id: item.id,
-                                })
+                    <DetailRow label="Modality">
+                      <CapabilityChip>{row.modality}</CapabilityChip>
+                    </DetailRow>
+                    {variant === "admin" && (
+                      <DetailRow label="Job">
+                        <span className="font-mono text-[13px] tabular-nums">
+                          {row.gatewayRequestId ?? row.id}
+                        </span>
+                      </DetailRow>
+                    )}
+                    {variant === "admin" && row.providerRequestId ? (
+                      <DetailRow label="Request">
+                        <span className="font-mono text-[13px] tabular-nums">
+                          {row.providerRequestId}
+                        </span>
+                      </DetailRow>
+                    ) : null}
+                    {variant === "admin" && (
+                      <>
+                        <DetailRow label="Format">{media.format}</DetailRow>
+                        <DetailRow label={media.metricLabel}>
+                          {media.metricValue}
+                        </DetailRow>
+                        <DetailRow label="Source">{media.source}</DetailRow>
+                        <DetailRow label="Status">
+                          {STATUS_LABEL[row.status]}
+                        </DetailRow>
+                        <DetailRow
+                          label={row.kind === "live" ? "Duration" : "Latency"}
+                        >
+                          {formatCallMetric(row)}
+                        </DetailRow>
+                      </>
+                    )}
+                    <DetailRow label="Cost">
+                      {costExact && costExact !== costDisplay ? (
+                        <Tooltip>
+                          <TooltipTrigger
+                              render={
+                                <button
+                                  type="button"
+                                  className="cursor-help rounded font-mono tabular-nums focus-visible:outline focus-visible:outline-2 focus-visible:outline-ring"
+                                />
                               }
-                              className="rounded bg-foreground/3 px-2 py-1"
-                            >
-                              Output {index + 1}
-                            </button>
-                            {safeMediaUrl(item.url) && (
-                              <a
-                                href={safeMediaUrl(item.url)}
-                                target="_blank"
-                                rel="noopener noreferrer"
-                                className="underline"
-                              >
-                                Open media
-                              </a>
-                            )}
-                            {item.hiddenAt && (
-                              <span className="text-fg-muted">
-                                Hidden from library
-                              </span>
-                            )}
-                          </div>
-                        ))}
-                        {asset?.expiresAt && (
-                          <p className="text-xs text-fg-muted">
-                            Provider expiry: {formatTimestamp(asset.expiresAt)}
+                          >
+                              {costDisplay}
+                          </TooltipTrigger>
+                          <TooltipContent side="left">
+                            <span className="font-mono tabular-nums">
+                              {costExact}
+                            </span>
+                          </TooltipContent>
+                        </Tooltip>
+                      ) : (
+                        costDisplay
+                      )}
+                    </DetailRow>
+                    {variant === "admin" && (
+                      <DetailRow label="Time">
+                        {formatTimestamp(row.timestamp)}
+                      </DetailRow>
+                    )}
+                    {row.recordKind === "usage" && (
+                      <p className="mt-4 text-xs text-fg-muted">
+                        Usage-only record. Execution outcome and submitted
+                        arguments were not captured.
+                      </p>
+                    )}
+                    {detailLoading && (
+                      <p role="status" className="mt-4 text-xs text-fg-muted">
+                        Loading run details…
+                      </p>
+                    )}
+                    {detailError && (
+                      <p role="alert" className="mt-4 text-xs text-fg-muted">
+                        {detailError}{" "}
+                        <button
+                          type="button"
+                          onClick={onRetryDetail}
+                          className="underline"
+                        >
+                          Retry
+                        </button>
+                      </p>
+                    )}
+                    {activeDetail && (
+                      <>
+                        {variant === "admin" && (
+                          <DetailRow label="Run">
+                            <span className="break-all font-mono text-xs">
+                              {activeDetail.id}
+                            </span>
+                          </DetailRow>
+                        )}
+                        {variant === "admin" &&
+                          activeDetail.assets.length > 0 && (
+                            <div className="mt-4 space-y-2">
+                              <p className="text-xs font-medium text-fg-muted">
+                                Assets
+                              </p>
+                              {activeDetail.assets.map((item, index) => (
+                                <div
+                                    key={`${item.role}:${item.id}:${index}`}
+                                  className="rounded-md border border-hairline bg-foreground/[0.02] p-3 text-xs"
+                                >
+                                  <div className="flex items-center justify-between gap-2">
+                                    <button
+                                      type="button"
+                                      aria-pressed={asset?.id === item.id}
+                                      onClick={() =>
+                                        setSelectedAsset({
+                                          runId: activeDetail.id,
+                                          id: item.id,
+                                        })
+                                      }
+                                      className="min-w-0 truncate font-mono text-fg underline-offset-2 hover:underline"
+                                    >
+                                      {item.id}
+                                    </button>
+                                    <span className="shrink-0 text-fg-muted">
+                                        {item.role === "input"
+                                          ? "Input"
+                                          : "Output"}{" "}
+                                        {
+                                          activeDetail.assets
+                                            .slice(0, index + 1)
+                                            .filter(
+                                              (candidate) =>
+                                                (candidate.role === "input") ===
+                                                (item.role === "input")
+                                            ).length
+                                        }
+                                    </span>
+                                  </div>
+                                  {safeMediaUrl(item.url) && (
+                                    <a
+                                      href={safeMediaUrl(item.url)}
+                                      target="_blank"
+                                      rel="noopener noreferrer"
+                                      className="mt-2 block truncate font-mono text-[11px] text-fg-muted underline"
+                                    >
+                                      {item.url}
+                                    </a>
+                                  )}
+                                  {item.hiddenAt && (
+                                    <span className="text-fg-muted">
+                                      Hidden from library
+                                    </span>
+                                  )}
+                                </div>
+                              ))}
+                              {asset?.expiresAt && (
+                                <p className="text-xs text-fg-muted">
+                                  Provider expiry:{" "}
+                                  {formatTimestamp(asset.expiresAt)}
+                                </p>
+                              )}
+                              {asset?.unavailableAt && (
+                                <p className="text-xs text-fg-muted">
+                                  Media unavailable; reference retained.
+                                </p>
+                              )}
+                            </div>
+                          )}
+                        <FieldSection
+                          title="Submitted prompts"
+                          fields={submittedPrompts}
+                        />
+                        <FieldSection
+                          title="Request parameters"
+                          fields={submittedFields}
+                        />
+                        <FieldSection
+                            title={
+                              variant === "admin" ? "Response" : "Inference"
+                            }
+                          fields={
+                            variant === "admin"
+                              ? returnedFields
+                              : inferenceFields
+                          }
+                        />
+                        {variant === "admin" &&
+                          activeDetail.events.some(
+                            (event) => event.metadata.kind === "billing_usage"
+                          ) && (
+                            <details className="mt-5 text-xs" open>
+                              <summary className="cursor-pointer font-medium">
+                                Observed usage
+                              </summary>
+                              <p className="mt-2 text-fg-muted">
+                                Billing receipts matched by gateway ID, not
+                                additional executions. These may not represent
+                                the final total.
+                              </p>
+                              <ul className="mt-2 space-y-2">
+                                {activeDetail.events
+                                  .filter(
+                                    (event) =>
+                                      event.metadata.kind === "billing_usage"
+                                  )
+                                  .map((event) => (
+                                    <li key={event.id} className="break-all">
+                                      {typeof event.metadata
+                                        .networkFeeUsdMicros === "string"
+                                        ? requestFeeDisplay({
+                                            networkFeeUsdMicros:
+                                              event.metadata
+                                                .networkFeeUsdMicros,
+                                            feeWei:
+                                              typeof event.metadata.feeWei ===
+                                              "string"
+                                                ? event.metadata.feeWei
+                                                : undefined,
+                                            ethUsdPrice:
+                                              typeof event.metadata
+                                                .ethUsdPrice === "string"
+                                                ? event.metadata.ethUsdPrice
+                                                : undefined,
+                                          }).exact
+                                        : "Amount unavailable"}{" "}
+                                      · {formatTimestamp(event.createdAt)}
+                                    </li>
+                                  ))}
+                              </ul>
+                            </details>
+                          )}
+                        {activeDetail.captureRedactedPaths.length > 0 && (
+                          <p className="mt-2 break-words text-xs text-fg-muted">
+                            Redacted or omitted:{" "}
+                            {activeDetail.captureRedactedPaths.join(", ")}
                           </p>
                         )}
-                        {asset?.unavailableAt && (
-                          <p className="text-xs text-fg-muted">
-                            Media unavailable; reference retained.
+                        {activeDetail.errorCode && (
+                          <p className="mt-4 break-words text-xs text-fg-muted">
+                            {activeDetail.errorCode}
+                            {activeDetail.errorMessage
+                              ? `: ${activeDetail.errorMessage}`
+                              : ""}
                           </p>
                         )}
-                      </div>
-                    )}
-                    {activeDetail.events.some(
-                      (event) => event.metadata.kind === "billing_usage"
-                    ) && (
-                      <details className="mt-5 text-xs" open>
-                        <summary className="cursor-pointer font-medium">
-                          Observed usage
-                        </summary>
-                        <p className="mt-2 text-fg-muted">
-                          Billing receipts matched by gateway ID, not additional
-                          executions. These may not represent the final total.
-                        </p>
-                        <ul className="mt-2 space-y-2">
-                          {activeDetail.events
-                            .filter(
-                              (event) => event.metadata.kind === "billing_usage"
-                            )
-                            .map((event) => (
-                              <li key={event.id} className="break-all">
-                                {typeof event.metadata.networkFeeUsdMicros ===
-                                "string"
-                                  ? requestFeeDisplay({
-                                      networkFeeUsdMicros:
-                                        event.metadata.networkFeeUsdMicros,
-                                      feeWei:
-                                        typeof event.metadata.feeWei ===
-                                        "string"
-                                          ? event.metadata.feeWei
-                                          : undefined,
-                                      ethUsdPrice:
-                                        typeof event.metadata.ethUsdPrice ===
-                                        "string"
-                                          ? event.metadata.ethUsdPrice
-                                          : undefined,
-                                    }).exact
-                                  : "Amount unavailable"}{" "}
+                        <details className="mt-5 text-xs">
+                          <summary className="cursor-pointer font-medium">
+                            Run timeline
+                          </summary>
+                          <ol className="mt-2 space-y-2">
+                            {activeDetail.events.map((event) => (
+                              <li key={event.id}>
+                                {event.metadata.kind === "billing_usage"
+                                  ? "Usage receipt recorded"
+                                  : event.status}{" "}
                                 · {formatTimestamp(event.createdAt)}
                               </li>
                             ))}
-                        </ul>
-                      </details>
-                    )}
-                    <details className="mt-5 text-xs" open>
-                      <summary className="cursor-pointer font-medium">
-                        Submitted JSON
-                      </summary>
-                      <JsonPreview
-                        value={
-                          activeDetail.submittedArguments ?? {
-                            capture: "not_available",
-                          }
-                        }
-                      />
-                    </details>
-                    {activeDetail.captureRedactedPaths.length > 0 && (
-                      <p className="mt-2 break-words text-xs text-fg-muted">
-                        Redacted or omitted:{" "}
-                        {activeDetail.captureRedactedPaths.join(", ")}
-                      </p>
-                    )}
-                    <details className="mt-5 text-xs">
-                      <summary className="cursor-pointer font-medium">
-                        Returned JSON
-                      </summary>
-                      <JsonPreview
-                        value={
-                          activeDetail.result ?? { capture: "not_available" }
-                        }
-                      />
-                    </details>
-                    {activeDetail.errorCode && (
-                      <p className="mt-4 break-words text-xs text-fg-muted">
-                        {activeDetail.errorCode}
-                        {activeDetail.errorMessage
-                          ? `: ${activeDetail.errorMessage}`
-                          : ""}
-                      </p>
+                          </ol>
+                        </details>
+                      </>
                     )}
-                    <details className="mt-5 text-xs">
-                      <summary className="cursor-pointer font-medium">
-                        Run timeline
-                      </summary>
-                      <ol className="mt-2 space-y-2">
-                        {activeDetail.events.map((event) => (
-                          <li key={event.id}>
-                            {event.metadata.kind === "billing_usage"
-                              ? "Usage receipt recorded"
-                              : event.status}{" "}
-                            · {formatTimestamp(event.createdAt)}
-                          </li>
-                        ))}
-                      </ol>
-                    </details>
                   </>
                 )}
               </dl>
@@ -671,7 +1561,7 @@ export default function CallDetailDrawer({
           />
         </div>
       )}
-    </div>,
-    document.body
+      </DialogContent>
+    </Dialog>
   );
 }
diff --git a/components/console/CallsSection.tsx b/components/console/CallsSection.tsx
index d4bc8c7d..2dbc4d2d 100644
--- a/components/console/CallsSection.tsx
+++ b/components/console/CallsSection.tsx
@@ -1,12 +1,11 @@
 "use client";
-import { useMemo } from "react";
+import { useEffect, useMemo, useRef } from "react";
 import { useRouter, useSearchParams } from "next/navigation";
 import { Search, X } from "lucide-react";
 import SectionHeader from "@/components/console/SectionHeader";
 import CallsTable from "@/components/console/CallsTable";
 import CallDetailDrawer from "@/components/console/CallDetailDrawer";
 import { useAuth } from "@/components/console/AuthContext";
-import { useAccountRequests } from "@/lib/console/useAccountRequests";
 import { useRunDetail, useRunHistory } from "@/lib/console/useRunHistory";
 import { runToActivity } from "@/lib/console/run-activity";
 import type { AccountActivityRow } from "@/lib/console/types";
@@ -28,48 +27,70 @@ export default function CallsSection({
     },
     ownerKey
   );
-  // Correlate billing receipts with saved runs; billing is not a second history feed.
-  const billing = useAccountRequests(isConnected, ownerKey, true);
-  const billingRows = billing.status === "ready" ? billing.rows : null;
-  const feeByGateway = useMemo(() => {
-    const fees = new Map<string, { costDisplay: string; costExact?: string }>();
-    if (!billingRows) return fees;
-    for (const row of billingRows) {
-      if (!row.gatewayRequestId || row.costDisplay === "—") continue;
-      fees.set(row.gatewayRequestId, {
-        costDisplay: row.costDisplay,
-        ...(row.costExact ? { costExact: row.costExact } : {}),
-      });
-    }
-    return fees;
-  }, [billingRows]);
-  const router = useRouter();
   const requestId = useSearchParams().get("request");
-  const recorded = useMemo(
-    () =>
-      history.page?.items.map((run) =>
-        runToActivity(run, feeByGateway.get(run.gatewayRequestId))
-      ) ?? [],
-    [history.page, feeByGateway]
-  );
-  const rows = recorded;
-  const found = rows.find(
-    (row) => row.id === requestId || row.gatewayRequestId === requestId
-  );
   const detail = useRunDetail(
     "/api/console/runs",
     requestId,
     ownerKey,
     isConnected
   );
+  const historyReload = history.reload;
+  const detailReload = detail.reload;
+  const visibleRunIds = useMemo(() => {
+    const ids = history.page?.items.map((run) => run.id) ?? [];
+    return requestId
+      ? [requestId, ...ids.filter((id) => id !== requestId)]
+      : ids;
+  }, [history.page, requestId]);
+  const visibleRunKey = visibleRunIds.slice(0, 50).join(",");
+  const openDetailIdRef = useRef<string | null>(null);
+  const detailReloadRef = useRef(detailReload);
+  openDetailIdRef.current = detail.detail?.id ?? null;
+  detailReloadRef.current = detailReload;
+  useEffect(() => {
+    if (!isConnected || !ownerKey || !visibleRunKey) return;
+    const controller = new AbortController();
+    const refresh = async () => {
+      try {
+        const response = await fetch("/api/console/runs/billing-sync", {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ runIds: visibleRunKey.split(",") }),
+          cache: "no-store",
+          signal: controller.signal,
+        });
+        if (!response.ok) throw new Error("billing_unavailable");
+        const result = (await response.json()) as {
+          changedRunIds: string[];
+        };
+        if (controller.signal.aborted) return;
+        if (result.changedRunIds.length) {
+          historyReload();
+          const openId = openDetailIdRef.current;
+          if (openId && result.changedRunIds.includes(openId))
+            detailReloadRef.current();
+        }
+      } catch {
+        // Preserve saved History during an outage; the job writes usage.
+      }
+    };
+    void refresh();
+    return () => controller.abort();
+  }, [historyReload, isConnected, ownerKey, visibleRunKey]);
+  const router = useRouter();
+  const recorded = useMemo(
+    () => history.page?.items.map((run) => runToActivity(run)) ?? [],
+    [history.page]
+  );
+  const rows = recorded;
+  const found = rows.find(
+    (row) => row.id === requestId || row.gatewayRequestId === requestId
+  );
   const openRow =
     detail.detail &&
     (detail.detail.id === requestId ||
       detail.detail.gatewayRequestId === requestId)
-      ? runToActivity(
-          detail.detail,
-          feeByGateway.get(detail.detail.gatewayRequestId)
-        )
+      ? runToActivity(detail.detail)
       : (found ?? null);
   const select = (row: AccountActivityRow) =>
     router.push("/home?request=" + encodeURIComponent(row.id), {
@@ -134,9 +155,11 @@ export default function CallsSection({
           onSelectRow={select}
         />
         {!history.loading && !history.error && !recorded.length && (
-          <p className="px-7 py-8 text-sm text-fg-faint">
-            {query ? "No history matches this search." : "No history yet."}
-          </p>
+          <div className="px-7 py-8 text-sm text-fg-faint">
+            <p>
+              {query ? "No history matches this search." : "No history yet."}
+            </p>
+          </div>
         )}
         {history.page?.nextCursor && (
           <div className="flex justify-center py-3">
diff --git a/components/console/CallsTable.tsx b/components/console/CallsTable.tsx
index eeeb3c1c..f346f029 100644
--- a/components/console/CallsTable.tsx
+++ b/components/console/CallsTable.tsx
@@ -5,7 +5,12 @@ import type { ReactNode } from "react";
 import { formatCallMetric, formatRunRelativeTime } from "@/lib/console/utils";
 import EnvTag from "@/components/console/EnvTag";
 import StatusDot from "@/components/console/StatusDot";
-import Tooltip from "@/components/design-system/Tooltip";
+import ModalityChip from "@/components/console/ModalityChip";
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipTrigger,
+} from "@/components/ui/tooltip";
 import { useTickWhileActive } from "@/components/console/useTickWhileActive";
 import type { AccountActivityRow } from "@/lib/console/types";
 import { STATUS_LABEL } from "@/lib/console/activity-media";
@@ -93,13 +98,21 @@ function HistoryCost({
   }
   return (
     <span className="justify-self-end">
-      <Tooltip
-        content={
+      <Tooltip>
+        <TooltipTrigger
+          render={
+            <button
+              type="button"
+              aria-label={`Exact cost ${row.costExact}`}
+              className="relative z-10 pointer-events-auto rounded focus-visible:outline focus-visible:outline-2 focus-visible:outline-ring"
+            />
+          }
+        >
+          {amount}
+        </TooltipTrigger>
+        <TooltipContent side="left">
           <span className="font-mono tabular-nums">{row.costExact}</span>
-        }
-        side="left"
-      >
-        {amount}
+        </TooltipContent>
       </Tooltip>
     </span>
   );
@@ -217,13 +230,9 @@ export default function CallsTable({
               <span className="min-w-0 truncate font-medium text-fg-strong">
                 {row.model}
               </span>
-              <span
-                className={`inline-flex h-[18px] shrink-0 items-center rounded-[3px] px-1.5 font-mono text-[10.5px] text-fg-faint ${
-                  compact ? "bg-foreground/3" : "border border-hairline"
-                }`}
-              >
+              <ModalityChip appearance={compact ? "filled" : "outlined"}>
                 {pipelineLabel}
-              </span>
+              </ModalityChip>
               {showEnvironment && <EnvTag environmentId={row.environmentId} />}
               {row.recordKind && (
                 <span className="shrink-0 text-[11.5px] font-normal text-fg-faint">
@@ -256,25 +265,25 @@ export default function CallsTable({
             )}
           </>
         );
-        return onSelectRow ? (
-          <button
-            key={row.id}
-            type="button"
-            aria-label={`Inspect ${row.id}`}
-            onClick={() => onSelectRow(row)}
-            className={`${rowClass} w-full text-left focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-inset focus-visible:ring-ring`}
-          >
-            {content}
-          </button>
-        ) : (
-          <Link
-            key={row.id}
-            href={`/home?request=${row.id}`}
-            scroll={false}
-            className={rowClass}
-          >
-            {content}
-          </Link>
+        return (
+          <div key={row.id} className={`${rowClass} relative`}>
+            {onSelectRow ? (
+              <button
+                type="button"
+                aria-label={`Inspect ${row.id}`}
+                onClick={() => onSelectRow(row)}
+                className="absolute inset-0 w-full rounded focus-visible:outline focus-visible:outline-2 focus-visible:outline-ring"
+              />
+            ) : (
+              <Link
+                href={`/home?request=${row.id}`}
+                aria-label={`Inspect ${row.id}`}
+                scroll={false}
+                className="absolute inset-0 rounded focus-visible:outline focus-visible:outline-2 focus-visible:outline-ring"
+              />
+            )}
+            <div className="contents pointer-events-none">{content}</div>
+          </div>
         );
       })}
     </section>
diff --git a/components/console/ModalityChip.tsx b/components/console/ModalityChip.tsx
new file mode 100644
index 00000000..d7d60498
--- /dev/null
+++ b/components/console/ModalityChip.tsx
@@ -0,0 +1,19 @@
+import type { ReactNode } from "react";
+
+export default function ModalityChip({
+  children,
+  appearance = "filled",
+}: {
+  children: ReactNode;
+  appearance?: "filled" | "outlined";
+}) {
+  return (
+    <span
+      className={`inline-flex h-[18px] shrink-0 items-center rounded-[3px] px-1.5 font-mono text-[10.5px] text-fg-faint ${
+        appearance === "filled" ? "bg-foreground/3" : "border border-hairline"
+      }`}
+    >
+      {children}
+    </span>
+  );
+}
diff --git a/components/design-system/Tooltip.tsx b/components/design-system/Tooltip.tsx
deleted file mode 100644
index fe2396ee..00000000
--- a/components/design-system/Tooltip.tsx
+++ /dev/null
@@ -1,158 +0,0 @@
-"use client";
-
-import {
-  Children,
-  cloneElement,
-  isValidElement,
-  useEffect,
-  useId,
-  useRef,
-  useState,
-  type ReactElement,
-  type ReactNode,
-} from "react";
-import { AnimatePresence, motion } from "framer-motion";
-
-type Side = "top" | "bottom" | "left" | "right";
-
-interface TooltipProps {
-  /** Content rendered inside the floating tooltip. */
-  content: ReactNode;
-  /**
-   * Single child that becomes the trigger. Tooltip wires up `aria-describedby`,
-   * `onMouseEnter/Leave`, `onFocus/Blur` to the child element directly so the
-   * trigger keeps its own focus ring and styling.
-   */
-  children: ReactElement<{
-    onMouseEnter?: (e: React.MouseEvent) => void;
-    onMouseLeave?: (e: React.MouseEvent) => void;
-    onFocus?: (e: React.FocusEvent) => void;
-    onBlur?: (e: React.FocusEvent) => void;
-    "aria-describedby"?: string;
-  }>;
-  /** Which side of the trigger the tooltip appears on. Default `top`. */
-  side?: Side;
-  /** Open delay (ms) when triggered by hover. Keyboard focus opens immediately. Default 200. */
-  delayMs?: number;
-  /** Optional className applied to the floating panel. */
-  className?: string;
-}
-
-const SIDE_POSITION: Record<Side, string> = {
-  top: "bottom-full left-1/2 -translate-x-1/2 mb-2",
-  bottom: "top-full left-1/2 -translate-x-1/2 mt-2",
-  left: "right-full top-1/2 -translate-y-1/2 mr-2",
-  right: "left-full top-1/2 -translate-y-1/2 ml-2",
-};
-
-const SIDE_ORIGIN: Record<Side, string> = {
-  top: "origin-bottom",
-  bottom: "origin-top",
-  left: "origin-right",
-  right: "origin-left",
-};
-
-/**
- * Tooltip — branded floating tooltip with hover + focus triggers.
- *
- * Replaces native `title=` attributes (which look like default browser
- * tooltips) and the hand-rolled hover-tooltip in `NetworkStatusDot`.
- *
- * Accessibility:
- *  - Wraps a single child trigger and binds `aria-describedby` to it
- *  - Opens on `mouseenter` after a delay, on `focus` immediately
- *  - Closes on `mouseleave`, `blur`, and `Escape`
- *
- * Positioning is CSS-based (no Floating UI). For surfaces that risk overflow
- * (e.g. tooltips near viewport edges), pass `side` explicitly.
- */
-export default function Tooltip({
-  content,
-  children,
-  side = "top",
-  delayMs = 200,
-  className = "",
-}: TooltipProps) {
-  const id = useId();
-  const [open, setOpen] = useState(false);
-  const timeoutRef = useRef<number | null>(null);
-
-  const cancelTimer = () => {
-    if (timeoutRef.current !== null) {
-      window.clearTimeout(timeoutRef.current);
-      timeoutRef.current = null;
-    }
-  };
-
-  useEffect(() => () => cancelTimer(), []);
-
-  useEffect(() => {
-    if (!open) return;
-    const onKey = (e: KeyboardEvent) => {
-      if (e.key === "Escape") setOpen(false);
-    };
-    document.addEventListener("keydown", onKey);
-    return () => document.removeEventListener("keydown", onKey);
-  }, [open]);
-
-  const child = Children.only(children);
-  if (!isValidElement(child)) return child;
-
-  const handleEnter = () => {
-    cancelTimer();
-    timeoutRef.current = window.setTimeout(() => setOpen(true), delayMs);
-  };
-  const handleLeave = () => {
-    cancelTimer();
-    setOpen(false);
-  };
-  const handleFocus = () => {
-    cancelTimer();
-    setOpen(true);
-  };
-  const handleBlur = () => {
-    cancelTimer();
-    setOpen(false);
-  };
-
-  const trigger = cloneElement(child, {
-    "aria-describedby": open ? id : undefined,
-    onMouseEnter: (e: React.MouseEvent) => {
-      child.props.onMouseEnter?.(e);
-      handleEnter();
-    },
-    onMouseLeave: (e: React.MouseEvent) => {
-      child.props.onMouseLeave?.(e);
-      handleLeave();
-    },
-    onFocus: (e: React.FocusEvent) => {
-      child.props.onFocus?.(e);
-      handleFocus();
-    },
-    onBlur: (e: React.FocusEvent) => {
-      child.props.onBlur?.(e);
-      handleBlur();
-    },
-  });
-
-  return (
-    <span className="relative inline-flex">
-      {trigger}
-      <AnimatePresence>
-        {open && (
-          <motion.span
-            id={id}
-            role="tooltip"
-            initial={{ opacity: 0, scale: 0.94 }}
-            animate={{ opacity: 1, scale: 1 }}
-            exit={{ opacity: 0, scale: 0.94 }}
-            transition={{ duration: 0.15, ease: [0.16, 1, 0.3, 1] }}
-            className={`pointer-events-none absolute z-50 whitespace-nowrap rounded-md border border-subtle bg-dark-card/95 px-2 py-1 text-[11px] font-medium text-fg-strong shadow-lg shadow-black/40 backdrop-blur-md ${SIDE_POSITION[side]} ${SIDE_ORIGIN[side]} ${className}`}
-          >
-            {content}
-          </motion.span>
-        )}
-      </AnimatePresence>
-    </span>
-  );
-}
diff --git a/components/ui/tooltip.tsx b/components/ui/tooltip.tsx
new file mode 100644
index 00000000..860844f1
--- /dev/null
+++ b/components/ui/tooltip.tsx
@@ -0,0 +1,67 @@
+"use client";
+
+import { Tooltip as TooltipPrimitive } from "@base-ui/react/tooltip";
+import { cn } from "@/lib/utils";
+
+function TooltipProvider({
+  delay = 0,
+  ...props
+}: TooltipPrimitive.Provider.Props) {
+  return (
+    <TooltipPrimitive.Provider
+      data-slot="tooltip-provider"
+      delay={delay}
+      {...props}
+    />
+  );
+}
+
+function Tooltip(props: TooltipPrimitive.Root.Props) {
+  return <TooltipPrimitive.Root data-slot="tooltip" {...props} />;
+}
+
+function TooltipTrigger(props: TooltipPrimitive.Trigger.Props) {
+  return <TooltipPrimitive.Trigger data-slot="tooltip-trigger" {...props} />;
+}
+
+function TooltipContent({
+  className,
+  side = "top",
+  sideOffset = 4,
+  align = "center",
+  alignOffset = 0,
+  children,
+  ...props
+}: TooltipPrimitive.Popup.Props &
+  Pick<
+    TooltipPrimitive.Positioner.Props,
+    "align" | "alignOffset" | "side" | "sideOffset"
+  >) {
+  return (
+    <TooltipPrimitive.Portal keepMounted>
+      <TooltipPrimitive.Positioner
+        data-slot="tooltip-positioner"
+        align={align}
+        alignOffset={alignOffset}
+        side={side}
+        sideOffset={sideOffset}
+        className="isolate z-[130]"
+      >
+        <TooltipPrimitive.Popup
+          role="tooltip"
+          data-slot="tooltip-content"
+          className={cn(
+            "z-50 inline-flex w-fit max-w-xs origin-(--transform-origin) items-center gap-1.5 rounded-sm bg-foreground px-3 py-1.5 text-xs text-background data-[state=delayed-open]:animate-in data-[state=delayed-open]:fade-in-0 data-open:animate-in data-open:fade-in-0 data-open:zoom-in-95 data-closed:animate-out data-closed:fade-out-0 data-closed:zoom-out-95",
+            className
+          )}
+          {...props}
+        >
+          {children}
+          <TooltipPrimitive.Arrow className="z-50 size-2.5 translate-y-[calc(-50%-2px)] rotate-45 rounded-[2px] bg-foreground fill-foreground" />
+        </TooltipPrimitive.Popup>
+      </TooltipPrimitive.Positioner>
+    </TooltipPrimitive.Portal>
+  );
+}
+
+export { Tooltip, TooltipTrigger, TooltipContent, TooltipProvider };
diff --git a/docs/early-access/run-records.md b/docs/early-access/run-records.md
index 9c614b41..56515abd 100644
--- a/docs/early-access/run-records.md
+++ b/docs/early-access/run-records.md
@@ -139,15 +139,82 @@ and keyset pagination. It does not render the upstream billing feed as a second
 section. Admin uses the same presentation/detail components, with user-email
 search and status filters. Billing events do not prove successful execution.
 
-Owned billing receipts are appended idempotently to run events with numeric fee
-fields only. The detail drawer labels these **Observed usage**, not a guaranteed
-final bill. A background billing read correlates owned receipts without adding
-displayed rows. It is not a platform history backfill: history starts with newly
-captured Console MCP runs. Any old test-only upstream records remain untouched
-and are not shown as separate history. Saved runs remain readable when billing
-is unavailable.
+New runs capture PymtHouse payment manifest IDs before the SDK pays, then mark
+accepted payments before waiting for provider completion. `@pymthouse/gateway-web`
+threads an awaited `onPayment` callback through single-shot, persistent, and
+failover paths. Persistence errors abort without a new paid attempt. A
+manifest is unique within its external account and cannot be attached to two
+runs. Caller `job_*` IDs and provider request IDs remain separate identifiers.
+
+`run_payment_manifests` stores this lineage and replaceable cumulative usage
+snapshots. After inference returns (or is interrupted), the job reads
+Bearer-scoped `/api/v1/user/usage?groupBy=manifest` over a short window around
+the accepted payment(s) and persists exact `manifestId` matches. OpenMeter
+app totals do not isolate one `job_*`, so a job-id total is never stamped
+onto a run. Missing rows are retried in the job; a billing-refresh failure
+does not fail the job. History is not required to price a completed run.
+History may POST at most 50 owned run IDs once when the visible page changes,
+so a later Home load can fill usage that was not yet in the aggregate when the
+job finished. It does not retry on a timer. Exact manifest matches update saved
+totals; unrelated manifests are ignored. Older concurrent responses cannot
+overwrite newer observations, missing rows do not erase known costs, and
+repeated refreshes do not add charges. The table and drawer share this
+Neon-derived network-cost summary. Missing totals for accepted payment attempts
+remain unmatched rather than displaying a partial total as complete.
+
+This replaces the ten-page raw-ticket scan. Fresh snapshots are reused for 30
+seconds. Usage is eventually consistent; this is not an invoice-finality
+signal. The execution reconcile worker remains public-provider GET only and
+does not poll PymtHouse. Raw `run_usage_receipts` remain separate evidence, not
+aggregate snapshots. Historical and preview runs without manifests may still
+use their previously persisted exact receipts, but no model/time match or
+manifest is invented for them.
+
+Apply additive migration `0002_run_payment_manifests.sql` before serving this
+revision. The environment's Console runtime role needs SELECT, INSERT and UPDATE
+on `run_payment_manifests`; production migration/deployment is a separate release
+step. No downstream change to PymtHouse's ID propagation is required for this
+manifest integration. Instrumented live verification on 2026-09-11 captured
+manifest `bdcd8fdd` at payment time and matched it to both the authenticated
+aggregate (2982 USD micros) and receipt (event ID `4096f6f3`).
+
+Generated assets retain their stable `mcp_assets.id`, and `run_asset_links`
+stores canonical input/output lineage. At submission, first-party asset URLs
+are resolved only within the authenticated principal and retain parameter path,
+role, and ordinal. Provider billing data enriches a run by `job_*`; it never
+manufactures or authorizes an asset ID.
+
+Asset URLs are one-hour HMAC links bound to asset ID, stored principal, and
+expiry. Deployed environments require `ASSET_URL_SIGNING_SECRET` and
+`ASSET_PROXY_ALLOWED_HOSTS`. Each HTTPS connection uses a validated DNS address,
+including redirects, while preserving TLS hostname verification and byte ranges.
+Playback rejects `unavailable_at` and hard `expires_at` before upstream delivery;
+History still retains the asset, lineage, captured parameters, and cost.
+Successful responses cache for at most 60 seconds, bounded further by signature
+and exact provider expiry; failed responses are not cached. Unknown expiry stays
+playable. Transient delivery errors do not permanently mark an asset unavailable.
+Execution and queued reconciliation propagate explicit output expiry; upserts
+preserve known expiry when later observations omit it.
+`available_until` remains a minimum availability guarantee, not a hard expiry.
 Client history state is scoped to the authenticated account.
 
+Public media sanitization is independent from durable output capture, so signed
+or redacted provider URLs and reference/mask inputs cannot bypass it. Owned media
+is rewritten to Console URLs; unmatched media is removed from execution, detail,
+and both account-requests response paths. Prompt text and unrelated links remain.
+
+Preview fixture seeding uses an owner-scoped database lock and one transaction.
+It checks every durable stage, skips complete fixtures, and repairs partial
+fixtures without changing ordinary terminal-run protections. The runtime preview
+has both `0001` and `0002` applied with the required table grants as of 2026-09-11;
+production migration remains a separate release step. No additional migration
+is needed for these review fixes.
+
+An authenticated preview-only fixture operation can populate representative
+Neon-backed rows for the current reviewer when both `VERCEL_ENV=preview` and
+`CONSOLE_PREVIEW_FIXTURES=1` are set. It is unavailable in production and is
+intended only for the disposable PR database.
+
 ## Fresh-start history
 
 The owner confirmed there is no real app history to preserve. Historical import
@@ -273,3 +340,24 @@ After separately authorizing the push/deployment:
 
 The concurrency gate is closed. Do not label the release fully accepted until
 the real signed-in preview checks are complete after authorized deployment.
+
+### Follow-up review fixes (2026-09-11)
+
+The job writes usage for the run it just executed by exact payment-manifest
+match. History's billing-sync is an optional one-shot backfill for older
+visible rows, including a deep-linked run off the first page, not a
+pending-driven poll and not required to price a new run. Cached observations
+without an accepted manifest's fee stay unmatched.
+
+The preview list excludes obsolete fixture IDs in the database before pagination
+and counting. Cursors retain database microsecond timestamp precision so rows
+created in the same transaction are not skipped. Synthetic preview images use a signature-checked redirect to a fixed
+bundled image path, gated by the preview fixture flag and the owner-derived asset
+ID. They do not require a deployment hostname in the provider proxy allowlist;
+ordinary assets retain the DNS-pinned HTTPS path.
+
+Output capture includes 3D models, textures and preview images. The drawer prefers
+a renderable media output for its default stage; models remain downloadable asset
+records. Development mocks serve every declared asset locally, using synthetic
+WAV/GLB files and bundled placeholder images, and reject unknown mock IDs without
+falling through to a real database route.
diff --git a/drizzle-baseline/0001_run_observability_and_lineage.sql b/drizzle-baseline/0001_run_observability_and_lineage.sql
new file mode 100644
index 00000000..f689fc8a
--- /dev/null
+++ b/drizzle-baseline/0001_run_observability_and_lineage.sql
@@ -0,0 +1,39 @@
+CREATE TABLE "run_asset_links" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"run_id" text NOT NULL,
+	"asset_id" text NOT NULL,
+	"direction" text NOT NULL,
+	"role" text NOT NULL,
+	"parameter_path" text,
+	"ordinal" integer DEFAULT 0 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "run_asset_links_direction_check" CHECK ("run_asset_links"."direction" in ('input', 'output')),
+	CONSTRAINT "run_asset_links_ordinal_check" CHECK ("run_asset_links"."ordinal" >= 0)
+);
+--> statement-breakpoint
+CREATE TABLE "run_usage_receipts" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"event_id" text NOT NULL,
+	"run_id" text NOT NULL,
+	"gateway_request_id" text NOT NULL,
+	"occurred_at" timestamp with time zone,
+	"source" text DEFAULT 'pymthouse' NOT NULL,
+	"pipeline" text,
+	"model_id" text,
+	"network_fee_usd_micros" numeric(78, 18),
+	"fee_wei" numeric(78, 0),
+	"pixels" numeric(78, 18),
+	"eth_usd_price" numeric(78, 18),
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "run_usage_receipts_source_check" CHECK ("run_usage_receipts"."source" in ('pymthouse'))
+);
+--> statement-breakpoint
+ALTER TABLE "run_asset_links" ADD CONSTRAINT "run_asset_links_run_id_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."runs"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_asset_links" ADD CONSTRAINT "run_asset_links_asset_id_mcp_assets_id_fk" FOREIGN KEY ("asset_id") REFERENCES "public"."mcp_assets"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_usage_receipts" ADD CONSTRAINT "run_usage_receipts_run_id_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."runs"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "run_asset_links_edge_unique" ON "run_asset_links" USING btree ("run_id","asset_id","direction","parameter_path","ordinal");--> statement-breakpoint
+CREATE INDEX "run_asset_links_run_idx" ON "run_asset_links" USING btree ("run_id","direction");--> statement-breakpoint
+CREATE INDEX "run_asset_links_asset_idx" ON "run_asset_links" USING btree ("asset_id","direction");--> statement-breakpoint
+CREATE UNIQUE INDEX "run_usage_receipts_event_unique" ON "run_usage_receipts" USING btree ("event_id");--> statement-breakpoint
+CREATE INDEX "run_usage_receipts_run_occurred_idx" ON "run_usage_receipts" USING btree ("run_id","occurred_at");--> statement-breakpoint
+CREATE INDEX "run_usage_receipts_gateway_idx" ON "run_usage_receipts" USING btree ("gateway_request_id");
\ No newline at end of file
diff --git a/drizzle-baseline/0002_run_payment_manifests.sql b/drizzle-baseline/0002_run_payment_manifests.sql
new file mode 100644
index 00000000..1665e677
--- /dev/null
+++ b/drizzle-baseline/0002_run_payment_manifests.sql
@@ -0,0 +1,17 @@
+CREATE TABLE "run_payment_manifests" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"run_id" text NOT NULL,
+	"external_account_id" uuid NOT NULL,
+	"manifest_id" text NOT NULL,
+	"accepted" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"network_fee_usd_micros" numeric(48, 18),
+	"fee_wei" text,
+	"observed_at" timestamp with time zone,
+	CONSTRAINT "run_payment_manifests_nonnegative_fee" CHECK ("run_payment_manifests"."network_fee_usd_micros" >= 0)
+);
+--> statement-breakpoint
+ALTER TABLE "run_payment_manifests" ADD CONSTRAINT "run_payment_manifests_run_id_runs_id_fk" FOREIGN KEY ("run_id") REFERENCES "public"."runs"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "run_payment_manifests" ADD CONSTRAINT "run_payment_manifests_external_account_id_external_accounts_id_fk" FOREIGN KEY ("external_account_id") REFERENCES "public"."external_accounts"("id") ON DELETE restrict ON UPDATE no action;--> statement-breakpoint
+CREATE UNIQUE INDEX "run_payment_manifests_account_manifest_unique" ON "run_payment_manifests" USING btree ("external_account_id","manifest_id");--> statement-breakpoint
+CREATE INDEX "run_payment_manifests_run_idx" ON "run_payment_manifests" USING btree ("run_id");
\ No newline at end of file
diff --git a/drizzle-baseline/meta/0001_snapshot.json b/drizzle-baseline/meta/0001_snapshot.json
new file mode 100644
index 00000000..76c934b6
--- /dev/null
+++ b/drizzle-baseline/meta/0001_snapshot.json
@@ -0,0 +1,3719 @@
+{
+  "id": "10ffb59b-42f0-4c99-886f-d2e14687bf4d",
+  "prevId": "d75beb41-cdb1-4fee-b0b6-bf73f2d76ed7",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.auth_identities": {
+      "name": "auth_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "authority": {
+          "name": "authority",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'auth0'"
+        },
+        "issuer": {
+          "name": "issuer",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subject": {
+          "name": "provider_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_metadata": {
+          "name": "provider_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "external_user_id": {
+          "name": "external_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "auth_identities_authority_issuer_subject_idx": {
+          "name": "auth_identities_authority_issuer_subject_idx",
+          "columns": [
+            {
+              "expression": "authority",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auth_identities\".\"issuer\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_legacy_provider_subject_idx": {
+          "name": "auth_identities_legacy_provider_subject_idx",
+          "columns": [
+            {
+              "expression": "provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auth_identities\".\"issuer\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_external_user_id_idx": {
+          "name": "auth_identities_external_user_id_idx",
+          "columns": [
+            {
+              "expression": "external_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_user_idx": {
+          "name": "auth_identities_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "auth_identities_user_id_users_id_fk": {
+          "name": "auth_identities_user_id_users_id_fk",
+          "tableFrom": "auth_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_emails": {
+      "name": "user_emails",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_primary": {
+          "name": "is_primary",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "verified_at": {
+          "name": "verified_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "user_emails_user_normalized_idx": {
+          "name": "user_emails_user_normalized_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "user_emails_verified_normalized_idx": {
+          "name": "user_emails_verified_normalized_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_emails\".\"verified_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "user_emails_primary_user_idx": {
+          "name": "user_emails_primary_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_emails\".\"is_primary\" = true",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_emails_user_id_users_id_fk": {
+          "name": "user_emails_user_id_users_id_fk",
+          "tableFrom": "user_emails",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "status": {
+          "name": "status",
+          "type": "user_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "disabled_at": {
+          "name": "disabled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "users_status_idx": {
+          "name": "users_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.attribution_touches": {
+      "name": "attribution_touches",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "attribution_touches_signup_idx": {
+          "name": "attribution_touches_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "attribution_touches_signup_id_waitlist_signups_id_fk": {
+          "name": "attribution_touches_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "attribution_touches",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.consent_events": {
+      "name": "consent_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purpose": {
+          "name": "purpose",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted": {
+          "name": "granted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "disclosure_version": {
+          "name": "disclosure_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "consent_events_signup_idx": {
+          "name": "consent_events_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "consent_events_subscription_id_email_subscriptions_id_fk": {
+          "name": "consent_events_subscription_id_email_subscriptions_id_fk",
+          "tableFrom": "consent_events",
+          "tableTo": "email_subscriptions",
+          "columnsFrom": [
+            "subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "consent_events_signup_id_waitlist_signups_id_fk": {
+          "name": "consent_events_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "consent_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.email_outbox": {
+      "name": "email_outbox",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "locked_at": {
+          "name": "locked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_code": {
+          "name": "last_error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "processed_at": {
+          "name": "processed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "email_outbox_idempotency_idx": {
+          "name": "email_outbox_idempotency_idx",
+          "columns": [
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_outbox_unprocessed_idx": {
+          "name": "email_outbox_unprocessed_idx",
+          "columns": [
+            {
+              "expression": "processed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "email_outbox_signup_id_waitlist_signups_id_fk": {
+          "name": "email_outbox_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "email_outbox",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.point_events": {
+      "name": "point_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "points": {
+          "name": "points",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referral_signup_id": {
+          "name": "referral_signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "point_events_reason_referral_idx": {
+          "name": "point_events_reason_referral_idx",
+          "columns": [
+            {
+              "expression": "reason",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "referral_signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "point_events_signup_idx": {
+          "name": "point_events_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "point_events_signup_id_waitlist_signups_id_fk": {
+          "name": "point_events_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "point_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "point_events_referral_signup_id_waitlist_signups_id_fk": {
+          "name": "point_events_referral_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "point_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "referral_signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rate_limits": {
+      "name": "rate_limits",
+      "schema": "",
+      "columns": {
+        "key_hash": {
+          "name": "key_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bucket": {
+          "name": "bucket",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        }
+      },
+      "indexes": {
+        "rate_limits_key_bucket_idx": {
+          "name": "rate_limits_key_bucket_idx",
+          "columns": [
+            {
+              "expression": "key_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "bucket",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "sessions_hash_idx": {
+          "name": "sessions_hash_idx",
+          "columns": [
+            {
+              "expression": "token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "sessions_signup_idx": {
+          "name": "sessions_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_signup_id_waitlist_signups_id_fk": {
+          "name": "sessions_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.verification_tokens": {
+      "name": "verification_tokens",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "requested_marketing_consent": {
+          "name": "requested_marketing_consent",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "verification_tokens_hash_idx": {
+          "name": "verification_tokens_hash_idx",
+          "columns": [
+            {
+              "expression": "token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "verification_tokens_signup_idx": {
+          "name": "verification_tokens_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "verification_tokens_signup_id_waitlist_signups_id_fk": {
+          "name": "verification_tokens_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "verification_tokens",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.waitlist_signups": {
+      "name": "waitlist_signups",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account_role": {
+          "name": "account_role",
+          "type": "account_role",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'member'"
+        },
+        "enrollment_source": {
+          "name": "enrollment_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'waitlist'"
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "use_case": {
+          "name": "use_case",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "referral_code": {
+          "name": "referral_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referred_by": {
+          "name": "referred_by",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "signup_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "marketing_consent": {
+          "name": "marketing_consent",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "first_touch": {
+          "name": "first_touch",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_touch": {
+          "name": "last_touch",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "confirmed_at": {
+          "name": "confirmed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_hash": {
+          "name": "ip_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "waitlist_signups_normalized_email_idx": {
+          "name": "waitlist_signups_normalized_email_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_referral_code_idx": {
+          "name": "waitlist_signups_referral_code_idx",
+          "columns": [
+            {
+              "expression": "referral_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_status_idx": {
+          "name": "waitlist_signups_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_user_idx": {
+          "name": "waitlist_signups_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"waitlist_signups\".\"user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_referred_by_idx": {
+          "name": "waitlist_signups_referred_by_idx",
+          "columns": [
+            {
+              "expression": "referred_by",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_confirmed_idx": {
+          "name": "waitlist_signups_confirmed_idx",
+          "columns": [
+            {
+              "expression": "confirmed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "waitlist_signups_user_id_users_id_fk": {
+          "name": "waitlist_signups_user_id_users_id_fk",
+          "tableFrom": "waitlist_signups",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "waitlist_signups_referred_by_waitlist_signups_id_fk": {
+          "name": "waitlist_signups_referred_by_waitlist_signups_id_fk",
+          "tableFrom": "waitlist_signups",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "referred_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.external_accounts": {
+      "name": "external_accounts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "service": {
+          "name": "service",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issuer": {
+          "name": "issuer",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "app_id": {
+          "name": "app_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_user_id": {
+          "name": "external_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "external_accounts_scope_external_idx": {
+          "name": "external_accounts_scope_external_idx",
+          "columns": [
+            {
+              "expression": "service",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "app_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "external_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "external_accounts_user_scope_idx": {
+          "name": "external_accounts_user_scope_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "service",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "app_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "external_accounts_user_id_users_id_fk": {
+          "name": "external_accounts_user_id_users_id_fk",
+          "tableFrom": "external_accounts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.identity_external_accounts": {
+      "name": "identity_external_accounts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "identity_id": {
+          "name": "identity_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_account_id": {
+          "name": "external_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "identity_external_accounts_binding_idx": {
+          "name": "identity_external_accounts_binding_idx",
+          "columns": [
+            {
+              "expression": "identity_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "external_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "identity_external_accounts_account_idx": {
+          "name": "identity_external_accounts_account_idx",
+          "columns": [
+            {
+              "expression": "external_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "identity_external_accounts_identity_id_auth_identities_id_fk": {
+          "name": "identity_external_accounts_identity_id_auth_identities_id_fk",
+          "tableFrom": "identity_external_accounts",
+          "tableTo": "auth_identities",
+          "columnsFrom": [
+            "identity_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "identity_external_accounts_external_account_id_external_accounts_id_fk": {
+          "name": "identity_external_accounts_external_account_id_external_accounts_id_fk",
+          "tableFrom": "identity_external_accounts",
+          "tableTo": "external_accounts",
+          "columnsFrom": [
+            "external_account_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.access_events": {
+      "name": "access_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "grant_id": {
+          "name": "grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_admin_grant_id": {
+          "name": "actor_admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "operation_id": {
+          "name": "operation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "previous_status": {
+          "name": "previous_status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_status": {
+          "name": "next_status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "grant_version": {
+          "name": "grant_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_events_operation_grant_idx": {
+          "name": "access_events_operation_grant_idx",
+          "columns": [
+            {
+              "expression": "operation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_events_grant_version_idx": {
+          "name": "access_events_grant_version_idx",
+          "columns": [
+            {
+              "expression": "grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "grant_version",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_events_grant_id_access_grants_id_fk": {
+          "name": "access_events_grant_id_access_grants_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "access_grants",
+          "columnsFrom": [
+            "grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_events_actor_admin_grant_id_admin_role_grants_id_fk": {
+          "name": "access_events_actor_admin_grant_id_admin_role_grants_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "admin_role_grants",
+          "columnsFrom": [
+            "actor_admin_grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_events_operation_id_access_operations_id_fk": {
+          "name": "access_events_operation_id_access_operations_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "access_operations",
+          "columnsFrom": [
+            "operation_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_events_action_check": {
+          "name": "access_events_action_check",
+          "value": "\"access_events\".\"action\" in ('approve', 'revoke', 'activate', 'grandfather')"
+        },
+        "access_events_version_check": {
+          "name": "access_events_version_check",
+          "value": "\"access_events\".\"grant_version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_grants": {
+      "name": "access_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "approved_at": {
+          "name": "approved_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "activated_at": {
+          "name": "activated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_grants_user_idx": {
+          "name": "access_grants_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"access_grants\".\"user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_grants_signup_idx": {
+          "name": "access_grants_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"access_grants\".\"signup_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_grants_status_idx": {
+          "name": "access_grants_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_grants_user_id_users_id_fk": {
+          "name": "access_grants_user_id_users_id_fk",
+          "tableFrom": "access_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_grants_signup_id_waitlist_signups_id_fk": {
+          "name": "access_grants_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "access_grants",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_grants_target_check": {
+          "name": "access_grants_target_check",
+          "value": "\"access_grants\".\"user_id\" is not null or \"access_grants\".\"signup_id\" is not null"
+        },
+        "access_grants_version_check": {
+          "name": "access_grants_version_check",
+          "value": "\"access_grants\".\"version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_operation_items": {
+      "name": "access_operation_items",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "operation_id": {
+          "name": "operation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "outcome": {
+          "name": "outcome",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_operation_items_operation_signup_idx": {
+          "name": "access_operation_items_operation_signup_idx",
+          "columns": [
+            {
+              "expression": "operation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_operation_items_operation_id_access_operations_id_fk": {
+          "name": "access_operation_items_operation_id_access_operations_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "access_operations",
+          "columnsFrom": [
+            "operation_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_operation_items_signup_id_waitlist_signups_id_fk": {
+          "name": "access_operation_items_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_operation_items_event_id_access_events_id_fk": {
+          "name": "access_operation_items_event_id_access_events_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "access_events",
+          "columnsFrom": [
+            "event_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_operation_items_outcome_check": {
+          "name": "access_operation_items_outcome_check",
+          "value": "\"access_operation_items\".\"outcome\" in ('approved', 'revoked', 'unchanged', 'ineligible', 'failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_operations": {
+      "name": "access_operations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "actor_admin_grant_id": {
+          "name": "actor_admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "request_id": {
+          "name": "request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload_hash": {
+          "name": "payload_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_operations_actor_request_idx": {
+          "name": "access_operations_actor_request_idx",
+          "columns": [
+            {
+              "expression": "actor_admin_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_operations_actor_admin_grant_id_admin_role_grants_id_fk": {
+          "name": "access_operations_actor_admin_grant_id_admin_role_grants_id_fk",
+          "tableFrom": "access_operations",
+          "tableTo": "admin_role_grants",
+          "columnsFrom": [
+            "actor_admin_grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_operations_action_check": {
+          "name": "access_operations_action_check",
+          "value": "\"access_operations\".\"action\" in ('approve', 'revoke')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.admin_role_grants": {
+      "name": "admin_role_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "admin_role_grants_signup_role_idx": {
+          "name": "admin_role_grants_signup_role_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "admin_role_grants_signup_id_waitlist_signups_id_fk": {
+          "name": "admin_role_grants_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "admin_role_grants",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "admin_role_grants_role_check": {
+          "name": "admin_role_grants_role_check",
+          "value": "\"admin_role_grants\".\"role\" = 'admin'"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.oauth_code_redemptions": {
+      "name": "oauth_code_redemptions",
+      "schema": "",
+      "columns": {
+        "code_hash": {
+          "name": "code_hash",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.email_subscriptions": {
+      "name": "email_subscriptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purpose": {
+          "name": "purpose",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "email_subscription_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unsubscribed'"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "email_subscriptions_address_purpose_idx": {
+          "name": "email_subscriptions_address_purpose_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "purpose",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_subscriptions_user_idx": {
+          "name": "email_subscriptions_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_subscriptions_signup_idx": {
+          "name": "email_subscriptions_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "email_subscriptions_user_id_users_id_fk": {
+          "name": "email_subscriptions_user_id_users_id_fk",
+          "tableFrom": "email_subscriptions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "email_subscriptions_signup_id_waitlist_signups_id_fk": {
+          "name": "email_subscriptions_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "email_subscriptions",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.mcp_assets": {
+      "name": "mcp_assets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "principal_id": {
+          "name": "principal_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_request_id": {
+          "name": "provider_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "media_type": {
+          "name": "media_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "available_until": {
+          "name": "available_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "unavailable_at": {
+          "name": "unavailable_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_at": {
+          "name": "hidden_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "mcp_assets_run_idx": {
+          "name": "mcp_assets_run_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_job_url_unique": {
+          "name": "mcp_assets_principal_job_url_unique",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_created_idx": {
+          "name": "mcp_assets_principal_created_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_capability_idx": {
+          "name": "mcp_assets_principal_capability_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_assets_run_owner_fk": {
+          "name": "mcp_assets_run_owner_fk",
+          "tableFrom": "mcp_assets",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id",
+            "principal_id",
+            "gateway_request_id"
+          ],
+          "columnsTo": [
+            "id",
+            "principal_id",
+            "gateway_request_id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.run_asset_links": {
+      "name": "run_asset_links",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "asset_id": {
+          "name": "asset_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "direction": {
+          "name": "direction",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "parameter_path": {
+          "name": "parameter_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ordinal": {
+          "name": "ordinal",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_asset_links_edge_unique": {
+          "name": "run_asset_links_edge_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "asset_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "parameter_path",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "ordinal",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_asset_links_run_idx": {
+          "name": "run_asset_links_run_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_asset_links_asset_idx": {
+          "name": "run_asset_links_asset_idx",
+          "columns": [
+            {
+              "expression": "asset_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_asset_links_run_id_runs_id_fk": {
+          "name": "run_asset_links_run_id_runs_id_fk",
+          "tableFrom": "run_asset_links",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "run_asset_links_asset_id_mcp_assets_id_fk": {
+          "name": "run_asset_links_asset_id_mcp_assets_id_fk",
+          "tableFrom": "run_asset_links",
+          "tableTo": "mcp_assets",
+          "columnsFrom": [
+            "asset_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_asset_links_direction_check": {
+          "name": "run_asset_links_direction_check",
+          "value": "\"run_asset_links\".\"direction\" in ('input', 'output')"
+        },
+        "run_asset_links_ordinal_check": {
+          "name": "run_asset_links_ordinal_check",
+          "value": "\"run_asset_links\".\"ordinal\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_events": {
+      "name": "run_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_key": {
+          "name": "event_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "run_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_events_key_unique": {
+          "name": "run_events_key_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_events_run_created_idx": {
+          "name": "run_events_run_created_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_events_run_id_runs_id_fk": {
+          "name": "run_events_run_id_runs_id_fk",
+          "tableFrom": "run_events",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.run_read_audits": {
+      "name": "run_read_audits",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "actor_user_id": {
+          "name": "actor_user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "admin_grant_id": {
+          "name": "admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_count": {
+          "name": "result_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_read_audits_actor_created_idx": {
+          "name": "run_read_audits_actor_created_idx",
+          "columns": [
+            {
+              "expression": "actor_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_read_audits_actor_user_id_users_id_fk": {
+          "name": "run_read_audits_actor_user_id_users_id_fk",
+          "tableFrom": "run_read_audits",
+          "tableTo": "users",
+          "columnsFrom": [
+            "actor_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "run_read_audits_run_id_runs_id_fk": {
+          "name": "run_read_audits_run_id_runs_id_fk",
+          "tableFrom": "run_read_audits",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_read_audits_action_check": {
+          "name": "run_read_audits_action_check",
+          "value": "\"run_read_audits\".\"action\" in ('list', 'detail')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_reconciliation_jobs": {
+      "name": "run_reconciliation_jobs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "queue": {
+          "name": "queue",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "available_at": {
+          "name": "available_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "deadline_at": {
+          "name": "deadline_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "lease_token": {
+          "name": "lease_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "leased_until": {
+          "name": "leased_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_reason": {
+          "name": "last_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_reconciliation_run_unique": {
+          "name": "run_reconciliation_run_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_reconciliation_available_idx": {
+          "name": "run_reconciliation_available_idx",
+          "columns": [
+            {
+              "expression": "available_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_reconciliation_jobs_run_id_runs_id_fk": {
+          "name": "run_reconciliation_jobs_run_id_runs_id_fk",
+          "tableFrom": "run_reconciliation_jobs",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_reconciliation_attempts_check": {
+          "name": "run_reconciliation_attempts_check",
+          "value": "\"run_reconciliation_jobs\".\"attempts\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_usage_receipts": {
+      "name": "run_usage_receipts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pymthouse'"
+        },
+        "pipeline": {
+          "name": "pipeline",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "network_fee_usd_micros": {
+          "name": "network_fee_usd_micros",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fee_wei": {
+          "name": "fee_wei",
+          "type": "numeric(78, 0)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pixels": {
+          "name": "pixels",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "eth_usd_price": {
+          "name": "eth_usd_price",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_usage_receipts_event_unique": {
+          "name": "run_usage_receipts_event_unique",
+          "columns": [
+            {
+              "expression": "event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_usage_receipts_run_occurred_idx": {
+          "name": "run_usage_receipts_run_occurred_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "occurred_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_usage_receipts_gateway_idx": {
+          "name": "run_usage_receipts_gateway_idx",
+          "columns": [
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_usage_receipts_run_id_runs_id_fk": {
+          "name": "run_usage_receipts_run_id_runs_id_fk",
+          "tableFrom": "run_usage_receipts",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_usage_receipts_source_check": {
+          "name": "run_usage_receipts_source_check",
+          "value": "\"run_usage_receipts\".\"source\" in ('pymthouse')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.runs": {
+      "name": "runs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "principal_id": {
+          "name": "principal_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_account_id": {
+          "name": "external_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_request_id": {
+          "name": "provider_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "endpoint": {
+          "name": "endpoint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "run_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "submitted_arguments": {
+          "name": "submitted_arguments",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result": {
+          "name": "result",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "capture_redacted_paths": {
+          "name": "capture_redacted_paths",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::jsonb"
+        },
+        "error_code": {
+          "name": "error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "capture_version": {
+          "name": "capture_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "runs_principal_gateway_unique": {
+          "name": "runs_principal_gateway_unique",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_asset_owner_unique": {
+          "name": "runs_asset_owner_unique",
+          "columns": [
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_principal_created_idx": {
+          "name": "runs_principal_created_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_created_idx": {
+          "name": "runs_created_idx",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_status_updated_idx": {
+          "name": "runs_status_updated_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_user_created_idx": {
+          "name": "runs_user_created_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "runs_user_id_users_id_fk": {
+          "name": "runs_user_id_users_id_fk",
+          "tableFrom": "runs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "runs_external_account_id_external_accounts_id_fk": {
+          "name": "runs_external_account_id_external_accounts_id_fk",
+          "tableFrom": "runs",
+          "tableTo": "external_accounts",
+          "columnsFrom": [
+            "external_account_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "runs_source_check": {
+          "name": "runs_source_check",
+          "value": "\"runs\".\"source\" in ('mcp', 'console', 'api', 'gateway')"
+        },
+        "runs_version_check": {
+          "name": "runs_version_check",
+          "value": "\"runs\".\"version\" > 0 and \"runs\".\"capture_version\" > 0"
+        },
+        "runs_arguments_object_check": {
+          "name": "runs_arguments_object_check",
+          "value": "\"runs\".\"submitted_arguments\" is null or jsonb_typeof(\"runs\".\"submitted_arguments\") = 'object'"
+        },
+        "runs_result_object_check": {
+          "name": "runs_result_object_check",
+          "value": "\"runs\".\"result\" is null or jsonb_typeof(\"runs\".\"result\") = 'object'"
+        },
+        "runs_completion_check": {
+          "name": "runs_completion_check",
+          "value": "(\"runs\".\"status\" in ('succeeded', 'failed', 'cancelled')) = (\"runs\".\"completed_at\" is not null)"
+        },
+        "runs_timestamps_check": {
+          "name": "runs_timestamps_check",
+          "value": "\"runs\".\"updated_at\" >= \"runs\".\"created_at\" and (\"runs\".\"started_at\" is null or \"runs\".\"started_at\" >= \"runs\".\"created_at\") and (\"runs\".\"completed_at\" is null or \"runs\".\"completed_at\" >= coalesce(\"runs\".\"started_at\", \"runs\".\"created_at\"))"
+        }
+      },
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {
+    "public.user_status": {
+      "name": "user_status",
+      "schema": "public",
+      "values": [
+        "active",
+        "disabled"
+      ]
+    },
+    "public.account_role": {
+      "name": "account_role",
+      "schema": "public",
+      "values": [
+        "member",
+        "admin"
+      ]
+    },
+    "public.signup_status": {
+      "name": "signup_status",
+      "schema": "public",
+      "values": [
+        "pending",
+        "confirmed",
+        "invited",
+        "unsubscribed",
+        "suppressed"
+      ]
+    },
+    "public.access_grant_status": {
+      "name": "access_grant_status",
+      "schema": "public",
+      "values": [
+        "approved",
+        "revoked"
+      ]
+    },
+    "public.email_subscription_status": {
+      "name": "email_subscription_status",
+      "schema": "public",
+      "values": [
+        "subscribed",
+        "unsubscribed"
+      ]
+    },
+    "public.run_status": {
+      "name": "run_status",
+      "schema": "public",
+      "values": [
+        "queued",
+        "running",
+        "succeeded",
+        "failed",
+        "cancelled",
+        "unknown"
+      ]
+    }
+  },
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle-baseline/meta/0002_snapshot.json b/drizzle-baseline/meta/0002_snapshot.json
new file mode 100644
index 00000000..613d42e4
--- /dev/null
+++ b/drizzle-baseline/meta/0002_snapshot.json
@@ -0,0 +1,3858 @@
+{
+  "id": "0f684c3e-10b2-49d4-9d76-11f89441f795",
+  "prevId": "10ffb59b-42f0-4c99-886f-d2e14687bf4d",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.auth_identities": {
+      "name": "auth_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "authority": {
+          "name": "authority",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'auth0'"
+        },
+        "issuer": {
+          "name": "issuer",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subject": {
+          "name": "provider_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_metadata": {
+          "name": "provider_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "external_user_id": {
+          "name": "external_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "auth_identities_authority_issuer_subject_idx": {
+          "name": "auth_identities_authority_issuer_subject_idx",
+          "columns": [
+            {
+              "expression": "authority",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auth_identities\".\"issuer\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_legacy_provider_subject_idx": {
+          "name": "auth_identities_legacy_provider_subject_idx",
+          "columns": [
+            {
+              "expression": "provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auth_identities\".\"issuer\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_external_user_id_idx": {
+          "name": "auth_identities_external_user_id_idx",
+          "columns": [
+            {
+              "expression": "external_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "auth_identities_user_idx": {
+          "name": "auth_identities_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "auth_identities_user_id_users_id_fk": {
+          "name": "auth_identities_user_id_users_id_fk",
+          "tableFrom": "auth_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_emails": {
+      "name": "user_emails",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_primary": {
+          "name": "is_primary",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "verified_at": {
+          "name": "verified_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "user_emails_user_normalized_idx": {
+          "name": "user_emails_user_normalized_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "user_emails_verified_normalized_idx": {
+          "name": "user_emails_verified_normalized_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_emails\".\"verified_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "user_emails_primary_user_idx": {
+          "name": "user_emails_primary_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_emails\".\"is_primary\" = true",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_emails_user_id_users_id_fk": {
+          "name": "user_emails_user_id_users_id_fk",
+          "tableFrom": "user_emails",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "status": {
+          "name": "status",
+          "type": "user_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "disabled_at": {
+          "name": "disabled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "users_status_idx": {
+          "name": "users_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.attribution_touches": {
+      "name": "attribution_touches",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "attribution_touches_signup_idx": {
+          "name": "attribution_touches_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "attribution_touches_signup_id_waitlist_signups_id_fk": {
+          "name": "attribution_touches_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "attribution_touches",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.consent_events": {
+      "name": "consent_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purpose": {
+          "name": "purpose",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted": {
+          "name": "granted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "disclosure_version": {
+          "name": "disclosure_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "consent_events_signup_idx": {
+          "name": "consent_events_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "consent_events_subscription_id_email_subscriptions_id_fk": {
+          "name": "consent_events_subscription_id_email_subscriptions_id_fk",
+          "tableFrom": "consent_events",
+          "tableTo": "email_subscriptions",
+          "columnsFrom": [
+            "subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "consent_events_signup_id_waitlist_signups_id_fk": {
+          "name": "consent_events_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "consent_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.email_outbox": {
+      "name": "email_outbox",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "locked_at": {
+          "name": "locked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_code": {
+          "name": "last_error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "processed_at": {
+          "name": "processed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "email_outbox_idempotency_idx": {
+          "name": "email_outbox_idempotency_idx",
+          "columns": [
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_outbox_unprocessed_idx": {
+          "name": "email_outbox_unprocessed_idx",
+          "columns": [
+            {
+              "expression": "processed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "email_outbox_signup_id_waitlist_signups_id_fk": {
+          "name": "email_outbox_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "email_outbox",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.point_events": {
+      "name": "point_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "points": {
+          "name": "points",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referral_signup_id": {
+          "name": "referral_signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "point_events_reason_referral_idx": {
+          "name": "point_events_reason_referral_idx",
+          "columns": [
+            {
+              "expression": "reason",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "referral_signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "point_events_signup_idx": {
+          "name": "point_events_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "point_events_signup_id_waitlist_signups_id_fk": {
+          "name": "point_events_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "point_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "point_events_referral_signup_id_waitlist_signups_id_fk": {
+          "name": "point_events_referral_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "point_events",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "referral_signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rate_limits": {
+      "name": "rate_limits",
+      "schema": "",
+      "columns": {
+        "key_hash": {
+          "name": "key_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bucket": {
+          "name": "bucket",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        }
+      },
+      "indexes": {
+        "rate_limits_key_bucket_idx": {
+          "name": "rate_limits_key_bucket_idx",
+          "columns": [
+            {
+              "expression": "key_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "bucket",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "sessions_hash_idx": {
+          "name": "sessions_hash_idx",
+          "columns": [
+            {
+              "expression": "token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "sessions_signup_idx": {
+          "name": "sessions_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_signup_id_waitlist_signups_id_fk": {
+          "name": "sessions_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.verification_tokens": {
+      "name": "verification_tokens",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "requested_marketing_consent": {
+          "name": "requested_marketing_consent",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "verification_tokens_hash_idx": {
+          "name": "verification_tokens_hash_idx",
+          "columns": [
+            {
+              "expression": "token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "verification_tokens_signup_idx": {
+          "name": "verification_tokens_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "verification_tokens_signup_id_waitlist_signups_id_fk": {
+          "name": "verification_tokens_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "verification_tokens",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.waitlist_signups": {
+      "name": "waitlist_signups",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account_role": {
+          "name": "account_role",
+          "type": "account_role",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'member'"
+        },
+        "enrollment_source": {
+          "name": "enrollment_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'waitlist'"
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "use_case": {
+          "name": "use_case",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "referral_code": {
+          "name": "referral_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referred_by": {
+          "name": "referred_by",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "signup_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "marketing_consent": {
+          "name": "marketing_consent",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "first_touch": {
+          "name": "first_touch",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_touch": {
+          "name": "last_touch",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "confirmed_at": {
+          "name": "confirmed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_hash": {
+          "name": "ip_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "waitlist_signups_normalized_email_idx": {
+          "name": "waitlist_signups_normalized_email_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_referral_code_idx": {
+          "name": "waitlist_signups_referral_code_idx",
+          "columns": [
+            {
+              "expression": "referral_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_status_idx": {
+          "name": "waitlist_signups_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_user_idx": {
+          "name": "waitlist_signups_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"waitlist_signups\".\"user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_referred_by_idx": {
+          "name": "waitlist_signups_referred_by_idx",
+          "columns": [
+            {
+              "expression": "referred_by",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "waitlist_signups_confirmed_idx": {
+          "name": "waitlist_signups_confirmed_idx",
+          "columns": [
+            {
+              "expression": "confirmed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "waitlist_signups_user_id_users_id_fk": {
+          "name": "waitlist_signups_user_id_users_id_fk",
+          "tableFrom": "waitlist_signups",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "waitlist_signups_referred_by_waitlist_signups_id_fk": {
+          "name": "waitlist_signups_referred_by_waitlist_signups_id_fk",
+          "tableFrom": "waitlist_signups",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "referred_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.external_accounts": {
+      "name": "external_accounts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "service": {
+          "name": "service",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issuer": {
+          "name": "issuer",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "app_id": {
+          "name": "app_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_user_id": {
+          "name": "external_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "external_accounts_scope_external_idx": {
+          "name": "external_accounts_scope_external_idx",
+          "columns": [
+            {
+              "expression": "service",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "app_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "external_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "external_accounts_user_scope_idx": {
+          "name": "external_accounts_user_scope_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "service",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issuer",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "app_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "external_accounts_user_id_users_id_fk": {
+          "name": "external_accounts_user_id_users_id_fk",
+          "tableFrom": "external_accounts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.identity_external_accounts": {
+      "name": "identity_external_accounts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "identity_id": {
+          "name": "identity_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_account_id": {
+          "name": "external_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "identity_external_accounts_binding_idx": {
+          "name": "identity_external_accounts_binding_idx",
+          "columns": [
+            {
+              "expression": "identity_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "external_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "identity_external_accounts_account_idx": {
+          "name": "identity_external_accounts_account_idx",
+          "columns": [
+            {
+              "expression": "external_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "identity_external_accounts_identity_id_auth_identities_id_fk": {
+          "name": "identity_external_accounts_identity_id_auth_identities_id_fk",
+          "tableFrom": "identity_external_accounts",
+          "tableTo": "auth_identities",
+          "columnsFrom": [
+            "identity_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "identity_external_accounts_external_account_id_external_accounts_id_fk": {
+          "name": "identity_external_accounts_external_account_id_external_accounts_id_fk",
+          "tableFrom": "identity_external_accounts",
+          "tableTo": "external_accounts",
+          "columnsFrom": [
+            "external_account_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.access_events": {
+      "name": "access_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "grant_id": {
+          "name": "grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_admin_grant_id": {
+          "name": "actor_admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "operation_id": {
+          "name": "operation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "previous_status": {
+          "name": "previous_status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_status": {
+          "name": "next_status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "grant_version": {
+          "name": "grant_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_events_operation_grant_idx": {
+          "name": "access_events_operation_grant_idx",
+          "columns": [
+            {
+              "expression": "operation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_events_grant_version_idx": {
+          "name": "access_events_grant_version_idx",
+          "columns": [
+            {
+              "expression": "grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "grant_version",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_events_grant_id_access_grants_id_fk": {
+          "name": "access_events_grant_id_access_grants_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "access_grants",
+          "columnsFrom": [
+            "grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_events_actor_admin_grant_id_admin_role_grants_id_fk": {
+          "name": "access_events_actor_admin_grant_id_admin_role_grants_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "admin_role_grants",
+          "columnsFrom": [
+            "actor_admin_grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_events_operation_id_access_operations_id_fk": {
+          "name": "access_events_operation_id_access_operations_id_fk",
+          "tableFrom": "access_events",
+          "tableTo": "access_operations",
+          "columnsFrom": [
+            "operation_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_events_action_check": {
+          "name": "access_events_action_check",
+          "value": "\"access_events\".\"action\" in ('approve', 'revoke', 'activate', 'grandfather')"
+        },
+        "access_events_version_check": {
+          "name": "access_events_version_check",
+          "value": "\"access_events\".\"grant_version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_grants": {
+      "name": "access_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "access_grant_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "approved_at": {
+          "name": "approved_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "activated_at": {
+          "name": "activated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_grants_user_idx": {
+          "name": "access_grants_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"access_grants\".\"user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_grants_signup_idx": {
+          "name": "access_grants_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"access_grants\".\"signup_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "access_grants_status_idx": {
+          "name": "access_grants_status_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_grants_user_id_users_id_fk": {
+          "name": "access_grants_user_id_users_id_fk",
+          "tableFrom": "access_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_grants_signup_id_waitlist_signups_id_fk": {
+          "name": "access_grants_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "access_grants",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_grants_target_check": {
+          "name": "access_grants_target_check",
+          "value": "\"access_grants\".\"user_id\" is not null or \"access_grants\".\"signup_id\" is not null"
+        },
+        "access_grants_version_check": {
+          "name": "access_grants_version_check",
+          "value": "\"access_grants\".\"version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_operation_items": {
+      "name": "access_operation_items",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "operation_id": {
+          "name": "operation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "outcome": {
+          "name": "outcome",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_operation_items_operation_signup_idx": {
+          "name": "access_operation_items_operation_signup_idx",
+          "columns": [
+            {
+              "expression": "operation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_operation_items_operation_id_access_operations_id_fk": {
+          "name": "access_operation_items_operation_id_access_operations_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "access_operations",
+          "columnsFrom": [
+            "operation_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_operation_items_signup_id_waitlist_signups_id_fk": {
+          "name": "access_operation_items_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "access_operation_items_event_id_access_events_id_fk": {
+          "name": "access_operation_items_event_id_access_events_id_fk",
+          "tableFrom": "access_operation_items",
+          "tableTo": "access_events",
+          "columnsFrom": [
+            "event_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_operation_items_outcome_check": {
+          "name": "access_operation_items_outcome_check",
+          "value": "\"access_operation_items\".\"outcome\" in ('approved', 'revoked', 'unchanged', 'ineligible', 'failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.access_operations": {
+      "name": "access_operations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "actor_admin_grant_id": {
+          "name": "actor_admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "request_id": {
+          "name": "request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload_hash": {
+          "name": "payload_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "access_operations_actor_request_idx": {
+          "name": "access_operations_actor_request_idx",
+          "columns": [
+            {
+              "expression": "actor_admin_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "access_operations_actor_admin_grant_id_admin_role_grants_id_fk": {
+          "name": "access_operations_actor_admin_grant_id_admin_role_grants_id_fk",
+          "tableFrom": "access_operations",
+          "tableTo": "admin_role_grants",
+          "columnsFrom": [
+            "actor_admin_grant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "access_operations_action_check": {
+          "name": "access_operations_action_check",
+          "value": "\"access_operations\".\"action\" in ('approve', 'revoke')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.admin_role_grants": {
+      "name": "admin_role_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "admin_role_grants_signup_role_idx": {
+          "name": "admin_role_grants_signup_role_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "admin_role_grants_signup_id_waitlist_signups_id_fk": {
+          "name": "admin_role_grants_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "admin_role_grants",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "admin_role_grants_role_check": {
+          "name": "admin_role_grants_role_check",
+          "value": "\"admin_role_grants\".\"role\" = 'admin'"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.oauth_code_redemptions": {
+      "name": "oauth_code_redemptions",
+      "schema": "",
+      "columns": {
+        "code_hash": {
+          "name": "code_hash",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.email_subscriptions": {
+      "name": "email_subscriptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purpose": {
+          "name": "purpose",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "email_subscription_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unsubscribed'"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_id": {
+          "name": "signup_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "email_subscriptions_address_purpose_idx": {
+          "name": "email_subscriptions_address_purpose_idx",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "purpose",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_subscriptions_user_idx": {
+          "name": "email_subscriptions_user_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "email_subscriptions_signup_idx": {
+          "name": "email_subscriptions_signup_idx",
+          "columns": [
+            {
+              "expression": "signup_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "email_subscriptions_user_id_users_id_fk": {
+          "name": "email_subscriptions_user_id_users_id_fk",
+          "tableFrom": "email_subscriptions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "email_subscriptions_signup_id_waitlist_signups_id_fk": {
+          "name": "email_subscriptions_signup_id_waitlist_signups_id_fk",
+          "tableFrom": "email_subscriptions",
+          "tableTo": "waitlist_signups",
+          "columnsFrom": [
+            "signup_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.mcp_assets": {
+      "name": "mcp_assets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "principal_id": {
+          "name": "principal_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_request_id": {
+          "name": "provider_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "media_type": {
+          "name": "media_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "available_until": {
+          "name": "available_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "unavailable_at": {
+          "name": "unavailable_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_at": {
+          "name": "hidden_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "mcp_assets_run_idx": {
+          "name": "mcp_assets_run_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_job_url_unique": {
+          "name": "mcp_assets_principal_job_url_unique",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_created_idx": {
+          "name": "mcp_assets_principal_created_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "mcp_assets_principal_capability_idx": {
+          "name": "mcp_assets_principal_capability_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_assets_run_owner_fk": {
+          "name": "mcp_assets_run_owner_fk",
+          "tableFrom": "mcp_assets",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id",
+            "principal_id",
+            "gateway_request_id"
+          ],
+          "columnsTo": [
+            "id",
+            "principal_id",
+            "gateway_request_id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.run_asset_links": {
+      "name": "run_asset_links",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "asset_id": {
+          "name": "asset_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "direction": {
+          "name": "direction",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "parameter_path": {
+          "name": "parameter_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ordinal": {
+          "name": "ordinal",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_asset_links_edge_unique": {
+          "name": "run_asset_links_edge_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "asset_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "parameter_path",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "ordinal",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_asset_links_run_idx": {
+          "name": "run_asset_links_run_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_asset_links_asset_idx": {
+          "name": "run_asset_links_asset_idx",
+          "columns": [
+            {
+              "expression": "asset_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "direction",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_asset_links_run_id_runs_id_fk": {
+          "name": "run_asset_links_run_id_runs_id_fk",
+          "tableFrom": "run_asset_links",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "run_asset_links_asset_id_mcp_assets_id_fk": {
+          "name": "run_asset_links_asset_id_mcp_assets_id_fk",
+          "tableFrom": "run_asset_links",
+          "tableTo": "mcp_assets",
+          "columnsFrom": [
+            "asset_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_asset_links_direction_check": {
+          "name": "run_asset_links_direction_check",
+          "value": "\"run_asset_links\".\"direction\" in ('input', 'output')"
+        },
+        "run_asset_links_ordinal_check": {
+          "name": "run_asset_links_ordinal_check",
+          "value": "\"run_asset_links\".\"ordinal\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_events": {
+      "name": "run_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_key": {
+          "name": "event_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "run_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_events_key_unique": {
+          "name": "run_events_key_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_events_run_created_idx": {
+          "name": "run_events_run_created_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_events_run_id_runs_id_fk": {
+          "name": "run_events_run_id_runs_id_fk",
+          "tableFrom": "run_events",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.run_payment_manifests": {
+      "name": "run_payment_manifests",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_account_id": {
+          "name": "external_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "manifest_id": {
+          "name": "manifest_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "accepted": {
+          "name": "accepted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "network_fee_usd_micros": {
+          "name": "network_fee_usd_micros",
+          "type": "numeric(48, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fee_wei": {
+          "name": "fee_wei",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "observed_at": {
+          "name": "observed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "run_payment_manifests_account_manifest_unique": {
+          "name": "run_payment_manifests_account_manifest_unique",
+          "columns": [
+            {
+              "expression": "external_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "manifest_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_payment_manifests_run_idx": {
+          "name": "run_payment_manifests_run_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_payment_manifests_run_id_runs_id_fk": {
+          "name": "run_payment_manifests_run_id_runs_id_fk",
+          "tableFrom": "run_payment_manifests",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "run_payment_manifests_external_account_id_external_accounts_id_fk": {
+          "name": "run_payment_manifests_external_account_id_external_accounts_id_fk",
+          "tableFrom": "run_payment_manifests",
+          "tableTo": "external_accounts",
+          "columnsFrom": [
+            "external_account_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_payment_manifests_nonnegative_fee": {
+          "name": "run_payment_manifests_nonnegative_fee",
+          "value": "\"run_payment_manifests\".\"network_fee_usd_micros\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_read_audits": {
+      "name": "run_read_audits",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "actor_user_id": {
+          "name": "actor_user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "admin_grant_id": {
+          "name": "admin_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_count": {
+          "name": "result_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_read_audits_actor_created_idx": {
+          "name": "run_read_audits_actor_created_idx",
+          "columns": [
+            {
+              "expression": "actor_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_read_audits_actor_user_id_users_id_fk": {
+          "name": "run_read_audits_actor_user_id_users_id_fk",
+          "tableFrom": "run_read_audits",
+          "tableTo": "users",
+          "columnsFrom": [
+            "actor_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "run_read_audits_run_id_runs_id_fk": {
+          "name": "run_read_audits_run_id_runs_id_fk",
+          "tableFrom": "run_read_audits",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_read_audits_action_check": {
+          "name": "run_read_audits_action_check",
+          "value": "\"run_read_audits\".\"action\" in ('list', 'detail')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_reconciliation_jobs": {
+      "name": "run_reconciliation_jobs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "queue": {
+          "name": "queue",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "available_at": {
+          "name": "available_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "deadline_at": {
+          "name": "deadline_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "lease_token": {
+          "name": "lease_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "leased_until": {
+          "name": "leased_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_reason": {
+          "name": "last_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_reconciliation_run_unique": {
+          "name": "run_reconciliation_run_unique",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_reconciliation_available_idx": {
+          "name": "run_reconciliation_available_idx",
+          "columns": [
+            {
+              "expression": "available_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_reconciliation_jobs_run_id_runs_id_fk": {
+          "name": "run_reconciliation_jobs_run_id_runs_id_fk",
+          "tableFrom": "run_reconciliation_jobs",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_reconciliation_attempts_check": {
+          "name": "run_reconciliation_attempts_check",
+          "value": "\"run_reconciliation_jobs\".\"attempts\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.run_usage_receipts": {
+      "name": "run_usage_receipts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "run_id": {
+          "name": "run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pymthouse'"
+        },
+        "pipeline": {
+          "name": "pipeline",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "network_fee_usd_micros": {
+          "name": "network_fee_usd_micros",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fee_wei": {
+          "name": "fee_wei",
+          "type": "numeric(78, 0)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pixels": {
+          "name": "pixels",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "eth_usd_price": {
+          "name": "eth_usd_price",
+          "type": "numeric(78, 18)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "run_usage_receipts_event_unique": {
+          "name": "run_usage_receipts_event_unique",
+          "columns": [
+            {
+              "expression": "event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_usage_receipts_run_occurred_idx": {
+          "name": "run_usage_receipts_run_occurred_idx",
+          "columns": [
+            {
+              "expression": "run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "occurred_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "run_usage_receipts_gateway_idx": {
+          "name": "run_usage_receipts_gateway_idx",
+          "columns": [
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "run_usage_receipts_run_id_runs_id_fk": {
+          "name": "run_usage_receipts_run_id_runs_id_fk",
+          "tableFrom": "run_usage_receipts",
+          "tableTo": "runs",
+          "columnsFrom": [
+            "run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "run_usage_receipts_source_check": {
+          "name": "run_usage_receipts_source_check",
+          "value": "\"run_usage_receipts\".\"source\" in ('pymthouse')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.runs": {
+      "name": "runs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "principal_id": {
+          "name": "principal_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_account_id": {
+          "name": "external_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "gateway_request_id": {
+          "name": "gateway_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_request_id": {
+          "name": "provider_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "endpoint": {
+          "name": "endpoint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "run_status",
+          "typeSchema": "public",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "submitted_arguments": {
+          "name": "submitted_arguments",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result": {
+          "name": "result",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "capture_redacted_paths": {
+          "name": "capture_redacted_paths",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::jsonb"
+        },
+        "error_code": {
+          "name": "error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "capture_version": {
+          "name": "capture_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "runs_principal_gateway_unique": {
+          "name": "runs_principal_gateway_unique",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_asset_owner_unique": {
+          "name": "runs_asset_owner_unique",
+          "columns": [
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "gateway_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_principal_created_idx": {
+          "name": "runs_principal_created_idx",
+          "columns": [
+            {
+              "expression": "principal_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_created_idx": {
+          "name": "runs_created_idx",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_status_updated_idx": {
+          "name": "runs_status_updated_idx",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "runs_user_created_idx": {
+          "name": "runs_user_created_idx",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "runs_user_id_users_id_fk": {
+          "name": "runs_user_id_users_id_fk",
+          "tableFrom": "runs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "runs_external_account_id_external_accounts_id_fk": {
+          "name": "runs_external_account_id_external_accounts_id_fk",
+          "tableFrom": "runs",
+          "tableTo": "external_accounts",
+          "columnsFrom": [
+            "external_account_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "runs_source_check": {
+          "name": "runs_source_check",
+          "value": "\"runs\".\"source\" in ('mcp', 'console', 'api', 'gateway')"
+        },
+        "runs_version_check": {
+          "name": "runs_version_check",
+          "value": "\"runs\".\"version\" > 0 and \"runs\".\"capture_version\" > 0"
+        },
+        "runs_arguments_object_check": {
+          "name": "runs_arguments_object_check",
+          "value": "\"runs\".\"submitted_arguments\" is null or jsonb_typeof(\"runs\".\"submitted_arguments\") = 'object'"
+        },
+        "runs_result_object_check": {
+          "name": "runs_result_object_check",
+          "value": "\"runs\".\"result\" is null or jsonb_typeof(\"runs\".\"result\") = 'object'"
+        },
+        "runs_completion_check": {
+          "name": "runs_completion_check",
+          "value": "(\"runs\".\"status\" in ('succeeded', 'failed', 'cancelled')) = (\"runs\".\"completed_at\" is not null)"
+        },
+        "runs_timestamps_check": {
+          "name": "runs_timestamps_check",
+          "value": "\"runs\".\"updated_at\" >= \"runs\".\"created_at\" and (\"runs\".\"started_at\" is null or \"runs\".\"started_at\" >= \"runs\".\"created_at\") and (\"runs\".\"completed_at\" is null or \"runs\".\"completed_at\" >= coalesce(\"runs\".\"started_at\", \"runs\".\"created_at\"))"
+        }
+      },
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {
+    "public.user_status": {
+      "name": "user_status",
+      "schema": "public",
+      "values": [
+        "active",
+        "disabled"
+      ]
+    },
+    "public.account_role": {
+      "name": "account_role",
+      "schema": "public",
+      "values": [
+        "member",
+        "admin"
+      ]
+    },
+    "public.signup_status": {
+      "name": "signup_status",
+      "schema": "public",
+      "values": [
+        "pending",
+        "confirmed",
+        "invited",
+        "unsubscribed",
+        "suppressed"
+      ]
+    },
+    "public.access_grant_status": {
+      "name": "access_grant_status",
+      "schema": "public",
+      "values": [
+        "approved",
+        "revoked"
+      ]
+    },
+    "public.email_subscription_status": {
+      "name": "email_subscription_status",
+      "schema": "public",
+      "values": [
+        "subscribed",
+        "unsubscribed"
+      ]
+    },
+    "public.run_status": {
+      "name": "run_status",
+      "schema": "public",
+      "values": [
+        "queued",
+        "running",
+        "succeeded",
+        "failed",
+        "cancelled",
+        "unknown"
+      ]
+    }
+  },
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle-baseline/meta/_journal.json b/drizzle-baseline/meta/_journal.json
index f0be4489..988e7a65 100644
--- a/drizzle-baseline/meta/_journal.json
+++ b/drizzle-baseline/meta/_journal.json
@@ -8,6 +8,20 @@
       "when": 1788710498159,
       "tag": "0000_console_baseline",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1789069696530,
+      "tag": "0001_run_observability_and_lineage",
+      "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "7",
+      "when": 1789134402179,
+      "tag": "0002_run_payment_manifests",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/lib/assets/public.test.ts b/lib/assets/public.test.ts
new file mode 100644
index 00000000..b22cd28e
--- /dev/null
+++ b/lib/assets/public.test.ts
@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { publicAssetUrl, publicRunDetail } from "./public";
+import type { RunDetail } from "@/lib/runs/types";
+
+test("gives every asset a canonical first-party URL and rewrites captured outputs", () => {
+  const source = "https://v3b.fal.media/files/output.mp4";
+  const detail = {
+    assets: [
+      {
+        id: "asset_123",
+        url: source,
+        mediaType: "video",
+        providerRequestId: "provider-request",
+        availableUntil: null,
+        expiresAt: null,
+        unavailableAt: null,
+        hiddenAt: null,
+        createdAt: "2026-09-09T12:00:00.000Z",
+      },
+    ],
+    result: { value: { video_urls: [source], note: "done" } },
+  } as unknown as RunDetail;
+
+  detail.principalId = "eu_test";
+  const result = publicRunDetail(detail);
+  assert.equal(result.assets[0]?.url, publicAssetUrl("asset_123", "eu_test"));
+  assert.deepEqual(result.result?.value, {
+    video_urls: [publicAssetUrl("asset_123", "eu_test")],
+    note: "done",
+  });
+  assert.doesNotMatch(JSON.stringify(result), /fal\.media/);
+});
diff --git a/lib/assets/public.ts b/lib/assets/public.ts
new file mode 100644
index 00000000..00a17f64
--- /dev/null
+++ b/lib/assets/public.ts
@@ -0,0 +1,231 @@
+import { createHmac } from "node:crypto";
+import type { JsonValue, RunAsset, RunDetail } from "@/lib/runs/types";
+
+export const ASSET_URL_TTL_SECONDS = 60 * 60;
+
+function signingSecret(): string {
+  const configured = process.env.ASSET_URL_SIGNING_SECRET?.trim();
+  if (configured) return configured;
+  if (process.env.NODE_ENV !== "production")
+    return "local-asset-signing-secret";
+  throw new Error("ASSET_URL_SIGNING_SECRET is required");
+}
+
+export function publicOrigin(): string {
+  const configured =
+    process.env.NEXT_PUBLIC_APP_URL?.trim() ||
+    process.env.NEXT_PUBLIC_SITE_URL?.trim() ||
+    process.env.APP_BASE_URL?.trim() ||
+    process.env.MCP_PUBLIC_ORIGIN?.trim();
+  if (configured) return new URL(configured).origin;
+  if (process.env.NODE_ENV !== "production") return "http://localhost:3000";
+  throw new Error("An application public origin is required");
+}
+
+export function assetSignature(
+  id: string,
+  principalId: string,
+  exp: number
+): string {
+  return createHmac("sha256", signingSecret())
+    .update(`${id}\n${principalId}\n${exp}`)
+    .digest("base64url");
+}
+
+export function publicAssetUrl(
+  id: string,
+  principalId: string,
+  now = Date.now()
+): string {
+  const exp = Math.floor(now / 1000) + ASSET_URL_TTL_SECONDS;
+  const url = new URL(`/api/assets/${encodeURIComponent(id)}`, publicOrigin());
+  url.searchParams.set("exp", String(exp));
+  url.searchParams.set("sig", assetSignature(id, principalId, exp));
+  return url.toString();
+}
+
+export function publicAsset(asset: RunAsset, principalId: string): RunAsset {
+  return { ...asset, url: publicAssetUrl(asset.id, principalId) };
+}
+
+/** Recognize an asset reference only on the configured application origin. */
+export function ownedAssetReference(
+  value: string,
+  assets: Pick<RunAsset, "id" | "url">[]
+): string | null {
+  try {
+    const url = new URL(value);
+    if (url.origin !== publicOrigin() || url.username || url.password)
+      return null;
+    const match = url.pathname.match(/^\/api\/assets\/([^/]+)$/);
+    const id = match ? decodeURIComponent(match[1]!) : null;
+    return id && assets.some((asset) => asset.id === id) ? id : null;
+  } catch {
+    return null;
+  }
+}
+
+export function replaceAssetUrls(
+  value: JsonValue,
+  assets: Pick<RunAsset, "id" | "url">[],
+  principalId: string
+): JsonValue {
+  return sanitizePublicMedia(value, assets, principalId);
+}
+
+/** Media detection deliberately includes URLs rejected by durable capture. */
+export function sanitizePublicMedia(
+  value: JsonValue,
+  assets: Pick<RunAsset, "id" | "url">[],
+  principalId: string
+): JsonValue {
+  const byUrl = new Map(assets.map((asset) => [asset.url, asset.id]));
+  const mediaKey = (key: string) =>
+    /(?:image|video|audio|mask|media|thumbnail|reference|attachment|file|model|mesh|texture)/i.test(
+      key
+    ) || /(?:^|_|[a-z0-9])(?:urls?|uris?)$/i.test(key);
+  const wrapperKey = (key: string) => /^(?:output|data|result)$/i.test(key);
+  const visit = (item: JsonValue, media = false): JsonValue | undefined => {
+    if (typeof item === "string") {
+      const id = byUrl.get(item) ?? ownedAssetReference(item, assets);
+      if (id) return publicAssetUrl(id, principalId);
+      // Only entire URL values in media fields are removed, not prose or prompts.
+      if (media && /^(?:[a-z][a-z0-9+.-]*:|\/\/)/i.test(item)) return undefined;
+      return item;
+    }
+    if (Array.isArray(item))
+      return item
+        .map((child) => visit(child, media))
+        .filter((child): child is JsonValue => child !== undefined);
+    if (item && typeof item === "object")
+      return Object.fromEntries(
+        Object.entries(item).flatMap(([key, child]) => {
+          const result = visit(
+            child,
+            /prompt|caption|description|^(?:text|texts)$/i.test(key)
+              ? false
+              : mediaKey(key) || wrapperKey(key) || media
+          );
+          return result === undefined ? [] : [[key, result]];
+        })
+      );
+    return item;
+  };
+  return visit(value) ?? null;
+}
+
+export function removeAssetUrls(value: JsonValue, urls: string[]): JsonValue {
+  const blocked = new Set(urls);
+  const visit = (item: JsonValue): JsonValue | undefined => {
+    if (typeof item === "string") return blocked.has(item) ? undefined : item;
+    if (Array.isArray(item)) {
+      return item
+        .map(visit)
+        .filter((child): child is JsonValue => child !== undefined);
+    }
+    if (item && typeof item === "object") {
+      return Object.fromEntries(
+        Object.entries(item)
+          .map(([key, child]) => [key, visit(child)] as const)
+          .filter(
+            (entry): entry is readonly [string, JsonValue] =>
+              entry[1] !== undefined
+          )
+      );
+    }
+    return item;
+  };
+  return visit(value) ?? null;
+}
+
+const PUBLIC_EVENT_METADATA = new Set([
+  "kind",
+  "eventId",
+  "billingEventId",
+  "ticketGatewayRequestId",
+  "networkFeeUsdMicros",
+  "feeWei",
+  "ethUsdPrice",
+  "pixels",
+  "pipeline",
+  "modelId",
+  "timestamp",
+  "providerStatus",
+  "phase",
+  "inferenceTimeMs",
+  "retryable",
+  "reason",
+]);
+
+function stripControlUrls(value: string): string {
+  return value
+    .replace(/[a-z][a-z0-9+.-]*:\/\/\S+/gi, "")
+    .replace(/\/\/\S+/g, "")
+    .replace(/\s+/g, " ")
+    .trim();
+}
+
+function publicEventKey(eventKey: string): string {
+  if (eventKey.startsWith("progress:")) {
+    const [, status = "", requestId = ""] = eventKey.split(":");
+    return `progress:${status}:${requestId}`;
+  }
+  return stripControlUrls(eventKey).replace(/:+$/g, "").replace(/:{2,}/g, ":");
+}
+
+function publicEventMetadata(
+  metadata: Record<string, JsonValue> | undefined
+): Record<string, JsonValue> {
+  const clean: Record<string, JsonValue> = {};
+  for (const [key, value] of Object.entries(metadata ?? {})) {
+    if (!PUBLIC_EVENT_METADATA.has(key)) continue;
+    if (typeof value === "string") {
+      const text = stripControlUrls(value);
+      if (text) clean[key] = text;
+      continue;
+    }
+    if (value !== null && typeof value === "object") continue;
+    clean[key] = value;
+  }
+  return clean;
+}
+
+function publicErrorMessage(value: string | null): string | null {
+  if (typeof value !== "string") return null;
+  return stripControlUrls(value) || null;
+}
+
+/** Keep durable records while exposing only owner-bound first-party media. */
+export function publicRunDetail(detail: RunDetail): RunDetail {
+  return {
+    ...detail,
+    errorMessage: publicErrorMessage(detail.errorMessage),
+    assets: detail.assets.map((asset) =>
+      publicAsset(asset, detail.principalId)
+    ),
+    submittedArguments: detail.submittedArguments
+      ? (sanitizePublicMedia(
+          detail.submittedArguments,
+          detail.assets,
+          detail.principalId
+        ) as Record<string, JsonValue>)
+      : null,
+    result: detail.result
+      ? {
+          ...detail.result,
+          value: sanitizePublicMedia(
+            detail.result.value,
+            detail.assets,
+            detail.principalId
+          ),
+        }
+      : null,
+    events: (detail.events ?? []).map((event) => ({
+      id: event.id,
+      eventKey: publicEventKey(event.eventKey),
+      status: event.status,
+      createdAt: event.createdAt,
+      metadata: publicEventMetadata(event.metadata),
+    })),
+  };
+}
diff --git a/lib/assets/transport.ts b/lib/assets/transport.ts
new file mode 100644
index 00000000..ef6864aa
--- /dev/null
+++ b/lib/assets/transport.ts
@@ -0,0 +1,53 @@
+import { request as httpsRequest } from "node:https";
+import { Readable } from "node:stream";
+import type { LookupAddress } from "node:dns";
+
+/** Connect only to the checked address; URL hostname still controls Host and TLS. */
+export function fetchPinnedAsset(
+  url: URL,
+  addresses: LookupAddress[],
+  init: {
+    method: string;
+    headers: Record<string, string>;
+    signal: AbortSignal;
+  }
+): Promise<Response> {
+  return new Promise((resolve, reject) => {
+    const address = addresses[0];
+    if (!address) return reject(new Error("unsafe_asset_origin"));
+    const req = httpsRequest(
+      url,
+      {
+        method: init.method,
+        headers: init.headers,
+        signal: init.signal,
+        agent: false,
+        lookup: (_hostname, options, callback) => {
+          if (options.all) callback(null, [address]);
+          else callback(null, address.address, address.family);
+        },
+      },
+      (incoming) => {
+        const headers = new Headers();
+        for (const [key, value] of Object.entries(incoming.headers)) {
+          if (value !== undefined)
+            headers.set(key, Array.isArray(value) ? value.join(", ") : value);
+        }
+        const status = incoming.statusCode ?? 502;
+        const noBody =
+          init.method === "HEAD" || [204, 205, 304].includes(status);
+        if (noBody) incoming.resume();
+        resolve(
+          new Response(
+            noBody
+              ? null
+              : (Readable.toWeb(incoming) as ReadableStream<Uint8Array>),
+            { status, headers }
+          )
+        );
+      }
+    );
+    req.on("error", reject);
+    req.end();
+  });
+}
diff --git a/lib/console/activity-assets.ts b/lib/console/activity-assets.ts
index 770f86bd..e7afdec0 100644
--- a/lib/console/activity-assets.ts
+++ b/lib/console/activity-assets.ts
@@ -2,6 +2,7 @@ import "server-only";
 
 import type { SignedTicketRequestRow } from "@/lib/console/account-usage";
 import { listAssetsForGatewayRequestIds } from "@/lib/mcp/store";
+import { publicAssetUrl } from "@/lib/assets/public";
 
 /**
  * Exact owner + gateway correlation only. Never infer a run's output from
@@ -25,9 +26,9 @@ export async function attachOutputsToTickets(
     return asset
       ? {
           ...item,
-          outputUrl: asset.url,
+          outputUrl: publicAssetUrl(asset.id, principalId),
           providerRequestId: asset.providerRequestId,
         }
-      : item;
+      : { ...item, outputUrl: null };
   });
 }
diff --git a/lib/console/activity-output-match.test.ts b/lib/console/activity-output-match.test.ts
index 0988dc35..2e1b2164 100644
--- a/lib/console/activity-output-match.test.ts
+++ b/lib/console/activity-output-match.test.ts
@@ -47,7 +47,7 @@ test("exact gateway_request_id wins over time matching", () => {
   assert.equal(matched.get("job_abc")?.providerRequestId, "req-fal");
 });
 
-test("orchestrator 8-hex tickets join MCP job_* assets by capability and time", () => {
+test("orchestrator 8-hex tickets do not infer an MCP job_* asset", () => {
   const items = [
     ticket({
       gatewayRequestId: "41dfff3c",
@@ -66,10 +66,7 @@ test("orchestrator 8-hex tickets join MCP job_* assets by capability and time",
       providerRequestId: "01a06f36-d5fe-7351-a8d1-ce8fa3c11004",
     },
   ]);
-  assert.equal(
-    matched.get("41dfff3c")?.url,
-    "https://v3b.fal.media/files/b/cube.jpg"
-  );
+  assert.equal(matched.has("41dfff3c"), false);
 });
 
 test("time match does not attach a different capability", () => {
@@ -92,7 +89,7 @@ test("time match does not attach a different capability", () => {
   assert.equal(matched.has("83493a58"), false);
 });
 
-test("each asset attaches to at most one ticket", () => {
+test("non-exact tickets cannot consume an asset", () => {
   const items = [
     ticket({
       gatewayRequestId: "aaaa1111",
@@ -114,7 +111,7 @@ test("each asset attaches to at most one ticket", () => {
       gatewayRequestId: "job_one",
     },
   ]);
-  assert.equal(matched.size, 1);
+  assert.equal(matched.size, 0);
 });
 
 test("ambiguous same-capability assets in the window are not attached", () => {
diff --git a/lib/console/activity-output-match.ts b/lib/console/activity-output-match.ts
index 96a3c160..78cbcde2 100644
--- a/lib/console/activity-output-match.ts
+++ b/lib/console/activity-output-match.ts
@@ -14,19 +14,8 @@ export type MatchableAsset = {
   providerRequestId?: string | null;
 };
 
-/** Orchestrator Kafka events use RandomManifestID as CloudEvent id (~8 hex). */
-export const TICKET_ASSET_MATCH_WINDOW_MS = 15 * 60 * 1000;
-
-const ORCHESTRATOR_HEX_ID = /^[0-9a-f]{8}$/i;
-
-export function isOrchestratorTicketId(id: string): boolean {
-  return ORCHESTRATOR_HEX_ID.test(id.trim());
-}
-
 function ticketKeys(ticket: SignedTicketRequestRow): string[] {
-  return [ticket.gatewayRequestId, ticket.eventId]
-    .map((id) => id.trim())
-    .filter((id, index, all) => id.length > 0 && all.indexOf(id) === index);
+  return [ticket.gatewayRequestId.trim()].filter(Boolean);
 }
 
 function outputFromAsset(asset: MatchableAsset): JobOutput {
@@ -36,15 +25,9 @@ function outputFromAsset(asset: MatchableAsset): JobOutput {
   };
 }
 
-function needsFuzzyMatch(ticket: SignedTicketRequestRow): boolean {
-  return ticketKeys(ticket).every(isOrchestratorTicketId);
-}
-
 /**
  * Map each OpenMeter ticket to a stored media URL.
- * Exact `gateway_request_id` / event id wins. Orchestrator 8-hex tickets
- * that never received an MCP `job_*` id may join the nearest same-capability
- * asset in the window — skipped when more than one candidate exists (race).
+ * Only the authenticated owner's exact `gateway_request_id` is authoritative.
  */
 export function matchTicketOutputs(
   tickets: SignedTicketRequestRow[],
@@ -68,26 +51,5 @@ export function matchTicketOutputs(
     }
   }
 
-  for (const ticket of tickets) {
-    if (out.has(ticket.gatewayRequestId)) continue;
-    if (!needsFuzzyMatch(ticket)) continue;
-    const ticketTime = Date.parse(ticket.time);
-    if (!Number.isFinite(ticketTime) || !ticket.modelId.trim()) continue;
-    const candidates: Array<{ asset: MatchableAsset; delta: number }> = [];
-    for (const asset of assets) {
-      if (used.has(asset.id)) continue;
-      if (asset.capability !== ticket.modelId) continue;
-      const created = Date.parse(asset.createdAt);
-      if (!Number.isFinite(created)) continue;
-      const delta = Math.abs(created - ticketTime);
-      if (delta > TICKET_ASSET_MATCH_WINDOW_MS) continue;
-      candidates.push({ asset, delta });
-    }
-    if (candidates.length !== 1) continue;
-    const hit = candidates[0]!;
-    used.add(hit.asset.id);
-    out.set(ticket.gatewayRequestId, outputFromAsset(hit.asset));
-  }
-
   return out;
 }
diff --git a/lib/console/auth-login.test.ts b/lib/console/auth-login.test.ts
index c88b3570..f19ac8d0 100644
--- a/lib/console/auth-login.test.ts
+++ b/lib/console/auth-login.test.ts
@@ -29,34 +29,40 @@ test("safeReturnTo rejects absolute and protocol-relative URLs", () => {
 });
 
 test("authLoginHref is the Auth0 SDK handoff", () => {
-  assert.equal(
-    authLoginHref(),
-    "/auth/login?returnTo=%2Fapi%2Fidentity%2Fsync%3FreturnTo%3D%252Fhome"
-  );
+  assert.equal(authLoginHref(), "/auth/login?returnTo=%2Flogin");
   assert.equal(
     authLoginHref({ signup: true }),
-    "/auth/login?screen_hint=signup&returnTo=%2Fapi%2Fidentity%2Fsync%3FreturnTo%3D%252Fhome"
+    "/auth/login?screen_hint=signup&returnTo=%2Flogin"
   );
   assert.equal(
     authLoginHref({ returnTo: "/waitlist", loginHint: "a@b.com" }),
-    "/auth/login?returnTo=%2Fapi%2Fidentity%2Fsync%3FreturnTo%3D%252Fwaitlist&login_hint=a%40b.com"
+    "/auth/login?returnTo=%2Flogin%3FreturnTo%3D%252Fwaitlist&login_hint=a%40b.com"
   );
   assert.equal(
     authLoginHref({ connection: "google-oauth2", returnTo: "//evil.example" }),
-    "/auth/login?returnTo=%2Fapi%2Fidentity%2Fsync%3FreturnTo%3D%252Fhome&connection=google-oauth2"
+    "/auth/login?returnTo=%2Flogin&connection=google-oauth2"
   );
   assert.equal(
     authLoginHref({ connection: "github", signup: true }),
-    "/auth/login?screen_hint=signup&returnTo=%2Fapi%2Fidentity%2Fsync%3FreturnTo%3D%252Fhome&connection=github"
+    "/auth/login?screen_hint=signup&returnTo=%2Flogin&connection=github"
   );
 });
 
 test("console sign-in/up hrefs stay on the branded pages", () => {
   assert.equal(AUTH_SIGNIN_HREF, "/login");
   assert.equal(AUTH_SIGNUP_HREF, "/signup");
-  assert.equal(consoleSignInHref({ returnTo: "/waitlist" }), "/login?returnTo=%2Fwaitlist");
-  assert.equal(consoleSignUpHref({ returnTo: "/waitlist" }), "/signup?returnTo=%2Fwaitlist");
-  assert.equal(consoleSignInHref({ returnTo: "https://evil.example" }), "/login");
+  assert.equal(
+    consoleSignInHref({ returnTo: "/waitlist" }),
+    "/login?returnTo=%2Fwaitlist"
+  );
+  assert.equal(
+    consoleSignUpHref({ returnTo: "/waitlist" }),
+    "/signup?returnTo=%2Fwaitlist"
+  );
+  assert.equal(
+    consoleSignInHref({ returnTo: "https://evil.example" }),
+    "/login"
+  );
 });
 
 test("isConsoleAuthPath covers branded pages and the SDK mount", () => {
diff --git a/lib/console/auth-login.ts b/lib/console/auth-login.ts
index 8a0215b5..e3866bfc 100644
--- a/lib/console/auth-login.ts
+++ b/lib/console/auth-login.ts
@@ -1,5 +1,3 @@
-import { identitySyncPath } from "@/lib/identity/sync-return";
-
 /** SDK login route. Must be a full navigation (`<a>` / `location.assign`),
  *  not a Next.js client transition — proxy.ts mounts `/auth/*`. */
 export const AUTH_LOGIN_PATH = "/auth/login";
@@ -41,7 +39,7 @@ export function authLoginHref(options?: {
   const params = new URLSearchParams();
   if (options?.signup) params.set("screen_hint", "signup");
   const returnTo = safeReturnTo(options?.returnTo);
-  params.set("returnTo", identitySyncPath(returnTo));
+  params.set("returnTo", consoleSignInHref({ returnTo }));
   if (options?.loginHint) params.set("login_hint", options.loginHint);
   if (options?.connection) params.set("connection", options.connection);
   return `${AUTH_LOGIN_PATH}?${params.toString()}`;
diff --git a/lib/console/billing-receipts.ts b/lib/console/billing-receipts.ts
new file mode 100644
index 00000000..21183985
--- /dev/null
+++ b/lib/console/billing-receipts.ts
@@ -0,0 +1,63 @@
+import type { SignedTicketRequestRow } from "./account-usage";
+import type { JsonValue } from "@/lib/runs/types";
+
+export type SanitizedBillingReceipt = {
+  eventId: string;
+  gatewayRequestId: string;
+  metadata: Record<string, JsonValue>;
+};
+
+const DECIMAL = /^\d+(?:\.\d+)?$/;
+
+/** Keep only reviewed receipt fields; upstream payloads and prompts never enter Neon. */
+export function sanitizeBillingReceipt(
+  item: SignedTicketRequestRow
+): SanitizedBillingReceipt | null {
+  if (
+    !item.eventId ||
+    item.eventId.length > 512 ||
+    !item.gatewayRequestId ||
+    item.gatewayRequestId.length > 512
+  )
+    return null;
+  const metadata: Record<string, JsonValue> = {
+    billingEventId: item.eventId,
+    ticketGatewayRequestId: item.gatewayRequestId,
+  };
+  for (const [key, value] of [
+    ["pipeline", item.pipeline],
+    ["modelId", item.modelId],
+  ] as const) {
+    if (typeof value === "string" && value.length <= 512) metadata[key] = value;
+  }
+  for (const key of [
+    "networkFeeUsdMicros",
+    "feeWei",
+    "ethUsdPrice",
+    "pixels",
+  ] as const) {
+    const value = item[key];
+    if (value == null) continue;
+    if (typeof value !== "string" || !DECIMAL.test(value)) return null;
+    const [integer, fraction = ""] = value.split(".");
+    const digits = integer!.replace(/^0+/, "") || "0";
+    if (
+      key === "feeWei"
+        ? fraction.length > 0 || value.includes(".") || digits.length > 78
+        : digits.length > 60 || fraction.length > 18
+    )
+      return null;
+    metadata[key] = value;
+  }
+  if (
+    typeof item.time === "string" &&
+    item.time.length <= 64 &&
+    Number.isFinite(Date.parse(item.time))
+  )
+    metadata.timestamp = new Date(item.time).toISOString();
+  return {
+    eventId: item.eventId,
+    gatewayRequestId: item.gatewayRequestId,
+    metadata,
+  };
+}
diff --git a/lib/console/capability-modality.test.ts b/lib/console/capability-modality.test.ts
index 005df7ad..ddb125f3 100644
--- a/lib/console/capability-modality.test.ts
+++ b/lib/console/capability-modality.test.ts
@@ -3,13 +3,49 @@ import { test } from "node:test";
 
 import { FAL_CAPABILITY_CATALOG } from "../mcp/fal-capability-catalog";
 import { mapSignedTicketToActivityRow } from "./signed-ticket-activity";
+import { humanizePipelineModel } from "./usage-capability-display";
 import {
+  capabilityPresentation,
   outputKindForModality,
   pipelineForModality,
   resolveActivityCapability,
   resolveCapabilityModality,
 } from "./capability-modality";
 
+test("capability presentation pulls modality out of titles", () => {
+  assert.deepEqual(capabilityPresentation("Kling Image to Video", "i2v"), {
+    title: "Kling",
+    modality: "Image to video",
+  });
+  assert.deepEqual(capabilityPresentation("Flux Schnell", "t2i"), {
+    title: "Flux Schnell",
+    modality: "Text to image",
+  });
+  assert.deepEqual(capabilityPresentation("Custom i2v", "i2v"), {
+    title: "Custom",
+    modality: "Image to video",
+  });
+  assert.deepEqual(capabilityPresentation("Kling image-to-video Pro", "i2v"), {
+    title: "Kling Pro",
+    modality: "Image to video",
+  });
+});
+
+test("model display names omit catalog and provider namespaces", () => {
+  assert.equal(
+    humanizePipelineModel("fixed", "livepeer-example/fal-whisper-transcribe"),
+    "Whisper Transcribe"
+  );
+  assert.equal(
+    humanizePipelineModel("fixed", "fal-ai/kling-video-v2.1-master"),
+    "Kling Video V2 1 Master"
+  );
+  assert.equal(
+    humanizePipelineModel("text-to-image", "flux-schnell"),
+    "Flux Schnell"
+  );
+});
+
 test("first-party pipeline names map to modality tags", () => {
   assert.equal(resolveCapabilityModality({ pipeline: "text-to-image" }), "t2i");
   assert.equal(
diff --git a/lib/console/capability-modality.ts b/lib/console/capability-modality.ts
index a8756e91..eb05c320 100644
--- a/lib/console/capability-modality.ts
+++ b/lib/console/capability-modality.ts
@@ -138,6 +138,57 @@ const AUDIO_MODALITIES = new Set(["audio", "t2m", "tts", "v2m"]);
 
 const TEXT_MODALITIES = new Set(["asr", "text"]);
 
+const MODALITY_LABELS: Record<string, string> = {
+  a2v: "Audio to video",
+  asr: "Speech to text",
+  audio: "Text to audio",
+  "bg-remove": "Background removal",
+  edit: "Image editing",
+  erase: "Image erasing",
+  extend: "Video extension",
+  fill: "Image fill",
+  i2v: "Image to video",
+  i3d: "Image to 3D",
+  inpaint: "Image inpainting",
+  realtime: "Realtime video",
+  ref2v: "Reference to video",
+  t2i: "Text to image",
+  t2m: "Text to music",
+  t2v: "Text to video",
+  text: "Text generation",
+  transition: "Frame transition",
+  tts: "Text to speech",
+  upscale: "Image upscaling",
+  v2m: "Video to music",
+  v2v: "Video to video",
+};
+
+export function capabilityPresentation(
+  title: string,
+  modality: string
+): { title: string; modality: string } {
+  const label = MODALITY_LABELS[modality] ?? modality;
+  if (!label || modality === "unknown") return { title, modality: label };
+  const phrase = label
+    .split(/\s+/)
+    .map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"))
+    .join("[\\s_/-]+");
+  const shorthand = modality.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const withoutPhrase = title.replace(
+    new RegExp(`(?:\\s*[·|—:/-]\\s*)?\\b${phrase}\\b`, "gi"),
+    " "
+  );
+  const withoutShorthand = withoutPhrase.replace(
+    new RegExp(`(?:\\s*[·|—:/-]\\s*)?\\b${shorthand}\\b`, "gi"),
+    " "
+  );
+  const cleanTitle = withoutShorthand
+    .replace(/\s+/g, " ")
+    .replace(/[·|—:/-]+\s*$/, "")
+    .trim();
+  return { title: cleanTitle || title, modality: label };
+}
+
 export type CapabilityMediaKind = "image" | "video" | "audio" | "text" | "json";
 
 function normalize(value: string | null | undefined): string {
@@ -247,9 +298,7 @@ export function resolveActivityCapability(input: {
   if (resolved) {
     const inferred = pipelineForModality(resolved);
     const pipeline =
-      stored && !isPriceUnit(normalizedStored)
-        ? stored
-        : (inferred ?? stored);
+      stored && !isPriceUnit(normalizedStored) ? stored : (inferred ?? stored);
     return { modality: resolved, pipeline: pipeline || "unknown" };
   }
 
@@ -262,7 +311,6 @@ export function resolveActivityCapability(input: {
 
   return {
     modality: "unknown",
-    pipeline:
-      stored && !isPriceUnit(normalizedStored) ? stored : "unknown",
+    pipeline: stored && !isPriceUnit(normalizedStored) ? stored : "unknown",
   };
 }
diff --git a/lib/console/dev-mock.ts b/lib/console/dev-mock.ts
index 95477f87..a3103524 100644
--- a/lib/console/dev-mock.ts
+++ b/lib/console/dev-mock.ts
@@ -16,10 +16,538 @@ import type {
   AccountUsagePayload,
   AccountUsagePipelineRow,
 } from "@/lib/console/account-usage";
+import type {
+  JsonValue,
+  RunDetail,
+  RunInputSchema,
+  RunSummary,
+} from "@/lib/runs/types";
 
 const PERIOD_DAYS = 30;
 const MOCK_SUB = "google-oauth2|108451209377712345678";
 const MOCK_EMAIL = "design@livepeer.org";
+const MOCK_USER_ID = "00000000-0000-4000-8000-000000000001";
+const MOCK_OWNER = {
+  principalId: "eu_devmock",
+  userId: MOCK_USER_ID,
+  externalAccountId: "account_devmock",
+  billing: null,
+};
+
+const MOCK_ASSET_PATHS: Record<string, string> = {
+  asset_user_upload_interview_audio: "/fixtures/history/sample-tone.wav",
+  asset_dev_3d_glb: "/fixtures/history/octahedron.glb",
+  asset_dev_3d_texture: "/images/console/explore/flux-schnell.webp",
+  asset_dev_3d_preview: "/images/console/explore/flux-schnell.webp",
+  asset_dev_video: "/media-2026-08-08-150247/crab-beach.mp4",
+  asset_user_upload_forest_reference:
+    "/livepeer-ui-2026-08-08/network/network-8.webp",
+  asset_platform_forest_mask: "/images/console/explore/depth-anything-v2.webp",
+  asset_dev_image: "/images/console/explore/flux-schnell.webp",
+  asset_dev_keyframes_video: "/media-2026-08-08-141651/capabilities.mp4",
+  asset_platform_station_first:
+    "/livepeer-ui-2026-08-08/network/network-3.webp",
+  asset_platform_station_middle:
+    "/livepeer-ui-2026-08-08/network/network-5.webp",
+  asset_platform_station_last:
+    "/livepeer-ui-2026-08-08/network/network-11.webp",
+  asset_user_upload_product_walkthrough: "/media-2026-08-08-141651/crab.mp4",
+};
+
+function mockBilling(id: string) {
+  const fees: Record<string, string> = {
+    run_dev_video: "84200",
+    run_dev_image: "9600",
+    run_dev_keyframes: "112600",
+    run_dev_transcript: "5800",
+    run_dev_metadata: "1100",
+    run_dev_3d: "126400",
+  };
+  return fees[id] ? { networkFeeUsdMicros: fees[id]!, receiptCount: 1 } : null;
+}
+
+function mockRunSummaries(): RunSummary[] {
+  const now = Date.now();
+  const rows: RunSummary[] = [
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_video",
+      gatewayRequestId: "job_dev_video",
+      providerRequestId: "fal_dev_video",
+      provider: "fal",
+      source: "mcp",
+      capability: "fal-ai/kling-video/v2.1/master/image-to-video",
+      modelId: "fal-ai/kling-video/v2.1/master/image-to-video",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 4 * 60_000).toISOString(),
+      updatedAt: new Date(now - 3 * 60_000).toISOString(),
+      startedAt: new Date(now - 4 * 60_000).toISOString(),
+      completedAt: new Date(now - 3 * 60_000).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_image",
+      gatewayRequestId: "job_dev_image",
+      providerRequestId: "fal_dev_image",
+      provider: "fal",
+      source: "mcp",
+      capability: "fal-ai/flux/schnell",
+      modelId: "fal-ai/flux/schnell",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 18 * 60_000).toISOString(),
+      updatedAt: new Date(now - 18 * 60_000 + 1_840).toISOString(),
+      startedAt: new Date(now - 18 * 60_000).toISOString(),
+      completedAt: new Date(now - 18 * 60_000 + 1_840).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_keyframes",
+      gatewayRequestId: "job_dev_keyframes",
+      providerRequestId: "fal_dev_keyframes",
+      provider: "fal",
+      source: "mcp",
+      capability: "livepeer-example/fal-flux-3-keyframes",
+      modelId: "livepeer-example/fal-flux-3-keyframes",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 32 * 60_000).toISOString(),
+      updatedAt: new Date(now - 31 * 60_000).toISOString(),
+      startedAt: new Date(now - 32 * 60_000).toISOString(),
+      completedAt: new Date(now - 31 * 60_000).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_transcript",
+      gatewayRequestId: "job_dev_transcript",
+      providerRequestId: "fal_dev_transcript",
+      provider: "fal",
+      source: "mcp",
+      capability: "livepeer-example/fal-whisper-transcribe",
+      modelId: "livepeer-example/fal-whisper-transcribe",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 46 * 60_000).toISOString(),
+      updatedAt: new Date(now - 46 * 60_000 + 7_260).toISOString(),
+      startedAt: new Date(now - 46 * 60_000).toISOString(),
+      completedAt: new Date(now - 46 * 60_000 + 7_260).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_metadata",
+      gatewayRequestId: "job_dev_metadata",
+      providerRequestId: "fal_dev_metadata",
+      provider: "fal",
+      source: "mcp",
+      capability: "livepeer-example/fal-ffmpeg-metadata",
+      modelId: "livepeer-example/fal-ffmpeg-metadata",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 63 * 60_000).toISOString(),
+      updatedAt: new Date(now - 63 * 60_000 + 940).toISOString(),
+      startedAt: new Date(now - 63 * 60_000).toISOString(),
+      completedAt: new Date(now - 63 * 60_000 + 940).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_3d",
+      gatewayRequestId: "job_dev_3d",
+      providerRequestId: "fal_dev_3d",
+      provider: "fal",
+      source: "mcp",
+      capability: "livepeer-example/fal-tripo-h31-t3d",
+      modelId: "livepeer-example/fal-tripo-h31-t3d",
+      endpoint: null,
+      status: "succeeded",
+      captureVersion: 1,
+      errorCode: null,
+      errorMessage: null,
+      version: 2,
+      createdAt: new Date(now - 78 * 60_000).toISOString(),
+      updatedAt: new Date(now - 77 * 60_000).toISOString(),
+      startedAt: new Date(now - 78 * 60_000).toISOString(),
+      completedAt: new Date(now - 77 * 60_000).toISOString(),
+      email: MOCK_EMAIL,
+    },
+    {
+      ...MOCK_OWNER,
+      id: "run_dev_failed",
+      gatewayRequestId: "job_dev_failed",
+      providerRequestId: null,
+      provider: "fal",
+      source: "mcp",
+      capability: "fal-ai/minimax/video-01",
+      modelId: "fal-ai/minimax/video-01",
+      endpoint: null,
+      status: "failed",
+      captureVersion: 1,
+      errorCode: "inference_failed",
+      errorMessage: "The preview provider rejected this sample request.",
+      version: 2,
+      createdAt: new Date(now - 96 * 60_000).toISOString(),
+      updatedAt: new Date(now - 95 * 60_000).toISOString(),
+      startedAt: new Date(now - 96 * 60_000).toISOString(),
+      completedAt: new Date(now - 95 * 60_000).toISOString(),
+      email: MOCK_EMAIL,
+    },
+  ];
+  return rows.map((run) => ({ ...run, billing: mockBilling(run.id) }));
+}
+
+function mockRunDetail(run: RunSummary, origin: string): RunDetail {
+  const video = run.id === "run_dev_video";
+  const image = run.id === "run_dev_image";
+  const assetUrl = (id: string) => `${origin}/api/assets/${id}`;
+  const mockAsset = (...args: Parameters<typeof mockAssetRecord>) => ({
+    ...mockAssetRecord(...args),
+    url: assetUrl(args[1]),
+  });
+
+  let inputs: Record<string, JsonValue>;
+  let resultValue: JsonValue;
+  let assets: RunDetail["assets"] = [];
+  const feeUsdMicros = mockBilling(run.id)?.networkFeeUsdMicros;
+
+  if (video) {
+    const outputId = "asset_dev_video";
+    const referenceId = "asset_user_upload_forest_reference";
+    const maskId = "asset_platform_forest_mask";
+    inputs = {
+      prompt:
+        "Create a cinematic tracking shot that begins low among wet ferns in a dense bioluminescent forest at blue hour. The camera should move forward at a deliberate walking pace, then rise gently as translucent plants illuminate in sequence along the path. Keep the atmosphere humid and dimensional, with soft particulate drifting through narrow shafts of moonlight. Introduce a solitary figure only as a distant silhouette for scale; they should never become the focal point. Preserve natural parallax between the foreground leaves, tree trunks, and hazy background, and finish on a wide reveal of a quiet luminous valley. The motion should feel physically grounded, continuous, and suitable for a premium science-fiction nature documentary.",
+      negative_prompt:
+        "visible text, subtitles, logos, watermarks, abrupt camera shake, fast cuts, warped anatomy, duplicated plants, oversaturated neon colors, crushed shadows, flicker, temporal smearing, or a synthetic game-engine appearance",
+      image_url: assetUrl(referenceId),
+      mask_url: assetUrl(maskId),
+      duration: "5",
+      aspect_ratio: "16:9",
+      generate_audio: false,
+    };
+    resultValue = {
+      video: { url: assetUrl(outputId), content_type: "video/mp4" },
+      inference_time_ms: 58_240,
+    };
+    assets = [
+      mockAsset(run, outputId, "video", "Bioluminescent valley.mp4"),
+      mockAsset(run, referenceId, "image", "Forest reference.webp"),
+      mockAsset(run, maskId, "image", "Forest subject mask.webp"),
+    ];
+  } else if (image) {
+    const outputId = "asset_dev_image";
+    inputs = {
+      prompt: "A red lighthouse above a quiet geometric sea",
+      image_size: "landscape_16_9",
+      num_images: 1,
+      seed: 42,
+    };
+    resultValue = {
+      images: [{ url: assetUrl(outputId), width: 1536, height: 864 }],
+      seed: 42,
+      inference_time_ms: 1_840,
+    };
+    assets = [mockAsset(run, outputId, "image", "Red lighthouse.webp")];
+  } else if (run.id === "run_dev_keyframes") {
+    const outputId = "asset_dev_keyframes_video";
+    const firstFrameId = "asset_platform_station_first";
+    const middleFrameId = "asset_platform_station_middle";
+    const lastFrameId = "asset_platform_station_last";
+    inputs = {
+      keyframes: [
+        {
+          timestamp_seconds: 0,
+          image_url: assetUrl(firstFrameId),
+          prompt:
+            "Begin on a still, symmetrical wide shot of the empty train platform before sunrise, with cool mist held close to the tracks.",
+        },
+        {
+          timestamp_seconds: 3.5,
+          image_url: assetUrl(middleFrameId),
+          prompt:
+            "A silver train enters from the right while the camera eases backward; preserve the station geometry and introduce warm window light gradually.",
+        },
+        {
+          timestamp_seconds: 7,
+          image_url: assetUrl(lastFrameId),
+          prompt:
+            "Resolve on the departing rear carriage disappearing into fog, leaving the platform unchanged and the camera completely settled.",
+        },
+      ],
+      interpolation: { easing: "ease_in_out", motion_strength: 0.65 },
+      fps: 24,
+      loop: false,
+    };
+    resultValue = {
+      video_url: assetUrl(outputId),
+      frame_count: 168,
+      inference_time_ms: 71_330,
+    };
+    assets = [
+      mockAsset(run, outputId, "video", "Train platform transition.mp4"),
+      mockAsset(run, firstFrameId, "image", "Empty station at dawn.webp"),
+      mockAsset(run, middleFrameId, "image", "Train entering station.webp"),
+      mockAsset(run, lastFrameId, "image", "Train departing into fog.webp"),
+    ];
+  } else if (run.id === "run_dev_transcript") {
+    const audioId = "asset_user_upload_interview_audio";
+    inputs = {
+      audio_url: assetUrl(audioId),
+      language: null,
+      diarize: true,
+      timestamp_granularity: "word",
+      batch_size: 16,
+    };
+    resultValue = {
+      text: "Welcome back. Today we are looking at how a generated scene changes when motion direction is specified independently from camera movement.",
+      language: "en",
+      speakers: ["SPEAKER_00", "SPEAKER_01"],
+      segments: [
+        { speaker: "SPEAKER_00", start: 0, end: 3.84, text: "Welcome back." },
+        {
+          speaker: "SPEAKER_01",
+          start: 4.12,
+          end: 11.76,
+          text: "Today we are looking at how a generated scene changes when motion direction is specified independently from camera movement.",
+        },
+      ],
+      inference_time_ms: 7_260,
+    };
+    assets = [mockAsset(run, audioId, "audio", "Interview recording.mp3")];
+  } else if (run.id === "run_dev_metadata") {
+    const sourceId = "asset_user_upload_product_walkthrough";
+    inputs = {
+      video_url: assetUrl(sourceId),
+      include_streams: true,
+      include_format: true,
+    };
+    resultValue = {
+      format: {
+        duration_seconds: 12.48,
+        size_bytes: 18_642_901,
+        bit_rate: 11_950_578,
+        format_names: ["mov", "mp4", "m4a", "3gp", "3g2", "mj2"],
+      },
+      streams: [
+        {
+          index: 0,
+          type: "video",
+          codec: "h264",
+          width: 1920,
+          height: 1080,
+          frame_rate: "24000/1001",
+        },
+        {
+          index: 1,
+          type: "audio",
+          codec: "aac",
+          channels: 2,
+          sample_rate_hz: 48_000,
+        },
+      ],
+      processing_duration_ms: 940,
+    };
+    assets = [mockAsset(run, sourceId, "video", "Product walkthrough.mp4")];
+  } else if (run.id === "run_dev_3d") {
+    const modelId = "asset_dev_3d_glb";
+    const textureId = "asset_dev_3d_texture";
+    const previewId = "asset_dev_3d_preview";
+    inputs = {
+      prompt:
+        "A museum-ready ceramic fox figurine with a softly faceted silhouette, hand-painted cobalt botanical details, a stable flat base, and clean watertight topology suitable for close product renders.",
+      negative_prompt:
+        "thin unsupported parts, holes, floating geometry, text, logos, asymmetrical eyes, low-resolution textures",
+      topology: "quad",
+      target_face_count: 24_000,
+      generate_texture: true,
+      texture_resolution: "2048",
+    };
+    resultValue = {
+      model: { url: assetUrl(modelId), format: "glb" },
+      textures: [{ url: assetUrl(textureId), channel: "base_color" }],
+      preview_image: { url: assetUrl(previewId) },
+      polygon_count: 23_842,
+      inference_time_ms: 84_910,
+    };
+    assets = [
+      mockAsset(run, modelId, "model/gltf-binary", "Ceramic fox.glb"),
+      mockAsset(run, textureId, "image/png", "Ceramic fox texture.png"),
+      mockAsset(run, previewId, "image/png", "Ceramic fox preview.png"),
+    ];
+  } else {
+    inputs = {
+      prompt: "A glass sculpture rotating in a dark studio",
+      duration: "5",
+    };
+    resultValue = { error: "content_policy_rejection", retryable: false };
+  }
+
+  return {
+    ...run,
+    inputSchema: mockInputSchema(run),
+    submittedArguments: {
+      capability: run.capability,
+      inputs,
+    },
+    result: { value: resultValue },
+    captureRedactedPaths: [],
+    assets: assets.map((asset) => ({
+      ...asset,
+      role: JSON.stringify(inputs).includes(asset.url) ? "input" : "output",
+    })),
+    events: [
+      {
+        id: `${run.id}_created`,
+        eventKey: "created",
+        status: "queued",
+        createdAt: run.createdAt,
+        metadata: {},
+      },
+      ...(feeUsdMicros
+        ? [
+            {
+              id: `${run.id}_usage`,
+              eventKey: `usage:evt_${run.id}`,
+              status: run.status,
+              createdAt: run.completedAt ?? run.updatedAt,
+              metadata: {
+                kind: "billing_usage",
+                eventId: `evt_${run.id}`,
+                networkFeeUsdMicros: feeUsdMicros,
+              },
+            },
+          ]
+        : []),
+      {
+        id: `${run.id}_returned`,
+        eventKey: "dispatch-returned",
+        status: run.status,
+        createdAt: run.completedAt ?? run.updatedAt,
+        metadata: { providerStatus: run.status.toUpperCase() },
+      },
+    ],
+  };
+}
+
+function mockInputSchema(run: RunSummary): RunInputSchema | null {
+  if (run.id === "run_dev_image") {
+    return {
+      endpointId: "fal-ai/flux/schnell",
+      schemaSha256: "dev-fixture",
+      fields: [
+        {
+          path: "prompt",
+          title: "Prompt",
+          description: "The prompt to generate an image from.",
+          required: true,
+          types: ["string"],
+          options: [],
+        },
+        {
+          path: "image_size",
+          title: "Image Size",
+          description: "The size of the generated image.",
+          required: false,
+          types: ["object", "string"],
+          options: [
+            "square_hd",
+            "square",
+            "portrait_4_3",
+            "portrait_16_9",
+            "landscape_4_3",
+            "landscape_16_9",
+          ],
+          defaultValue: "landscape_4_3",
+        },
+        {
+          path: "image_size.width",
+          title: "Width",
+          description: "The width of the generated image.",
+          required: false,
+          types: ["integer"],
+          options: [],
+        },
+        {
+          path: "image_size.height",
+          title: "Height",
+          description: "The height of the generated image.",
+          required: false,
+          types: ["integer"],
+          options: [],
+        },
+        {
+          path: "num_images",
+          title: "Num Images",
+          description: "The number of images to generate.",
+          required: false,
+          types: ["integer"],
+          options: [],
+          minimum: 1,
+          maximum: 4,
+          defaultValue: 1,
+        },
+        {
+          path: "seed",
+          title: "Seed",
+          description:
+            "The same seed and prompt produce the same image with this model version.",
+          required: false,
+          types: ["integer", "null"],
+          options: [],
+        },
+      ],
+    };
+  }
+  return null;
+}
+
+function mockAssetRecord(
+  run: RunSummary,
+  id: string,
+  mediaType: string,
+  displayName: string
+): RunDetail["assets"][number] {
+  const createdAt = run.completedAt ?? run.updatedAt;
+  const expiresAt = new Date(
+    Date.parse(createdAt) + 7 * 24 * 60 * 60 * 1000
+  ).toISOString();
+  return {
+    id,
+    displayName,
+    url: `https://earlyaccess.livepeer.org/api/assets/${id}`,
+    mediaType,
+    providerRequestId: run.providerRequestId,
+    availableUntil: null,
+    expiresAt,
+    unavailableAt: null,
+    hiddenAt: null,
+    createdAt,
+  };
+}
 
 /** Deterministic PRNG — charts must not reshuffle on every reload. */
 function seeded(seed: number): () => number {
@@ -484,9 +1012,24 @@ export function devMockResponse(
   search: URLSearchParams,
   requestUrl: string
 ): Response | null {
+  if (pathname.startsWith("/api/assets/")) {
+    const id = decodeURIComponent(pathname.slice("/api/assets/".length));
+    const target = MOCK_ASSET_PATHS[id];
+    if (target) {
+      return new Response(null, {
+        status: 307,
+        headers: { location: new URL(target, requestUrl).toString() },
+      });
+    }
+    return new Response("Mock media unavailable", {
+      status: 404,
+      headers: { "cache-control": "no-store" },
+    });
+  }
+
   if (pathname === "/api/console/session") {
     return json({
-      userId: "00000000-0000-4000-8000-000000000001",
+      userId: MOCK_USER_ID,
       externalUserId: "eu_devmock",
       name: "Design Preview",
       email: MOCK_EMAIL,
@@ -588,6 +1131,40 @@ export function devMockResponse(
     });
   }
 
+  if (pathname === "/api/console/runs") {
+    const query = search.get("search")?.trim().toLowerCase();
+    const items = mockRunSummaries().filter(
+      (run) =>
+        !query ||
+        run.capability.toLowerCase().includes(query) ||
+        run.gatewayRequestId.toLowerCase().includes(query)
+    );
+    return json({
+      items,
+      nextCursor: null,
+      counts: {
+        total: items.length,
+        succeeded: items.filter((run) => run.status === "succeeded").length,
+        failed: items.filter((run) => run.status === "failed").length,
+        queued: 0,
+        running: 0,
+        unknown: 0,
+        cancelled: 0,
+      },
+    });
+  }
+
+  if (pathname === "/api/console/runs/billing-sync")
+    return json({ changedRunIds: [], changedCount: 0, pending: false });
+
+  if (pathname.startsWith("/api/console/runs/")) {
+    const id = decodeURIComponent(pathname.slice("/api/console/runs/".length));
+    const run = mockRunSummaries().find((item) => item.id === id);
+    return run
+      ? json(mockRunDetail(run, new URL(requestUrl).origin))
+      : json({ error: "run_not_found" }, 404);
+  }
+
   if (pathname === "/api/pymthouse/account-usage") {
     const rawDays = Number.parseInt(search.get("days") ?? "", 10);
     const periodDays =
diff --git a/lib/console/end-user-token-cache.ts b/lib/console/end-user-token-cache.ts
new file mode 100644
index 00000000..8967cab1
--- /dev/null
+++ b/lib/console/end-user-token-cache.ts
@@ -0,0 +1,76 @@
+export type CachedEndUserToken = {
+  access_token: string;
+  refresh_token: string;
+  token_type: "Bearer";
+  expires_in: number;
+  scope: string;
+};
+
+const REFRESH_SKEW_MS = 30_000;
+
+type Slot = {
+  token: CachedEndUserToken | null;
+  expiresAt: number;
+  inflight: Promise<CachedEndUserToken> | null;
+};
+
+const slots = new Map<string, Slot>();
+
+export function endUserTokenCacheKey(
+  publicClientId: string,
+  externalUserId: string,
+  scope = "sign:job"
+): string {
+  return `${publicClientId}\n${externalUserId}\n${scope}`;
+}
+
+export function resetEndUserTokenCache(): void {
+  slots.clear();
+}
+
+function slotFor(key: string): Slot {
+  const existing = slots.get(key);
+  if (existing) return existing;
+  const created: Slot = { token: null, expiresAt: 0, inflight: null };
+  slots.set(key, created);
+  return created;
+}
+
+function readLiveEndUserAccessToken(
+  key: string,
+  now = Date.now()
+): CachedEndUserToken | null {
+  const slot = slots.get(key);
+  if (slot?.token && slot.expiresAt - REFRESH_SKEW_MS > now) return slot.token;
+  return null;
+}
+
+/** Process-local reuse + single-flight. Not a session cookie. */
+export async function cachedEndUserAccessToken(
+  key: string,
+  mint: () => Promise<CachedEndUserToken>,
+  now = Date.now(),
+  options?: { force?: boolean }
+): Promise<CachedEndUserToken> {
+  const slot = slotFor(key);
+  if (!options?.force) {
+    const live = readLiveEndUserAccessToken(key, now);
+    if (live) return live;
+  }
+  if (slot.inflight) return slot.inflight;
+  const pending = mint()
+    .then((token) => {
+      const lifetimeMs = Math.max(0, token.expires_in) * 1000;
+      slot.token = token;
+      slot.expiresAt = now + lifetimeMs;
+      slot.inflight = null;
+      return token;
+    })
+    .catch((error: unknown) => {
+      slot.inflight = null;
+      if (slot.token && slot.expiresAt > now) return slot.token;
+      throw error;
+    });
+  slot.inflight = pending;
+  return pending;
+}
diff --git a/lib/console/manifest-usage.ts b/lib/console/manifest-usage.ts
new file mode 100644
index 00000000..dc57c860
--- /dev/null
+++ b/lib/console/manifest-usage.ts
@@ -0,0 +1,68 @@
+import "server-only";
+import { getEndUserAccessToken } from "./pymthouse-bff";
+import { issuerOriginFromConfig } from "./pymthouse-http";
+
+export type ManifestUsage = {
+  manifestId: string;
+  networkFeeUsdMicros: string;
+  feeWei: string | null;
+};
+
+/** The server forces account scope from the minted end-user token. */
+export async function fetchManifestUsage(input: {
+  externalUserId: string;
+  email?: string;
+  startDate: string;
+  endDate: string;
+}): Promise<ManifestUsage[]> {
+  const token = await getEndUserAccessToken(input.externalUserId, input.email);
+  const url = new URL("/api/v1/user/usage", issuerOriginFromConfig());
+  url.search = new URLSearchParams({
+    groupBy: "manifest",
+    startDate: input.startDate,
+    endDate: input.endDate,
+  }).toString();
+  const response = await fetch(url, {
+    headers: {
+      Authorization: `Bearer ${token.access_token}`,
+      Accept: "application/json",
+    },
+    cache: "no-store",
+    signal: AbortSignal.timeout(20_000),
+  });
+  if (!response.ok) throw new Error("manifest_usage_unavailable");
+  const body: unknown = await response.json();
+  if (
+    !body ||
+    typeof body !== "object" ||
+    !("byManifest" in body) ||
+    !Array.isArray(body.byManifest)
+  )
+    throw new Error("invalid_manifest_usage");
+  const seen = new Set<string>();
+  return body.byManifest.map((row: unknown) => {
+    if (!row || typeof row !== "object")
+      throw new Error("invalid_manifest_usage");
+    const value = row as Record<string, unknown>;
+    const id = value.manifestId;
+    const fee = value.networkFeeUsdMicros;
+    const wei = value.feeWei;
+    if (
+      typeof id !== "string" ||
+      !id ||
+      id.length > 512 ||
+      /\s/.test(id) ||
+      seen.has(id) ||
+      typeof fee !== "string" ||
+      !/^\d{1,30}(?:\.\d{1,18})?$/.test(fee) ||
+      (wei != null && (typeof wei !== "string" || !/^\d{1,128}$/.test(wei)))
+    )
+      throw new Error("invalid_manifest_usage");
+    seen.add(id);
+    return {
+      manifestId: id,
+      networkFeeUsdMicros: fee,
+      feeWei: typeof wei === "string" ? wei : null,
+    };
+  });
+}
diff --git a/lib/console/pymthouse-bff.ts b/lib/console/pymthouse-bff.ts
index a96350da..7a15a1bb 100644
--- a/lib/console/pymthouse-bff.ts
+++ b/lib/console/pymthouse-bff.ts
@@ -22,6 +22,10 @@ import {
 } from "@/lib/console/usage-capability-display";
 import { historyRange } from "@/lib/console/history-range";
 import { isUserNotFoundError } from "@/lib/console/pymthouse-errors";
+import {
+  cachedEndUserAccessToken,
+  endUserTokenCacheKey,
+} from "@/lib/console/end-user-token-cache";
 
 export type {
   AccountRequestsPayload,
@@ -54,7 +58,7 @@ export async function ensureDashboardAppUser(
   });
 }
 
-export async function mintEndUserAccessToken(
+async function mintEndUserAccessTokenUncached(
   externalUserId: string,
   email?: string
 ): Promise<{
@@ -82,6 +86,45 @@ export async function mintEndUserAccessToken(
   }
 }
 
+function tokenCacheKey(externalUserId: string): string {
+  return endUserTokenCacheKey(readPublicClientId(), externalUserId);
+}
+
+/** MCP sign-in. Always mints and stores. */
+export async function mintEndUserAccessToken(
+  externalUserId: string,
+  email?: string
+): Promise<{
+  access_token: string;
+  refresh_token: string;
+  token_type: "Bearer";
+  expires_in: number;
+  scope: string;
+}> {
+  return cachedEndUserAccessToken(
+    tokenCacheKey(externalUserId),
+    () => mintEndUserAccessTokenUncached(externalUserId, email),
+    Date.now(),
+    { force: true }
+  );
+}
+
+/** Console session and usage. Reuses a live token; remints after restart or expiry. */
+export async function getEndUserAccessToken(
+  externalUserId: string,
+  email?: string
+): Promise<{
+  access_token: string;
+  refresh_token: string;
+  token_type: "Bearer";
+  expires_in: number;
+  scope: string;
+}> {
+  return cachedEndUserAccessToken(tokenCacheKey(externalUserId), () =>
+    mintEndUserAccessTokenUncached(externalUserId, email)
+  );
+}
+
 /** Last `days` UTC calendar days inclusive of today — not a trailing clock window. */
 function rollingPeriodDays(
   days: number,
@@ -254,18 +297,23 @@ export async function fetchAccountRequestsForExternalUser(input: {
   email?: string;
   cursor?: string | null;
   limit?: number;
+  /**
+   * Cost lookups must not send a 365-day window. OpenMeter lists cap at 100
+   * events, so a year-long range drops the ticket Home is trying to price.
+   * Omitting from/to uses the current UTC month on `/me/usage/requests`.
+   */
+  recentWindow?: boolean;
 }): Promise<AccountRequestsPayload> {
   const publicClientId = readPublicClientId();
-  const minted = await mintEndUserAccessToken(
-    input.externalUserId,
-    input.email
-  );
+  const minted = await getEndUserAccessToken(input.externalUserId, input.email);
   const accessToken = minted.access_token;
 
   const url = new URL(`${issuerOriginFromConfig()}/api/v1/user/usage/requests`);
-  const range = historyRange();
-  url.searchParams.set("from", range.from);
-  url.searchParams.set("to", range.to);
+  if (!input.recentWindow) {
+    const range = historyRange();
+    url.searchParams.set("from", range.from);
+    url.searchParams.set("to", range.to);
+  }
   if (input.cursor) url.searchParams.set("cursor", input.cursor);
   if (input.limit != null) url.searchParams.set("limit", String(input.limit));
 
diff --git a/lib/console/run-activity.test.ts b/lib/console/run-activity.test.ts
index 87800005..915f4696 100644
--- a/lib/console/run-activity.test.ts
+++ b/lib/console/run-activity.test.ts
@@ -1,11 +1,8 @@
 import assert from "node:assert/strict";
 import { test } from "node:test";
 
-import {
-  feeFieldsFromRunEvents,
-  runToActivity,
-} from "./run-activity";
-import type { RunDetail, RunSummary } from "@/lib/runs/types";
+import { runToActivity } from "./run-activity";
+import type { RunSummary } from "@/lib/runs/types";
 
 function summary(overrides: Partial<RunSummary> = {}): RunSummary {
   return {
@@ -30,6 +27,7 @@ function summary(overrides: Partial<RunSummary> = {}): RunSummary {
     startedAt: "2026-09-08T18:00:00Z",
     completedAt: "2026-09-08T18:00:01Z",
     email: null,
+    billing: null,
     ...overrides,
   };
 }
@@ -40,38 +38,18 @@ test("run history stays em-dash when no billing receipt is joined", () => {
   assert.equal(row.costExact, undefined);
 });
 
-test("run history uses the signed-ticket fee mapper", () => {
-  const row = runToActivity(summary(), { networkFeeUsdMicros: "1000" });
+test("run history formats its persisted billing summary", () => {
+  const row = runToActivity(
+    summary({ billing: { networkFeeUsdMicros: "1000", receiptCount: 1 } })
+  );
   assert.equal(row.costDisplay, "$0.0010");
   assert.equal(row.costExact, "$0.001");
 });
 
-test("run detail reads the latest billing_usage event", () => {
-  const detail = {
-    ...summary(),
-    submittedArguments: null,
-    result: null,
-    captureRedactedPaths: [],
-    assets: [],
-    events: [
-      {
-        id: "evt_old",
-        eventKey: "usage:old",
-        status: "succeeded" as const,
-        createdAt: "2026-09-08T18:00:00Z",
-        metadata: { kind: "billing_usage", networkFeeUsdMicros: "500" },
-      },
-      {
-        id: "evt_new",
-        eventKey: "usage:new",
-        status: "succeeded" as const,
-        createdAt: "2026-09-08T18:00:02Z",
-        metadata: { kind: "billing_usage", networkFeeUsdMicros: "2500" },
-      },
-    ],
-  } satisfies RunDetail;
-  const fields = feeFieldsFromRunEvents(detail.events);
-  assert.equal(fields?.networkFeeUsdMicros, "2500");
-  const row = runToActivity(detail);
-  assert.equal(row.costDisplay, "$0.0025");
+test("multiple persisted receipts use their decimal-safe aggregate", () => {
+  const row = runToActivity(
+    summary({ billing: { networkFeeUsdMicros: "3000", receiptCount: 2 } })
+  );
+  assert.equal(row.costDisplay, "$0.0030");
+  assert.equal(row.costExact, "$0.003");
 });
diff --git a/lib/console/run-activity.ts b/lib/console/run-activity.ts
index e9a4d850..f618a0fe 100644
--- a/lib/console/run-activity.ts
+++ b/lib/console/run-activity.ts
@@ -1,4 +1,4 @@
-import type { JsonValue, RunDetail, RunSummary } from "@/lib/runs/types";
+import type { RunDetail, RunSummary } from "@/lib/runs/types";
 import type { AccountActivityRow } from "./types";
 import { resolveActivityCapability } from "./capability-modality";
 import {
@@ -7,56 +7,15 @@ import {
 } from "./request-fee-display";
 import { humanizePipelineModel } from "./usage-capability-display";
 
-export type RunActivityFee = {
-  costDisplay: string;
-  costExact?: string;
-};
-
-function isRequestFeeFields(
-  fee: RequestFeeFields | RunActivityFee
-): fee is RequestFeeFields {
-  return "networkFeeUsdMicros" in fee;
-}
-
 function costFromFee(
-  fee: RequestFeeFields | RunActivityFee | null | undefined
-): RunActivityFee | null {
+  fee: RequestFeeFields | null | undefined
+): { costDisplay: string; costExact: string } | null {
   if (!fee || typeof fee !== "object") return null;
-  if (isRequestFeeFields(fee)) {
-    const { display, exact } = requestFeeDisplay(fee);
-    return { costDisplay: display, costExact: exact };
-  }
-  return fee.costDisplay ? fee : null;
-}
-
-/** Latest correlated billing receipt on a run, if any. */
-export function feeFieldsFromRunEvents(
-  events:
-    | {
-        metadata: Record<string, JsonValue>;
-      }[]
-    | undefined
-): RequestFeeFields | undefined {
-  if (!events) return undefined;
-  for (let i = events.length - 1; i >= 0; i--) {
-    const meta = events[i]?.metadata;
-    if (!meta || meta.kind !== "billing_usage") continue;
-    if (typeof meta.networkFeeUsdMicros !== "string") continue;
-    return {
-      networkFeeUsdMicros: meta.networkFeeUsdMicros,
-      ...(typeof meta.feeWei === "string" ? { feeWei: meta.feeWei } : {}),
-      ...(typeof meta.ethUsdPrice === "string"
-        ? { ethUsdPrice: meta.ethUsdPrice }
-        : {}),
-    };
-  }
-  return undefined;
+  const { display, exact } = requestFeeDisplay(fee);
+  return { costDisplay: display, costExact: exact };
 }
 
-export function runToActivity(
-  run: RunSummary | RunDetail,
-  fee?: RequestFeeFields | RunActivityFee | null
-): AccountActivityRow {
+export function runToActivity(run: RunSummary | RunDetail): AccountActivityRow {
   const capability = resolveActivityCapability({
     pipeline: run.capability,
     capabilityId: run.modelId ?? run.capability,
@@ -65,11 +24,7 @@ export function runToActivity(
     run.startedAt && run.completedAt
       ? Date.parse(run.completedAt) - Date.parse(run.startedAt)
       : null;
-  const cost =
-    costFromFee(fee) ??
-    costFromFee(
-      feeFieldsFromRunEvents("events" in run ? run.events : undefined)
-    );
+  const cost = costFromFee(run.billing);
   return {
     id: run.id,
     recordKind: "run",
diff --git a/lib/console/session-user.ts b/lib/console/session-user.ts
index 2822aa0d..d7a08a38 100644
--- a/lib/console/session-user.ts
+++ b/lib/console/session-user.ts
@@ -7,6 +7,7 @@ import {
 } from "@/lib/external-accounts/service";
 import { enrollAuthenticatedUser } from "@/lib/access/enrollment";
 import { AccessError, requireApprovedUser } from "@/lib/access/service";
+import { getEndUserAccessToken } from "@/lib/console/pymthouse-bff";
 
 export class SessionRequiredError extends Error {
   readonly status = 401;
@@ -54,6 +55,13 @@ export async function requireConsoleSession() {
       userId: canonical.userId,
       identityId: canonical.identityId,
     });
+    try {
+      await getEndUserAccessToken(account.externalUserId, identity.email);
+    } catch (error) {
+      console.error("end_user_token_mint_failed", {
+        errorType: error instanceof Error ? error.name : "unknown",
+      });
+    }
     return {
       externalUserId: account.externalUserId,
       canonicalUserId: canonical.userId,
diff --git a/lib/console/signed-ticket-activity.ts b/lib/console/signed-ticket-activity.ts
index 8ad3eb30..a24b40f3 100644
--- a/lib/console/signed-ticket-activity.ts
+++ b/lib/console/signed-ticket-activity.ts
@@ -31,6 +31,7 @@ export function mapSignedTicketToActivityRow(
   return {
     id: `usage:${row.eventId}`,
     gatewayRequestId: row.gatewayRequestId,
+    capabilityId: row.modelId,
     recordKind: "usage",
     environmentId: "env-production",
     timestamp: row.time,
diff --git a/lib/console/types.ts b/lib/console/types.ts
index cc40ec9f..c487fd6c 100644
--- a/lib/console/types.ts
+++ b/lib/console/types.ts
@@ -414,6 +414,8 @@ export type AccountActivityStatus =
 export interface AccountActivityRow {
   recordKind?: "run" | "usage";
   gatewayRequestId?: string;
+  /** Raw capability id (`livepeer-example/fal-flux-schnell`). Used to join Cost. */
+  capabilityId?: string;
   id: string;
   /** Environment this request ran under. Scopes Jobs + Home runs by env. */
   environmentId: string;
diff --git a/lib/console/usage-capability-display.ts b/lib/console/usage-capability-display.ts
index 01c8ab6f..402459f0 100644
--- a/lib/console/usage-capability-display.ts
+++ b/lib/console/usage-capability-display.ts
@@ -40,9 +40,22 @@ export function humanizePipelineModel(
   const raw = segment.includes(":")
     ? segment.split(":").slice(-1)[0]!
     : segment;
-  return raw
-    .split(/[-_./|:]+/)
-    .filter(Boolean)
+  const parts = raw.split(/[-_./|:]+/).filter(Boolean);
+
+  // Catalog and provider namespaces are useful in canonical capability IDs,
+  // but add no meaning to the model name shown to people.
+  if (
+    parts[0]?.toLowerCase() === "livepeer" &&
+    parts[1]?.toLowerCase() === "example"
+  ) {
+    parts.splice(0, 2);
+  }
+  if (parts[0]?.toLowerCase() === "fal") {
+    parts.shift();
+    if (parts[0]?.toLowerCase() === "ai") parts.shift();
+  }
+
+  return parts
     .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
     .join(" ");
 }
diff --git a/lib/console/useRunHistory.ts b/lib/console/useRunHistory.ts
index 5a18d57a..d9e6ba87 100644
--- a/lib/console/useRunHistory.ts
+++ b/lib/console/useRunHistory.ts
@@ -32,7 +32,6 @@ export function useRunHistory(
   const generation = useRef(0);
   const busy = useRef(false);
   const appendController = useRef<AbortController | null>(null);
-  const [refresh, setRefresh] = useState(0);
   useEffect(() => {
     const id = ++generation.current;
     const controller = new AbortController();
@@ -79,7 +78,7 @@ export function useRunHistory(
       appendController.current?.abort();
       generation.current = id + 1;
     };
-  }, [key, url, enabled, refresh]);
+  }, [key, url, enabled]);
 
   const loadMore = useCallback(async () => {
     if (
@@ -131,7 +130,50 @@ export function useRunHistory(
       if (generation.current === id) busy.current = false;
     }
   }, [state, key, url, enabled]);
-  const reload = useCallback(() => setRefresh((value) => value + 1), []);
+  const reload = useCallback(() => {
+    if (!enabled) return;
+    const id = ++generation.current;
+    appendController.current?.abort();
+    appendController.current = null;
+    busy.current = false;
+    const controller = new AbortController();
+    setState((old) => (old.key === key ? { ...old, loadingMore: false } : old));
+    void fetch(url, { cache: "no-store", signal: controller.signal })
+      .then(async (response) => {
+        if (!response.ok) throw Error("Could not load run history.");
+        return response.json() as Promise<RunPage>;
+      })
+      .then((page) => {
+        if (generation.current === id)
+          setState((old) =>
+            old.key === key
+              ? {
+                  ...old,
+                  page,
+                  loading: false,
+                  loadingMore: false,
+                  error: null,
+                }
+              : old
+          );
+      })
+      .catch((error: unknown) => {
+        if (!controller.signal.aborted && generation.current === id)
+          setState((old) =>
+            old.key === key
+              ? {
+                  ...old,
+                  loading: false,
+                  loadingMore: false,
+                  error:
+                    error instanceof Error
+                      ? error.message
+                      : "Could not load run history.",
+                }
+              : old
+          );
+      });
+  }, [enabled, key, url]);
   return {
     ...(enabled && state.key === key
       ? state
@@ -168,8 +210,30 @@ export function useRunDetail(
           return response.json() as Promise<RunDetail>;
         })
         .then((detail) => {
-          if (!controller.signal.aborted)
+          if (!controller.signal.aborted) {
             setState({ key, detail, loading: false, error: null });
+            if (base !== "/api/console/runs") return;
+            void Promise.resolve(
+              fetch(`${base}/${encodeURIComponent(id)}/schema`, {
+                cache: "no-store",
+                signal: controller.signal,
+              })
+            )
+              .then(async (response) =>
+                response.ok
+                  ? (response.json() as Promise<Pick<RunDetail, "inputSchema">>)
+                  : null
+              )
+              .then((schema) => {
+                if (!schema || controller.signal.aborted) return;
+                setState((old) =>
+                  old.key === key && old.detail
+                    ? { ...old, detail: { ...old.detail, ...schema } }
+                    : old
+                );
+              })
+              .catch(() => undefined);
+          }
         })
         .catch((error: unknown) => {
           if (!controller.signal.aborted)
diff --git a/lib/db/full-baseline.test.ts b/lib/db/full-baseline.test.ts
index de9fb862..2a1ff419 100644
--- a/lib/db/full-baseline.test.ts
+++ b/lib/db/full-baseline.test.ts
@@ -34,11 +34,11 @@ describe("full baseline transition", () => {
     ])
       expect(() => consoleMigrationTarget({ ...env, ...changes })).toThrow();
   });
-  it("pins every original hash and a single equivalent final snapshot", () => {
+  it("pins every original hash, the equivalent baseline, and additive migrations", () => {
     const manifest = JSON.parse(
       readFileSync("drizzle-baseline/source-manifest.json", "utf8")
     );
-    expect(active).toHaveLength(1);
+    expect(active).toHaveLength(3);
     expect(
       legacy.map((m) => ({ sha256: m.hash, when: m.folderMillis }))
     ).toEqual(
@@ -90,17 +90,17 @@ describe("full baseline transition", () => {
   });
   it("accepts the same future chain for both baseline and adopted databases", () => {
     const future = {
-      ...active[0],
+      ...active.at(-1)!,
       hash: "future",
-      folderMillis: active[0].folderMillis + 1,
+      folderMillis: active.at(-1)!.folderMillis + 1,
     };
     const chain = [...active, future];
     expect(classifyJournal(entries(chain), legacy, chain)).toEqual({
       kind: "baseline",
-      applied: 2,
+      applied: 4,
     });
     expect(
       classifyJournal(entries([...legacy, ...chain]), legacy, chain)
-    ).toEqual({ kind: "adopted", applied: 2 });
+    ).toEqual({ kind: "adopted", applied: 4 });
   });
 });
diff --git a/lib/db/schema/mcp-assets.ts b/lib/db/schema/mcp-assets.ts
index cf1e67f9..5eaba79e 100644
--- a/lib/db/schema/mcp-assets.ts
+++ b/lib/db/schema/mcp-assets.ts
@@ -1,11 +1,15 @@
 import {
+  check,
+  integer,
   index,
   foreignKey,
   pgTable,
   text,
   timestamp,
   uniqueIndex,
+  uuid,
 } from "drizzle-orm/pg-core";
+import { sql } from "drizzle-orm";
 import { runs } from "./runs";
 
 /** MCP-produced media URLs, scoped per console/MCP principal (`eu_…`). */
@@ -52,3 +56,41 @@ export const mcpAssets = pgTable(
     ),
   ]
 );
+
+/** Durable creative-lineage edges. mcp_assets.run_id remains the convenient
+ * producer pointer; this table is canonical for both input and output use. */
+export const runAssetLinks = pgTable(
+  "run_asset_links",
+  {
+    id: uuid("id").defaultRandom().primaryKey(),
+    runId: text("run_id")
+      .notNull()
+      .references(() => runs.id, { onDelete: "restrict" }),
+    assetId: text("asset_id")
+      .notNull()
+      .references(() => mcpAssets.id, { onDelete: "restrict" }),
+    direction: text("direction").notNull(),
+    role: text("role").notNull(),
+    parameterPath: text("parameter_path"),
+    ordinal: integer("ordinal").default(0).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .defaultNow()
+      .notNull(),
+  },
+  (table) => [
+    uniqueIndex("run_asset_links_edge_unique").on(
+      table.runId,
+      table.assetId,
+      table.direction,
+      table.parameterPath,
+      table.ordinal
+    ),
+    index("run_asset_links_run_idx").on(table.runId, table.direction),
+    index("run_asset_links_asset_idx").on(table.assetId, table.direction),
+    check(
+      "run_asset_links_direction_check",
+      sql`${table.direction} in ('input', 'output')`
+    ),
+    check("run_asset_links_ordinal_check", sql`${table.ordinal} >= 0`),
+  ]
+);
diff --git a/lib/db/schema/runs.ts b/lib/db/schema/runs.ts
index 4c7638dc..685c2da0 100644
--- a/lib/db/schema/runs.ts
+++ b/lib/db/schema/runs.ts
@@ -1,9 +1,11 @@
 import { sql } from "drizzle-orm";
 import {
+  boolean,
   check,
   index,
   integer,
   jsonb,
+  numeric,
   pgEnum,
   pgTable,
   text,
@@ -136,6 +138,46 @@ export const runEvents = pgTable(
   ]
 );
 
+/** Queryable, idempotent billing evidence. A matching immutable run event is
+ * written in the same transaction so the lifecycle timeline stays complete. */
+export const runUsageReceipts = pgTable(
+  "run_usage_receipts",
+  {
+    id: uuid("id").defaultRandom().primaryKey(),
+    eventId: text("event_id").notNull(),
+    runId: text("run_id")
+      .notNull()
+      .references(() => runs.id, { onDelete: "restrict" }),
+    gatewayRequestId: text("gateway_request_id").notNull(),
+    occurredAt: timestamp("occurred_at", { withTimezone: true }),
+    source: text("source").default("pymthouse").notNull(),
+    pipeline: text("pipeline"),
+    modelId: text("model_id"),
+    networkFeeUsdMicros: numeric("network_fee_usd_micros", {
+      precision: 78,
+      scale: 18,
+    }),
+    feeWei: numeric("fee_wei", { precision: 78, scale: 0 }),
+    pixels: numeric("pixels", { precision: 78, scale: 18 }),
+    ethUsdPrice: numeric("eth_usd_price", { precision: 78, scale: 18 }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .defaultNow()
+      .notNull(),
+  },
+  (table) => [
+    uniqueIndex("run_usage_receipts_event_unique").on(table.eventId),
+    index("run_usage_receipts_run_occurred_idx").on(
+      table.runId,
+      table.occurredAt
+    ),
+    index("run_usage_receipts_gateway_idx").on(table.gatewayRequestId),
+    check(
+      "run_usage_receipts_source_check",
+      sql`${table.source} in ('pymthouse')`
+    ),
+  ]
+);
+
 export const runReconciliationJobs = pgTable(
   "run_reconciliation_jobs",
   {
@@ -190,3 +232,39 @@ export const runReadAudits = pgTable(
     ),
   ]
 );
+
+/** One payment manifest belongs to one run within its PymtHouse account. */
+export const runPaymentManifests = pgTable(
+  "run_payment_manifests",
+  {
+    id: uuid("id").defaultRandom().primaryKey(),
+    runId: text("run_id")
+      .notNull()
+      .references(() => runs.id, { onDelete: "restrict" }),
+    externalAccountId: uuid("external_account_id")
+      .notNull()
+      .references(() => externalAccounts.id, { onDelete: "restrict" }),
+    manifestId: text("manifest_id").notNull(),
+    accepted: boolean("accepted").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    networkFeeUsdMicros: numeric("network_fee_usd_micros", {
+      precision: 48,
+      scale: 18,
+    }),
+    feeWei: text("fee_wei"),
+    observedAt: timestamp("observed_at", { withTimezone: true }),
+  },
+  (table) => [
+    uniqueIndex("run_payment_manifests_account_manifest_unique").on(
+      table.externalAccountId,
+      table.manifestId
+    ),
+    index("run_payment_manifests_run_idx").on(table.runId),
+    check(
+      "run_payment_manifests_nonnegative_fee",
+      sql`${table.networkFeeUsdMicros} >= 0`
+    ),
+  ]
+);
diff --git a/lib/identity/session-compatibility.test.ts b/lib/identity/session-compatibility.test.ts
index bd57c096..0f4c286a 100644
--- a/lib/identity/session-compatibility.test.ts
+++ b/lib/identity/session-compatibility.test.ts
@@ -22,10 +22,14 @@ vi.mock("@/lib/external-accounts/service", () => ({
   }),
   resolveExternalAccount: vi.fn(),
 }));
+vi.mock("@/lib/console/pymthouse-bff", () => ({
+  getEndUserAccessToken: vi.fn(),
+}));
 import { getAuthenticatedIdentity } from "@/lib/authentication/session";
 import { resolveProviderIdentity } from "@/lib/identity/provider-user";
 import { requireApprovedUser, AccessError } from "@/lib/access/service";
 import { resolveExternalAccount } from "@/lib/external-accounts/service";
+import { getEndUserAccessToken } from "@/lib/console/pymthouse-bff";
 import { requireConsoleSession } from "@/lib/console/session-user";
 import { enrollAuthenticatedUser } from "@/lib/access/enrollment";
 const identity = {
@@ -59,12 +63,23 @@ describe("shared server admission", () => {
       userId: "user",
       externalUserId: "persisted-legacy-id",
     });
+    vi.mocked(getEndUserAccessToken).mockResolvedValue({
+      access_token: "tok",
+      refresh_token: "refresh",
+      token_type: "Bearer",
+      expires_in: 300,
+      scope: "sign:job",
+    });
   });
   it("returns the persisted billing alias, never a provider-subject hash", async () => {
     expect(await requireConsoleSession()).toMatchObject({
       externalUserId: "persisted-legacy-id",
       canonicalUserId: "user",
     });
+    expect(getEndUserAccessToken).toHaveBeenCalledWith(
+      "persisted-legacy-id",
+      "test@example.invalid"
+    );
   });
   it("returns401 for an unauthenticated caller without enrollment", async () => {
     vi.mocked(getAuthenticatedIdentity).mockResolvedValue(null);
@@ -72,6 +87,7 @@ describe("shared server admission", () => {
       status: 401,
     });
     expect(resolveProviderIdentity).not.toHaveBeenCalled();
+    expect(getEndUserAccessToken).not.toHaveBeenCalled();
   });
   it.each(["pending", "revoked", "disabled"] as const)(
     "denies %s before account resolution",
@@ -82,6 +98,7 @@ describe("shared server admission", () => {
         state,
       });
       expect(resolveExternalAccount).not.toHaveBeenCalled();
+      expect(getEndUserAccessToken).not.toHaveBeenCalled();
     }
   );
   it("keeps the authenticated session but denies product operations during DB failure and retries", async () => {
@@ -104,6 +121,7 @@ describe("shared server admission", () => {
     await expect(requireConsoleSession()).rejects.toMatchObject({
       status: 503,
     });
+    expect(getEndUserAccessToken).not.toHaveBeenCalled();
     log.mockRestore();
   });
   it.each(["email_conflict", "waitlist_conflict", "inactive_contact"])(
@@ -122,6 +140,7 @@ describe("shared server admission", () => {
         code: "enrollment_attention_required",
       });
       expect(resolveExternalAccount).not.toHaveBeenCalled();
+      expect(getEndUserAccessToken).not.toHaveBeenCalled();
     }
   );
   it("retains verify-email behavior for unverified identities", async () => {
@@ -149,6 +168,16 @@ describe("shared server admission", () => {
       "externalUserId"
     );
   });
+  it("keeps the Auth0 session when PymtHouse mint fails after cookie validation", async () => {
+    const log = vi.spyOn(console, "error").mockImplementation(() => {});
+    vi.mocked(getEndUserAccessToken).mockRejectedValue(
+      new Error("mint_failed")
+    );
+    await expect(requireConsoleSession()).resolves.toMatchObject({
+      externalUserId: "persisted-legacy-id",
+    });
+    log.mockRestore();
+  });
   it.each(["revoked", "disabled", "unavailable"] as const)(
     "preserves %s precedence over enrollment attention",
     async (state) => {
diff --git a/lib/identity/signed-in-landing.ts b/lib/identity/signed-in-landing.ts
new file mode 100644
index 00000000..c45c822f
--- /dev/null
+++ b/lib/identity/signed-in-landing.ts
@@ -0,0 +1,33 @@
+import "server-only";
+import { getAuthenticatedIdentity } from "@/lib/authentication/session";
+import { resolveProviderIdentity } from "@/lib/identity/provider-user";
+import { enrollAuthenticatedUser } from "@/lib/access/enrollment";
+import { getAccessDecision } from "@/lib/access/service";
+import { getAdminPrincipalForUser } from "@/lib/admin/permissions";
+import { consoleSignInHref, safeReturnTo } from "@/lib/console/auth-login";
+import { isProtocolReturnPath } from "@/lib/identity/sync-return";
+
+/** Post-Auth0 / already-signed-in destination. Pages redirect; no extra route. */
+export async function signedInLandingPath(
+  requestedReturnTo: string
+): Promise<string> {
+  const returnTo = safeReturnTo(requestedReturnTo);
+  const identity = await getAuthenticatedIdentity();
+  if (!identity) return consoleSignInHref({ returnTo });
+  let destination = "/access-pending";
+  try {
+    const canonical = await resolveProviderIdentity(identity);
+    await enrollAuthenticatedUser(identity, canonical);
+    const decision = await getAccessDecision(canonical.userId);
+    if (decision.state === "approved")
+      destination = (await getAdminPrincipalForUser(canonical.userId))
+        ? "/admin"
+        : "/home";
+    if (returnTo === "/waitlist") destination = "/waitlist";
+  } catch (error) {
+    console.error("signed_in_landing_failed", {
+      errorType: error instanceof Error ? error.name : "unknown",
+    });
+  }
+  return isProtocolReturnPath(returnTo) ? returnTo : destination;
+}
diff --git a/lib/identity/sync-return.test.ts b/lib/identity/sync-return.test.ts
index 605c9ae3..fc43735f 100644
--- a/lib/identity/sync-return.test.ts
+++ b/lib/identity/sync-return.test.ts
@@ -1,20 +1,21 @@
 import { describe, expect, it } from "vitest";
 
-import { identitySyncPath, safeIdentityReturnTo } from "./sync-return";
+import { isProtocolReturnPath, safeIdentityReturnTo } from "./sync-return";
 
-describe("identity sync return routing", () => {
-  it("wraps internal paths", () => {
-    expect(identitySyncPath("/home?tab=usage")).toBe(
-      "/api/identity/sync?returnTo=%2Fhome%3Ftab%3Dusage"
+describe("signed-in return paths", () => {
+  it("treats device, authorize, and MCP callback as protocol destinations", () => {
+    expect(isProtocolReturnPath("/device?user_code=ABC")).toBe(true);
+    expect(isProtocolReturnPath("/authorize")).toBe(true);
+    expect(isProtocolReturnPath("/api/mcp/oauth/callback?state=opaque")).toBe(
+      true
     );
+    expect(isProtocolReturnPath("/home")).toBe(false);
   });
 
   it("rejects protocol-relative and external redirects", () => {
     expect(safeIdentityReturnTo("//evil.example")).toBe("/");
     expect(safeIdentityReturnTo("/\\evil.example/path")).toBe("/");
     expect(safeIdentityReturnTo("https://evil.example")).toBe("/");
-    expect(identitySyncPath("https://evil.example")).toBe(
-      "/api/identity/sync?returnTo=%2F"
-    );
+    expect(safeIdentityReturnTo("/home?tab=usage")).toBe("/home?tab=usage");
   });
 });
diff --git a/lib/identity/sync-return.ts b/lib/identity/sync-return.ts
index 458037ac..0f74b096 100644
--- a/lib/identity/sync-return.ts
+++ b/lib/identity/sync-return.ts
@@ -17,8 +17,3 @@ export function safeIdentityReturnTo(value: string | null): string {
     return "/";
   }
 }
-
-export function identitySyncPath(returnTo: string): string {
-  const safeReturnTo = safeIdentityReturnTo(returnTo);
-  return `/api/identity/sync?returnTo=${encodeURIComponent(safeReturnTo)}`;
-}
diff --git a/lib/mcp/fal-input-schema.test.ts b/lib/mcp/fal-input-schema.test.ts
new file mode 100644
index 00000000..5e5b2e70
--- /dev/null
+++ b/lib/mcp/fal-input-schema.test.ts
@@ -0,0 +1,116 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+
+import {
+  parseFalInputSchema,
+  resolveFalCatalogEntry,
+} from "./fal-input-schema";
+
+const document = {
+  paths: {
+    "/fal-ai/example": {
+      post: {
+        requestBody: {
+          content: {
+            "application/json": {
+              schema: { $ref: "#/components/schemas/Input" },
+            },
+          },
+        },
+      },
+    },
+  },
+  components: {
+    schemas: {
+      Input: {
+        type: "object",
+        required: ["prompt"],
+        properties: {
+          prompt: {
+            type: "string",
+            description: "Describe the output.",
+          },
+          image_size: {
+            description: "The size of the generated image.",
+            anyOf: [
+              { $ref: "#/components/schemas/ImageSize" },
+              { type: "string", enum: ["square", "landscape_16_9"] },
+            ],
+            default: "square",
+          },
+          keyframes: {
+            type: "array",
+            items: { $ref: "#/components/schemas/Keyframe" },
+          },
+        },
+      },
+      ImageSize: {
+        type: "object",
+        properties: {
+          width: { type: "integer", minimum: 1, maximum: 4096 },
+          height: { type: "integer", minimum: 1, maximum: 4096 },
+        },
+      },
+      Keyframe: {
+        type: "object",
+        required: ["image_url", "timestamp_seconds"],
+        properties: {
+          image_url: { type: "string", description: "A frame image." },
+          timestamp_seconds: { type: "number", minimum: 0 },
+        },
+      },
+    },
+  },
+};
+
+test("parses nested, array, enum, constraint, default, and required metadata", () => {
+  const schema = parseFalInputSchema(document, "fal-ai/example", "hash");
+  assert.ok(schema);
+  assert.deepEqual(
+    schema.fields.find((field) => field.path === "image_size"),
+    {
+      path: "image_size",
+      title: null,
+      description: "The size of the generated image.",
+      required: false,
+      types: ["object", "string"],
+      options: ["square", "landscape_16_9"],
+      defaultValue: "square",
+    }
+  );
+  assert.equal(
+    schema.fields.find((field) => field.path === "prompt")?.required,
+    true
+  );
+  assert.deepEqual(
+    schema.fields.find((field) => field.path === "image_size.width"),
+    {
+      path: "image_size.width",
+      title: null,
+      description: null,
+      required: false,
+      types: ["integer"],
+      options: [],
+      minimum: 1,
+      maximum: 4096,
+    }
+  );
+  assert.equal(
+    schema.fields.find((field) => field.path === "keyframes.*.image_url")
+      ?.description,
+    "A frame image."
+  );
+});
+
+test("resolves advertised capabilities by app id or provider endpoint id", () => {
+  assert.equal(
+    resolveFalCatalogEntry({ capability: "fal-ai/flux/schnell" })?.name,
+    "livepeer-example/fal-flux-schnell"
+  );
+  assert.equal(
+    resolveFalCatalogEntry({
+      capability: "livepeer-example/fal-flux-schnell",
+    })?.endpointId,
+    "fal-ai/flux/schnell"
+  );
+});
diff --git a/lib/mcp/fal-input-schema.ts b/lib/mcp/fal-input-schema.ts
new file mode 100644
index 00000000..da5af994
--- /dev/null
+++ b/lib/mcp/fal-input-schema.ts
@@ -0,0 +1,258 @@
+import type { RunInputFieldSchema, RunInputSchema } from "@/lib/runs/types";
+import {
+  FAL_CAPABILITY_CATALOG,
+  lookupFalCapability,
+  type FalCapabilityCatalogEntry,
+} from "@/lib/mcp/fal-capability-catalog";
+
+type JsonObject = Record<string, unknown>;
+
+function object(value: unknown): JsonObject | null {
+  return value && typeof value === "object" && !Array.isArray(value)
+    ? (value as JsonObject)
+    : null;
+}
+
+function localRef(document: JsonObject, ref: unknown): JsonObject | null {
+  if (typeof ref !== "string" || !ref.startsWith("#/")) return null;
+  let value: unknown = document;
+  for (const encodedPart of ref.slice(2).split("/")) {
+    const part = encodedPart.replace(/~1/g, "/").replace(/~0/g, "~");
+    value = object(value)?.[part];
+  }
+  return object(value);
+}
+
+function resolved(document: JsonObject, schema: unknown): JsonObject | null {
+  const node = object(schema);
+  if (!node) return null;
+  return localRef(document, node.$ref) ?? node;
+}
+
+function variants(document: JsonObject, schema: unknown): JsonObject[] {
+  const node = resolved(document, schema);
+  if (!node) return [];
+  const alternatives = [node.anyOf, node.oneOf]
+    .flatMap((value) => (Array.isArray(value) ? value : []))
+    .map((value) => resolved(document, value))
+    .filter((value): value is JsonObject => Boolean(value));
+  const intersections = Array.isArray(node.allOf)
+    ? node.allOf
+        .map((value) => resolved(document, value))
+        .filter((value): value is JsonObject => Boolean(value))
+    : [];
+  return [node, ...alternatives, ...intersections];
+}
+
+function primitive(value: unknown): value is string | number | boolean | null {
+  return (
+    value === null ||
+    typeof value === "string" ||
+    typeof value === "number" ||
+    typeof value === "boolean"
+  );
+}
+
+function firstString(nodes: JsonObject[], key: string): string | null {
+  const value = nodes
+    .map((node) => node[key])
+    .find((item) => typeof item === "string");
+  return typeof value === "string" ? value.trim().replace(/\s+/g, " ") : null;
+}
+
+function firstNumber(nodes: JsonObject[], key: string): number | undefined {
+  const value = nodes
+    .map((node) => node[key])
+    .find((item) => typeof item === "number");
+  return typeof value === "number" ? value : undefined;
+}
+
+function fieldMetadata(
+  document: JsonObject,
+  schema: unknown,
+  path: string[],
+  required: boolean
+): RunInputFieldSchema | null {
+  const nodes = variants(document, schema);
+  if (!nodes.length || !path.length) return null;
+  const options = nodes
+    .flatMap((node) => (Array.isArray(node.enum) ? node.enum : []))
+    .filter(primitive);
+  const types = nodes
+    .map((node) => node.type)
+    .flatMap((value) => (Array.isArray(value) ? value : [value]))
+    .filter((value): value is string => typeof value === "string");
+  const defaultValue = nodes.map((node) => node.default).find(primitive);
+  return {
+    path: path.join("."),
+    title: firstString(nodes, "title"),
+    description: firstString(nodes, "description"),
+    required,
+    types: [...new Set(types)],
+    options: [...new Set(options)],
+    ...(defaultValue !== undefined ? { defaultValue } : {}),
+    ...(firstNumber(nodes, "minimum") !== undefined
+      ? { minimum: firstNumber(nodes, "minimum") }
+      : {}),
+    ...(firstNumber(nodes, "maximum") !== undefined
+      ? { maximum: firstNumber(nodes, "maximum") }
+      : {}),
+    ...(firstNumber(nodes, "exclusiveMinimum") !== undefined
+      ? { exclusiveMinimum: firstNumber(nodes, "exclusiveMinimum") }
+      : {}),
+    ...(firstNumber(nodes, "exclusiveMaximum") !== undefined
+      ? { exclusiveMaximum: firstNumber(nodes, "exclusiveMaximum") }
+      : {}),
+  };
+}
+
+function requestSchema(
+  document: JsonObject,
+  endpointId: string
+): JsonObject | null {
+  const paths = object(document.paths);
+  if (!paths) return null;
+  const preferred = object(paths[`/${endpointId}`]);
+  const pathItems = preferred ? [preferred] : Object.values(paths).map(object);
+  for (const pathItem of pathItems) {
+    const post = object(pathItem?.post);
+    const requestBody = resolved(document, post?.requestBody);
+    const content = object(requestBody?.content);
+    const json = object(content?.["application/json"]);
+    const schema = resolved(document, json?.schema);
+    if (schema) return schema;
+  }
+  return null;
+}
+
+/** Convert a model OpenAPI document into the small, safe subset needed by history UI. */
+export function parseFalInputSchema(
+  documentValue: unknown,
+  endpointId: string,
+  schemaSha256: string
+): RunInputSchema | null {
+  const document = object(documentValue);
+  if (!document) return null;
+  const input = requestSchema(document, endpointId);
+  if (!input) return null;
+  const fields: RunInputFieldSchema[] = [];
+  const seen = new Set<string>();
+
+  const visit = (
+    schema: unknown,
+    path: string[],
+    isRequired: boolean,
+    ancestors: Set<JsonObject>
+  ) => {
+    const nodes = variants(document, schema);
+    if (!nodes.length) return;
+    const primary = nodes[0]!;
+    if (ancestors.has(primary)) return;
+    const nextAncestors = new Set(ancestors).add(primary);
+    const metadata = fieldMetadata(document, schema, path, isRequired);
+    if (metadata && !seen.has(metadata.path)) {
+      seen.add(metadata.path);
+      fields.push(metadata);
+    }
+
+    for (const node of nodes) {
+      const properties = object(node.properties);
+      const required = new Set(
+        Array.isArray(node.required)
+          ? node.required.filter(
+              (value): value is string => typeof value === "string"
+            )
+          : []
+      );
+      if (properties) {
+        for (const [name, child] of Object.entries(properties)) {
+          visit(child, [...path, name], required.has(name), nextAncestors);
+        }
+      }
+      if (node.items) visit(node.items, [...path, "*"], false, nextAncestors);
+    }
+  };
+
+  visit(input, [], false, new Set());
+  return { endpointId, schemaSha256, fields };
+}
+
+export function resolveFalCatalogEntry(input: {
+  capability?: string | null;
+  modelId?: string | null;
+  endpoint?: string | null;
+}): FalCapabilityCatalogEntry | null {
+  for (const candidate of [input.capability, input.modelId]) {
+    if (!candidate) continue;
+    const direct = lookupFalCapability(candidate);
+    if (direct) return direct;
+    const byEndpoint = FAL_CAPABILITY_CATALOG.find(
+      (entry) => entry.endpointId.toLowerCase() === candidate.toLowerCase()
+    );
+    if (byEndpoint) return byEndpoint;
+    const tail = candidate.split("/").at(-1);
+    if (tail) {
+      const prefixed = lookupFalCapability(
+        `livepeer-example/${tail.startsWith("fal-") ? tail : `fal-${tail}`}`
+      );
+      if (prefixed) return prefixed;
+    }
+  }
+  const endpoint = input.endpoint?.trim().toLowerCase();
+  return endpoint
+    ? (FAL_CAPABILITY_CATALOG.find(
+        (entry) => entry.endpointId.toLowerCase() === endpoint
+      ) ?? null)
+    : null;
+}
+
+type FalModelsResponse = {
+  models?: Array<{ endpoint_id?: string; openapi?: unknown }>;
+};
+
+const inputSchemaRequests = new Map<string, Promise<RunInputSchema | null>>();
+
+export async function loadFalInputSchema(
+  entry: FalCapabilityCatalogEntry
+): Promise<RunInputSchema | null> {
+  const cacheKey = `${entry.endpointId}:${entry.schemaSha256}`;
+  const existing = inputSchemaRequests.get(cacheKey);
+  if (existing) return existing;
+
+  const request = (async () => {
+    try {
+      const url = new URL("https://api.fal.ai/v1/models");
+      url.searchParams.set("endpoint_id", entry.endpointId);
+      url.searchParams.set("expand", "openapi-3.0");
+      const apiKey =
+        process.env.FAL_KEY?.trim() || process.env.FAL_API_KEY?.trim();
+      const response = await fetch(url, {
+        headers: {
+          Accept: "application/json",
+          ...(apiKey ? { Authorization: `Key ${apiKey}` } : {}),
+        },
+        next: { revalidate: 60 * 60 },
+        signal: AbortSignal.timeout(8_000),
+      });
+      if (!response.ok) return null;
+      const payload = (await response.json()) as FalModelsResponse;
+      const model = payload.models?.find(
+        (candidate) => candidate.endpoint_id === entry.endpointId
+      );
+      return model?.openapi
+        ? parseFalInputSchema(
+            model.openapi,
+            entry.endpointId,
+            entry.schemaSha256
+          )
+        : null;
+    } catch {
+      return null;
+    }
+  })();
+
+  inputSchemaRequests.set(cacheKey, request);
+  const result = await request;
+  if (!result) inputSchemaRequests.delete(cacheKey);
+  return result;
+}
diff --git a/lib/mcp/mcp-server.ts b/lib/mcp/mcp-server.ts
index 19f7d688..c1ab9b1f 100644
--- a/lib/mcp/mcp-server.ts
+++ b/lib/mcp/mcp-server.ts
@@ -7,6 +7,7 @@ import {
 import { runInference } from "./gateway";
 import type { McpPrincipal } from "./jwt";
 import { executeDurableRun } from "@/lib/runs/execute";
+import { refreshOwnedRunBillingByJob } from "@/lib/runs/manifest-billing";
 import * as runStore from "@/lib/runs/store";
 import { fetchMcpUsage } from "./pymthouse-spend";
 import { assertSpendable } from "./pymthouse-usage";
@@ -169,7 +170,7 @@ export function buildRawMcpServer(principal: McpPrincipal): McpServer {
       try {
         const assets = await listAssets(pid);
         return text({
-          assets: assets.map(serializeAsset),
+          assets: assets.map((asset) => serializeAsset(asset, pid)),
           count: assets.length,
         });
       } catch (err) {
@@ -190,7 +191,7 @@ export function buildRawMcpServer(principal: McpPrincipal): McpServer {
       try {
         const assets = await listAssets(pid, query);
         return text({
-          assets: assets.map(serializeAsset),
+          assets: assets.map((asset) => serializeAsset(asset, pid)),
           count: assets.length,
         });
       } catch (err) {
@@ -301,6 +302,14 @@ export function buildRawMcpServer(principal: McpPrincipal): McpServer {
             infer: (request) => runInference(principal, request),
             onProgress: (info) =>
               sendRunProgress(extra, info.elapsedMs, `queue ${info.status}`),
+            refreshBilling: async ({ owner, runId }) => {
+              await refreshOwnedRunBillingByJob({
+                owner,
+                runId,
+                externalUserId: principal.externalUserId,
+                email: principal.email,
+              });
+            },
           }
         );
         return text(result.payload, result.isError);
diff --git a/lib/mcp/store.ts b/lib/mcp/store.ts
index 4af0522d..aae3ffbc 100644
--- a/lib/mcp/store.ts
+++ b/lib/mcp/store.ts
@@ -2,6 +2,7 @@ import { and, desc, eq, inArray, isNull, or, sql } from "drizzle-orm";
 
 import { getDb } from "@/lib/db";
 import { mcpAssets } from "@/lib/db/schema";
+import { publicAssetUrl } from "@/lib/assets/public";
 
 export type Asset = {
   id: string;
@@ -99,10 +100,10 @@ export function mapAssetRow(row: {
   };
 }
 
-export function serializeAsset(asset: Asset) {
+export function serializeAsset(asset: Asset, principalId: string) {
   return {
     id: asset.id,
-    url: asset.url,
+    url: publicAssetUrl(asset.id, principalId),
     capability: asset.capability,
     created_at: asset.createdAt,
     gateway_request_id: asset.gatewayRequestId,
@@ -110,6 +111,27 @@ export function serializeAsset(asset: Asset) {
   };
 }
 
+export async function getAssetSource(id: string): Promise<{
+  url: string;
+  mediaType: string | null;
+  principalId: string;
+  expiresAt: Date | null;
+  unavailableAt: Date | null;
+} | null> {
+  const [row] = await getDb()
+    .select({
+      url: mcpAssets.url,
+      mediaType: mcpAssets.mediaType,
+      principalId: mcpAssets.principalId,
+      expiresAt: mcpAssets.expiresAt,
+      unavailableAt: mcpAssets.unavailableAt,
+    })
+    .from(mcpAssets)
+    .where(eq(mcpAssets.id, id))
+    .limit(1);
+  return row ?? null;
+}
+
 export async function rememberAsset(
   principalId: string,
   asset: Asset
diff --git a/lib/runs/billing.test.ts b/lib/runs/billing.test.ts
new file mode 100644
index 00000000..7d169c13
--- /dev/null
+++ b/lib/runs/billing.test.ts
@@ -0,0 +1,18 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { addDecimalStrings, billingSummaryFromEvents } from "./billing";
+
+test("adds fractional USD micros without floating-point arithmetic", () => {
+  assert.equal(addDecimalStrings("9007199254740993.125", "0.875"), "9007199254740994");
+});
+
+test("aggregates distinct persisted billing events and ignores other events", () => {
+  assert.deepEqual(
+    billingSummaryFromEvents([
+      { metadata: { kind: "billing_usage", networkFeeUsdMicros: "0.932" } },
+      { metadata: { kind: "billing_usage", networkFeeUsdMicros: "2.068" } },
+      { metadata: { kind: "transition", networkFeeUsdMicros: "99" } },
+    ]),
+    { networkFeeUsdMicros: "3", receiptCount: 2 }
+  );
+});
diff --git a/lib/runs/billing.ts b/lib/runs/billing.ts
new file mode 100644
index 00000000..2de5e571
--- /dev/null
+++ b/lib/runs/billing.ts
@@ -0,0 +1,69 @@
+import type { JsonValue, RunBillingSummary } from "./types";
+
+const DECIMAL = /^\d+(?:\.\d+)?$/;
+
+/** Add non-negative decimal strings without passing through IEEE-754 numbers. */
+export function addDecimalStrings(left: string, right: string): string {
+  if (!DECIMAL.test(left) || !DECIMAL.test(right))
+    throw new Error("invalid_decimal");
+  const [leftWhole, leftFraction = ""] = left.split(".");
+  const [rightWhole, rightFraction = ""] = right.split(".");
+  const scale = Math.max(leftFraction.length, rightFraction.length);
+  const leftDigits = BigInt(leftWhole + leftFraction.padEnd(scale, "0"));
+  const rightDigits = BigInt(rightWhole + rightFraction.padEnd(scale, "0"));
+  const sum = (leftDigits + rightDigits).toString().padStart(scale + 1, "0");
+  if (!scale) return sum;
+  const whole = sum.slice(0, -scale) || "0";
+  const fraction = sum.slice(-scale).replace(/0+$/, "");
+  return fraction ? `${whole}.${fraction}` : whole;
+}
+
+export function billingSummaryFromEvents(
+  events: { metadata: Record<string, JsonValue> }[]
+): RunBillingSummary | null {
+  let total = "0";
+  let receiptCount = 0;
+  for (const event of events) {
+    const value = event.metadata.networkFeeUsdMicros;
+    if (event.metadata.kind !== "billing_usage" || typeof value !== "string")
+      continue;
+    if (!DECIMAL.test(value)) continue;
+    total = addDecimalStrings(total, value);
+    receiptCount += 1;
+  }
+  return receiptCount ? { networkFeeUsdMicros: total, receiptCount } : null;
+}
+
+export function billingSummaryFromReceipts(
+  receipts: { networkFeeUsdMicros: string | null }[]
+): RunBillingSummary | null {
+  let total = "0";
+  let receiptCount = 0;
+  for (const receipt of receipts) {
+    const value = receipt.networkFeeUsdMicros;
+    if (!value || !DECIMAL.test(value)) continue;
+    total = addDecimalStrings(total, value);
+    receiptCount += 1;
+  }
+  return receiptCount ? { networkFeeUsdMicros: total, receiptCount } : null;
+}
+
+/** Manifest snapshots replace prior observations; receipts are not added to these totals. */
+export function billingSummaryFromManifests(
+  manifests: { networkFeeUsdMicros: string | null; accepted: boolean }[]
+): RunBillingSummary | null {
+  const priced = manifests.filter((m) => m.networkFeeUsdMicros !== null);
+  if (!priced.length) return null;
+  const pending = manifests.filter(
+    (m) => m.accepted && m.networkFeeUsdMicros === null
+  ).length;
+  // Do not present a partial paid-attempt total as the run's complete cost.
+  if (pending) return null;
+  return {
+    networkFeeUsdMicros: priced.reduce(
+      (sum, m) => addDecimalStrings(sum, m.networkFeeUsdMicros!),
+      "0"
+    ),
+    manifestCount: priced.length,
+  };
+}
diff --git a/lib/runs/execute.ts b/lib/runs/execute.ts
index ed5d51fd..3954e1aa 100644
--- a/lib/runs/execute.ts
+++ b/lib/runs/execute.ts
@@ -13,7 +13,8 @@ import {
   resultEnvelope,
   validatePublicFalQueue,
 } from "./reconcile";
-import type { JsonValue, RunDetail, RunTransition } from "./types";
+import type { JsonValue, RunDetail, RunOwner, RunTransition } from "./types";
+import { publicAsset, replaceAssetUrls } from "@/lib/assets/public";
 
 export type RunArguments = {
   capability: string;
@@ -24,7 +25,10 @@ export type RunArguments = {
 export type ExecutionDependencies = {
   store: Pick<
     typeof import("./store"),
-    "resolveRunOwner" | "createRun" | "transitionRun"
+    | "resolveRunOwner"
+    | "createRun"
+    | "transitionRun"
+    | "recordRunPaymentManifest"
   >;
   checkSpend: () => Promise<void>;
   describe: () => Promise<{ mode?: string } | null>;
@@ -36,25 +40,45 @@ export type ExecutionDependencies = {
     timeoutMs: number;
     gatewayRequestId: string;
     onProgress: (info: QueueProgress) => Promise<void>;
+    onPayment: (payment: {
+      manifestId: string;
+      phase: "prepared" | "accepted";
+    }) => Promise<void>;
   }) => Promise<InferenceResult>;
   onProgress?: (info: QueueProgress) => Promise<void>;
+  /** After dispatch; usage may still be missing. Failures must not fail the job. */
+  refreshBilling?: (input: {
+    owner: RunOwner;
+    runId: string;
+    gatewayRequestId: string;
+  }) => Promise<void>;
 };
 
 /** Persist retries never contain or repeat inference dispatch. */
-async function recordWithRetry(
-  fn: () => Promise<RunDetail>
-): Promise<RunDetail | null> {
+async function persistWithRetry<T>(fn: () => Promise<T>): Promise<T> {
+  let last: unknown;
   for (let attempt = 0; attempt < 3; attempt++) {
     try {
       return await fn();
-    } catch {
+    } catch (error) {
+      last = error;
       if (attempt < 2)
         await new Promise((resolve) =>
           setTimeout(resolve, 100 * (attempt + 1))
         );
     }
   }
-  return null;
+  throw last instanceof Error ? last : new Error("run_store_unavailable");
+}
+
+async function recordWithRetry(
+  fn: () => Promise<RunDetail>
+): Promise<RunDetail | null> {
+  try {
+    return await persistWithRetry(fn);
+  } catch {
+    return null;
+  }
 }
 
 export async function executeDurableRun(
@@ -103,6 +127,17 @@ export async function executeDurableRun(
   }
   const record = (change: RunTransition) =>
     recordWithRetry(() => deps.store.transitionRun(owner, run.id, change));
+  const refreshBilling = async () => {
+    try {
+      await deps.refreshBilling?.({
+        owner,
+        runId: run.id,
+        gatewayRequestId,
+      });
+    } catch {
+      /* Usage is eventually consistent; do not fail a completed or interrupted job. */
+    }
+  };
   let mode: string | undefined;
   try {
     await deps.checkSpend();
@@ -172,6 +207,12 @@ export async function executeDurableRun(
       endpoint: mode === "persistent" ? args.endpoint : undefined,
       timeoutMs: 780_000,
       gatewayRequestId,
+      onPayment: async (payment) => {
+        // Same charge only. Failure after retries still aborts the SDK; never another paid attempt.
+        await persistWithRetry(() =>
+          deps.store.recordRunPaymentManifest(owner, run.id, payment)
+        );
+      },
       onProgress: async (info) => {
         providerRequestId = info.requestId ?? providerRequestId;
         lastQueue = validatePublicFalQueue(info.statusUrl) ?? lastQueue;
@@ -222,6 +263,8 @@ export async function executeDurableRun(
       assets: outputs.map((asset) => ({
         url: asset.url,
         mediaType: asset.mediaKind,
+        availableUntil: asset.availableUntil,
+        expiresAt: asset.expiresAt,
         providerRequestId: result.providerRequestId,
       })),
       metadata: { providerStatus: result.status ?? null },
@@ -235,24 +278,46 @@ export async function executeDurableRun(
           }
         : {}),
     });
+    const persistedAssets = (saved?.assets ?? []).filter(
+      (asset) => asset.role !== "input"
+    );
+    const assets = persistedAssets.map((asset) =>
+      publicAsset(asset, owner.principalId)
+    );
+    const capturedData = resultEnvelope(result.data).value;
+    const publicData = replaceAssetUrls(
+      capturedData,
+      persistedAssets,
+      owner.principalId
+    );
     const urlRaw =
       result.url ?? result.imageUrl ?? result.videoUrl ?? result.audioUrl;
-    const url = urlRaw && !isQueueControlUrl(urlRaw) ? urlRaw : null;
+    const sourceAsset =
+      urlRaw && !isQueueControlUrl(urlRaw)
+        ? persistedAssets.find((asset) => asset.url === urlRaw)
+        : undefined;
+    const url = sourceAsset
+      ? publicAsset(sourceAsset, owner.principalId).url
+      : null;
+    await refreshBilling();
     return {
       payload: {
         capability: args.capability,
         url,
+        assets: assets.map(({ id, url, mediaType }) => ({
+          id,
+          url,
+          media_type: mediaType ?? null,
+        })),
         status: result.status,
         request_id: result.providerRequestId,
-        status_url: result.statusUrl,
-        response_url: result.responseUrl,
         orchestrator: result.orchestrator,
         elapsed_ms: result.elapsedMs,
         billable_units: result.billableUnits,
         gateway_request_id: result.gatewayRequestId || gatewayRequestId,
         run_id: run.id,
         ...(!saved ? { persist_error: "run_store_unavailable" } : {}),
-        ...(url ? {} : { data: result.data }),
+        ...(url ? {} : { data: publicData }),
       },
       isError: status === "failed" || status === "cancelled",
     };
@@ -267,6 +332,7 @@ export async function executeDurableRun(
         "Execution was interrupted after dispatch; the provider outcome is not confirmed.",
       ...(lastQueue ? { queue: lastQueue, provider: "fal" } : {}),
     });
+    await refreshBilling();
     return {
       payload: {
         ...runCapabilityFailurePayload(error, gatewayRequestId),
diff --git a/lib/runs/manifest-billing.ts b/lib/runs/manifest-billing.ts
new file mode 100644
index 00000000..74b644c2
--- /dev/null
+++ b/lib/runs/manifest-billing.ts
@@ -0,0 +1,127 @@
+import { fetchManifestUsage } from "@/lib/console/manifest-usage";
+import {
+  ownedPaymentManifests,
+  ownedRunsByIds,
+  recordManifestUsage,
+} from "@/lib/runs/store";
+import type { RunOwner } from "@/lib/runs/types";
+
+export type ManifestBillingRefresh = {
+  changedRunIds: string[];
+  pending: boolean;
+};
+
+/** One PymtHouse aggregate read for owned manifests; never invents a missing fee. */
+export async function refreshOwnedRunBilling(input: {
+  owner: RunOwner;
+  externalUserId: string;
+  email?: string;
+  runIds: string[];
+  now?: Date;
+}): Promise<ManifestBillingRefresh> {
+  const ids = [...new Set(input.runIds)].slice(0, 50);
+  const [owned, runs] = await Promise.all([
+    ownedPaymentManifests(input.owner, ids),
+    ownedRunsByIds(input.owner, ids),
+  ]);
+  const now = input.now ?? new Date();
+  const active = runs.some(
+    ({ status, updatedAt }) =>
+      ["queued", "running", "unknown"].includes(status) ||
+      now.getTime() - updatedAt.getTime() < 120_000
+  );
+  const pendingWithoutFee = (found?: Set<string>) =>
+    active ||
+    owned.some(({ manifest }) =>
+      found
+        ? manifest.accepted && !found.has(manifest.manifestId)
+        : manifest.accepted && manifest.networkFeeUsdMicros === null
+    );
+  // Historical runs without a manifest are never guessed from model/time.
+  if (!owned.length) return { changedRunIds: [], pending: active };
+  if (
+    owned.every(
+      ({ manifest }) =>
+        manifest.observedAt &&
+        now.getTime() - manifest.observedAt.getTime() < 30_000
+    )
+  )
+    return { changedRunIds: [], pending: pendingWithoutFee() };
+  // Each snapshot covers the manifest's entire lifetime, including month boundaries.
+  const first = new Date(
+    Math.min(...owned.map(({ manifest }) => manifest.createdAt.getTime()))
+  );
+  const start = new Date(
+    Date.UTC(first.getUTCFullYear(), first.getUTCMonth(), 1)
+  );
+  const end = new Date(now);
+  end.setUTCHours(23, 59, 59, 999);
+  const aggregates = await fetchManifestUsage({
+    externalUserId: input.externalUserId,
+    email: input.email,
+    startDate: start.toISOString(),
+    endDate: end.toISOString(),
+  });
+  const wanted = new Set(owned.map(({ manifest }) => manifest.manifestId));
+  const matched = aggregates.filter((row) => wanted.has(row.manifestId));
+  const changedRunIds = await recordManifestUsage(
+    input.owner,
+    ids,
+    matched,
+    now
+  );
+  return {
+    changedRunIds,
+    pending: pendingWithoutFee(new Set(matched.map((row) => row.manifestId))),
+  };
+}
+
+/** Exact manifest match for one run. Does not require History. */
+export async function refreshOwnedRunBillingByJob(input: {
+  owner: RunOwner;
+  runId: string;
+  externalUserId: string;
+  email?: string;
+  now?: Date;
+  retryDelayMs?: number;
+}): Promise<ManifestBillingRefresh> {
+  const owned = await ownedPaymentManifests(input.owner, [input.runId]);
+  const accepted = owned.filter(({ manifest }) => manifest.accepted);
+  if (!accepted.length) return { changedRunIds: [], pending: false };
+  const now = input.now ?? new Date();
+  const start = new Date(
+    Math.min(...accepted.map(({ manifest }) => manifest.createdAt.getTime())) -
+      60_000
+  );
+  const wanted = new Set(accepted.map(({ manifest }) => manifest.manifestId));
+  const delay = input.retryDelayMs ?? 1000;
+  let matched: Awaited<ReturnType<typeof fetchManifestUsage>> = [];
+  for (let attempt = 0; attempt < 3; attempt++) {
+    const aggregates = await fetchManifestUsage({
+      externalUserId: input.externalUserId,
+      email: input.email,
+      startDate: start.toISOString(),
+      endDate: now.toISOString(),
+    });
+    matched = aggregates.filter((row) => wanted.has(row.manifestId));
+    if (matched.length === wanted.size) break;
+    if (attempt < 2 && delay > 0)
+      await new Promise((resolve) =>
+        setTimeout(resolve, delay * (attempt + 1))
+      );
+  }
+  if (!matched.length) return { changedRunIds: [], pending: true };
+  const changedRunIds = await recordManifestUsage(
+    input.owner,
+    [input.runId],
+    matched,
+    now
+  );
+  return {
+    changedRunIds,
+    pending: accepted.some(
+      ({ manifest }) =>
+        !matched.some((row) => row.manifestId === manifest.manifestId)
+    ),
+  };
+}
diff --git a/lib/runs/outputs.ts b/lib/runs/outputs.ts
index f0fbefd2..a7a85f44 100644
--- a/lib/runs/outputs.ts
+++ b/lib/runs/outputs.ts
@@ -2,7 +2,9 @@ import { isQueueControlUrl } from "@pymthouse/gateway-web";
 
 export type CapturedOutput = {
   url: string;
-  mediaKind: "image" | "video" | "audio" | "unknown";
+  availableUntil?: string;
+  expiresAt?: string;
+  mediaKind: "image" | "video" | "audio" | "model" | "unknown";
 };
 
 /** Only documented media fields, never prompt URLs or arbitrary nested links. */
@@ -29,7 +31,28 @@ export function extractRunOutputs(result: unknown): CapturedOutput[] {
         )
       )
         return;
-      if (!outputs.has(url)) outputs.set(url, { url, mediaKind });
+      const row =
+        value && typeof value === "object"
+          ? (value as Record<string, unknown>)
+          : {};
+      const timestamp = (raw: unknown): string | undefined =>
+        typeof raw === "string" &&
+        /^\d{4}-\d{2}-\d{2}T.*(?:Z|[+-]\d{2}:\d{2})$/.test(raw) &&
+        Number.isFinite(Date.parse(raw))
+          ? new Date(raw).toISOString()
+          : undefined;
+      const availableUntil = timestamp(
+        row.availableUntil ?? row.available_until
+      );
+      const expiresAt = timestamp(row.expiresAt ?? row.expires_at);
+      const previous = outputs.get(url);
+      outputs.set(url, {
+        ...previous,
+        url,
+        mediaKind: previous?.mediaKind ?? mediaKind,
+        ...(availableUntil ? { availableUntil } : {}),
+        ...(expiresAt ? { expiresAt } : {}),
+      });
     } catch {
       /* Not a public asset URL. */
     }
@@ -42,6 +65,12 @@ export function extractRunOutputs(result: unknown): CapturedOutput[] {
     }
     const row = value as Record<string, unknown>;
     for (const [key, kind] of [
+      ["model", "model"],
+      ["model_url", "model"],
+      ["modelUrl", "model"],
+      ["model_mesh", "model"],
+      ["preview_image", "image"],
+      ["previewImage", "image"],
       ["image", "image"],
       ["imageUrl", "image"],
       ["image_url", "image"],
@@ -52,12 +81,19 @@ export function extractRunOutputs(result: unknown): CapturedOutput[] {
       ["audioUrl", "audio"],
       ["audio_url", "audio"],
     ] as const)
-      add(row[key], kind);
-    add(row.url, "unknown");
+      add(
+        typeof row[key] === "string" ? { ...row, url: row[key] } : row[key],
+        kind
+      );
+    if (row.url) add(row, "unknown");
     for (const [key, kind] of [
+      ["textures", "image"],
       ["images", "image"],
+      ["image_urls", "image"],
       ["videos", "video"],
+      ["video_urls", "video"],
       ["audios", "audio"],
+      ["audio_urls", "audio"],
     ] as const) {
       if (Array.isArray(row[key])) for (const item of row[key]) add(item, kind);
     }
diff --git a/lib/runs/preview-fixtures.ts b/lib/runs/preview-fixtures.ts
new file mode 100644
index 00000000..a2582d56
--- /dev/null
+++ b/lib/runs/preview-fixtures.ts
@@ -0,0 +1,381 @@
+import "server-only";
+
+import { createHash } from "node:crypto";
+import type { AccountUsagePayload } from "@/lib/console/account-usage";
+import { withPreviewRunFixtures } from "./store";
+import type { RunOwner } from "./types";
+
+const PREVIEW_GRANT_USD_MICROS = 5_000_000;
+
+export function previewFixturesEnabled(): boolean {
+  return (
+    process.env.VERCEL_ENV === "preview" &&
+    process.env.CONSOLE_PREVIEW_FIXTURES === "1"
+  );
+}
+
+function fixtureIds(owner: RunOwner) {
+  const suffix = createHash("sha256")
+    .update(owner.principalId)
+    .digest("hex")
+    .slice(0, 12);
+  return {
+    suffix,
+    runs: [
+      `run_preview_v2_${suffix}_portrait`,
+      `run_preview_v2_${suffix}_variation`,
+      `run_preview_v2_${suffix}_caption`,
+      `run_preview_v2_${suffix}_failed`,
+    ],
+  };
+}
+
+/**
+ * Seed a realistic, owner-scoped History in Neon. IDs and receipt event keys
+ * are deterministic, so normal page loads are idempotent rather than a hidden
+ * mutation on every request.
+ */
+export async function ensurePreviewRunFixtures(
+  owner: RunOwner,
+  origin: string
+): Promise<{
+  runIds: string[];
+  createdRunIds: string[];
+  createdCount: number;
+}> {
+  return withPreviewRunFixtures(
+    owner,
+    async ({
+      createRun,
+      transitionRun,
+      recordRunUsage,
+      ownedRunsByIds,
+      completedRunIds,
+    }) => {
+      const { suffix, runs: ids } = fixtureIds(owner);
+      const existing = new Set(
+        (await ownedRunsByIds(owner, ids)).map(({ id }) => id)
+      );
+      const complete = new Set(await completedRunIds());
+      const created: string[] = [];
+      const sourceAssetId = `asset_preview_v2_${suffix}_portrait`;
+      const portraitUrl = `${origin}/images/console/explore/flux-schnell.webp`;
+
+      if (!complete.has(ids[0]!)) {
+        const run = await createRun(owner, {
+          id: ids[0],
+          gatewayRequestId: `job_preview_v2_${suffix}_portrait`,
+          capability: "fal-ai/flux/schnell",
+          modelId: "fal-ai/flux/schnell",
+          endpoint: "/fal-ai/flux/schnell",
+          submittedArguments: {
+            capability: "fal-ai/flux/schnell",
+            inputs: {
+              prompt:
+                "Editorial portrait in emerald light, soft grain, dark studio background",
+              image_size: "landscape_4_3",
+              num_images: 1,
+              seed: 184729,
+              enable_safety_checker: true,
+            },
+          },
+        });
+        await transitionRun(owner, run.id, {
+          eventKey: "dispatch-returned",
+          status: "succeeded",
+          provider: "fal",
+          providerRequestId: `provider_preview_v2_${suffix}_portrait`,
+          result: {
+            value: {
+              images: [{ url: portraitUrl, width: 1024, height: 768 }],
+              seed: 184729,
+              inference_time_ms: 1284,
+            },
+          },
+          assets: [
+            {
+              id: sourceAssetId,
+              url: portraitUrl,
+              mediaType: "image/webp",
+            },
+          ],
+          metadata: { phase: "provider_complete", inferenceTimeMs: 1284 },
+        });
+        await recordRunUsage(owner, [
+          {
+            eventId: `receipt_preview_v2_${suffix}_portrait`,
+            gatewayRequestId: `job_preview_v2_${suffix}_portrait`,
+            metadata: {
+              billingEventId: `receipt_preview_v2_${suffix}_portrait`,
+              ticketGatewayRequestId: `job_preview_v2_${suffix}_portrait`,
+              networkFeeUsdMicros: "9984.675492933755",
+              feeWei: "3650000000000",
+              ethUsdPrice: "2735.52753231",
+              pixels: "786432",
+              pipeline: "fal-ai/flux/schnell",
+              modelId: "fal-ai/flux/schnell",
+              timestamp: new Date().toISOString(),
+            },
+          },
+        ]);
+        if (!existing.has(run.id)) created.push(run.id);
+      }
+
+      if (!complete.has(ids[1]!)) {
+        const inputUrl = `${origin}/api/assets/${sourceAssetId}?exp=9999999999&sig=preview-fixture`;
+        const outputUrl = `${origin}/images/console/explore/img2img-sdxl.webp`;
+        const run = await createRun(owner, {
+          id: ids[1],
+          gatewayRequestId: `job_preview_v2_${suffix}_variation`,
+          capability: "fal-ai/fast-sdxl/image-to-image",
+          modelId: "fal-ai/fast-sdxl/image-to-image",
+          endpoint: "/fal-ai/fast-sdxl/image-to-image",
+          submittedArguments: {
+            capability: "fal-ai/fast-sdxl/image-to-image",
+            inputs: {
+              prompt: "Turn the portrait into a warm risograph print",
+              image_url: inputUrl,
+              strength: 0.72,
+              guidance_scale: 7.5,
+              num_inference_steps: 28,
+            },
+          },
+        });
+        await transitionRun(owner, run.id, {
+          eventKey: "dispatch-returned",
+          status: "succeeded",
+          provider: "fal",
+          providerRequestId: `provider_preview_v2_${suffix}_variation`,
+          result: {
+            value: {
+              images: [{ url: outputUrl, width: 1024, height: 1024 }],
+              inference_time_ms: 2418,
+            },
+          },
+          assets: [
+            {
+              id: `asset_preview_v2_${suffix}_variation`,
+              url: outputUrl,
+              mediaType: "image/webp",
+            },
+          ],
+          metadata: { phase: "provider_complete", inferenceTimeMs: 2418 },
+        });
+        await recordRunUsage(owner, [
+          {
+            eventId: `receipt_preview_v2_${suffix}_variation_1`,
+            gatewayRequestId: `job_preview_v2_${suffix}_variation`,
+            metadata: {
+              billingEventId: `receipt_preview_v2_${suffix}_variation_1`,
+              ticketGatewayRequestId: `job_preview_v2_${suffix}_variation`,
+              pipeline: "fal-ai/fast-sdxl/image-to-image",
+              modelId: "fal-ai/fast-sdxl/image-to-image",
+              networkFeeUsdMicros: "1000.25",
+              pixels: "524288",
+              timestamp: new Date().toISOString(),
+            },
+          },
+          {
+            eventId: `receipt_preview_v2_${suffix}_variation_2`,
+            gatewayRequestId: `job_preview_v2_${suffix}_variation`,
+            metadata: {
+              billingEventId: `receipt_preview_v2_${suffix}_variation_2`,
+              ticketGatewayRequestId: `job_preview_v2_${suffix}_variation`,
+              pipeline: "fal-ai/fast-sdxl/image-to-image",
+              modelId: "fal-ai/fast-sdxl/image-to-image",
+              networkFeeUsdMicros: "2000.75",
+              pixels: "524288",
+              timestamp: new Date().toISOString(),
+            },
+          },
+        ]);
+        if (!existing.has(run.id)) created.push(run.id);
+      }
+
+      if (!complete.has(ids[2]!)) {
+        const run = await createRun(owner, {
+          id: ids[2],
+          gatewayRequestId: `job_preview_v2_${suffix}_caption`,
+          capability: "meta-llama/llama-3.1-8b-instruct",
+          modelId: "meta-llama/llama-3.1-8b-instruct",
+          endpoint: "/v1/chat/completions",
+          submittedArguments: {
+            capability: "meta-llama/llama-3.1-8b-instruct",
+            inputs: {
+              prompt:
+                "Write a one-line gallery caption for an emerald portrait.",
+              max_tokens: 80,
+              temperature: 0.6,
+            },
+          },
+        });
+        await transitionRun(owner, run.id, {
+          eventKey: "dispatch-returned",
+          status: "succeeded",
+          provider: "livepeer",
+          providerRequestId: `provider_preview_v2_${suffix}_caption`,
+          result: {
+            value: {
+              text: "Emerald light turns a quiet portrait into a signal from elsewhere.",
+              usage: { prompt_tokens: 18, completion_tokens: 14 },
+              inference_time_ms: 642,
+            },
+          },
+          metadata: { phase: "provider_complete", inferenceTimeMs: 642 },
+        });
+        await recordRunUsage(owner, [
+          {
+            eventId: `receipt_preview_v2_${suffix}_caption`,
+            gatewayRequestId: `job_preview_v2_${suffix}_caption`,
+            metadata: {
+              billingEventId: `receipt_preview_v2_${suffix}_caption`,
+              ticketGatewayRequestId: `job_preview_v2_${suffix}_caption`,
+              pipeline: "text-generation",
+              modelId: "meta-llama/llama-3.1-8b-instruct",
+              networkFeeUsdMicros: "840.125",
+              timestamp: new Date().toISOString(),
+            },
+          },
+        ]);
+        if (!existing.has(run.id)) created.push(run.id);
+      }
+
+      if (!complete.has(ids[3]!)) {
+        const run = await createRun(owner, {
+          id: ids[3],
+          gatewayRequestId: `job_preview_v2_${suffix}_failed`,
+          capability: "fal-ai/fast-svd",
+          modelId: "fal-ai/fast-svd",
+          endpoint: "/fal-ai/fast-svd",
+          submittedArguments: {
+            capability: "fal-ai/fast-svd",
+            inputs: {
+              prompt: "Slow camera orbit around the subject",
+              duration_seconds: 6,
+              fps: 24,
+            },
+          },
+        });
+        await transitionRun(owner, run.id, {
+          eventKey: "dispatch-returned",
+          status: "failed",
+          provider: "fal",
+          providerRequestId: `provider_preview_v2_${suffix}_failed`,
+          errorCode: "provider_capacity",
+          errorMessage: "No worker accepted the request before its deadline.",
+          metadata: { phase: "provider_error", retryable: true },
+        });
+        if (!existing.has(run.id)) created.push(run.id);
+      }
+
+      return {
+        runIds: ids,
+        createdRunIds: created,
+        createdCount: created.length,
+      };
+    }
+  );
+}
+
+function utcDayKeys(days: number, now = new Date()): string[] {
+  const keys: string[] = [];
+  for (let offset = days - 1; offset >= 0; offset--) {
+    const date = new Date(
+      Date.UTC(
+        now.getUTCFullYear(),
+        now.getUTCMonth(),
+        now.getUTCDate() - offset
+      )
+    );
+    keys.push(date.toISOString().slice(0, 10));
+  }
+  return keys;
+}
+
+/** Synthetic preview allowance aligned with the receipts seeded above. */
+export function previewAccountUsage(input: {
+  externalUserId: string;
+  periodDays: number;
+  window: "rolling" | "mtd";
+  includePrior: boolean;
+}): AccountUsagePayload {
+  const now = new Date();
+  const monthDays = now.getUTCDate();
+  const days = input.window === "mtd" ? monthDays : input.periodDays;
+  const keys = utcDayKeys(days, now);
+  const today = keys.at(-1)!;
+  const consumed = "13825.800492933755";
+  const balance = "4986174.199507066245";
+  const rows = [
+    {
+      pipeline: "fal-ai/flux/schnell",
+      modelId: "fal-ai/flux/schnell",
+      requestCount: 1,
+      networkFeeUsdMicros: "9984.675492933755",
+      endUserBillableUsdMicros: "9984.675492933755",
+      dailyRequests: keys.map((key) => (key === today ? 1 : 0)),
+    },
+    {
+      pipeline: "fal-ai/fast-sdxl/image-to-image",
+      modelId: "fal-ai/fast-sdxl/image-to-image",
+      requestCount: 1,
+      networkFeeUsdMicros: "3001",
+      endUserBillableUsdMicros: "3001",
+      dailyRequests: keys.map((key) => (key === today ? 1 : 0)),
+    },
+    {
+      pipeline: "text-generation",
+      modelId: "meta-llama/llama-3.1-8b-instruct",
+      requestCount: 1,
+      networkFeeUsdMicros: "840.125",
+      endUserBillableUsdMicros: "840.125",
+      dailyRequests: keys.map((key) => (key === today ? 1 : 0)),
+    },
+  ];
+  const end = new Date(now);
+  end.setUTCHours(23, 59, 59, 999);
+  const start = new Date(`${keys[0]}T00:00:00.000Z`);
+  const priorEnd = new Date(start.getTime() - 1);
+  const priorStart = new Date(priorEnd);
+  priorStart.setUTCDate(priorStart.getUTCDate() - (days - 1));
+  priorStart.setUTCHours(0, 0, 0, 0);
+  return {
+    clientId: "app_preview_console",
+    period: { start: start.toISOString(), end: end.toISOString() },
+    periodDayKeys: keys,
+    priorPeriod: {
+      start: priorStart.toISOString(),
+      end: priorEnd.toISOString(),
+    },
+    balance: {
+      externalUserId: input.externalUserId,
+      balanceUsdMicros: balance,
+      consumedUsdMicros: consumed,
+      lifetimeGrantedUsdMicros: String(PREVIEW_GRANT_USD_MICROS),
+      hasAccess: true,
+    },
+    current: {
+      requestCount: 3,
+      networkFeeUsdMicros: consumed,
+      endUserBillableUsdMicros: consumed,
+      pipelineModels: rows,
+      dailyByPipeline: rows.map((row) => ({
+        pipeline: row.pipeline,
+        modelId: row.modelId,
+        date: today,
+        requestCount: row.requestCount,
+        networkFeeUsdMicros: row.networkFeeUsdMicros,
+      })),
+    },
+    prior: input.includePrior
+      ? {
+          requestCount: 2,
+          pipelineModels: rows.slice(0, 2).map((row) => ({
+            ...row,
+            requestCount: 1,
+            dailyRequests: [],
+          })),
+        }
+      : { requestCount: 0, pipelineModels: [] },
+  };
+}
diff --git a/lib/runs/reconcile.ts b/lib/runs/reconcile.ts
index 756a7a91..96310840 100644
--- a/lib/runs/reconcile.ts
+++ b/lib/runs/reconcile.ts
@@ -162,6 +162,8 @@ export async function reconcileRunJob(
         assets: extractRunOutputs(output).map((asset) => ({
           url: asset.url,
           mediaType: asset.mediaKind,
+          availableUntil: asset.availableUntil,
+          expiresAt: asset.expiresAt,
         })),
       });
       await store.releaseReconciliationJob(job, { done: true });
diff --git a/lib/runs/store.ts b/lib/runs/store.ts
index 80ef7c3a..75f86e7e 100644
--- a/lib/runs/store.ts
+++ b/lib/runs/store.ts
@@ -1,5 +1,5 @@
 import "server-only";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import {
   and,
   asc,
@@ -12,13 +12,17 @@ import {
   sql,
   type SQL,
 } from "drizzle-orm";
+import { publicOrigin } from "@/lib/assets/public";
 import { getDb } from "@/lib/db";
 import {
   externalAccounts,
   mcpAssets,
+  runAssetLinks,
   runEvents,
   runReadAudits,
   runReconciliationJobs,
+  runUsageReceipts,
+  runPaymentManifests,
   runs,
   userEmails,
 } from "@/lib/db/schema";
@@ -41,6 +45,11 @@ import type {
   RunTransition,
   JsonValue,
 } from "./types";
+import {
+  addDecimalStrings,
+  billingSummaryFromReceipts,
+  billingSummaryFromManifests,
+} from "./billing";
 
 type Database = ReturnType<typeof getDb>;
 type Transaction = Parameters<Parameters<Database["transaction"]>[0]>[0];
@@ -48,6 +57,50 @@ type Reader = Database | Transaction;
 const terminal = new Set<RunStatus>(["succeeded", "failed", "cancelled"]);
 const iso = (value: Date | null) => value?.toISOString() ?? null;
 
+type AssetReference = {
+  id: string;
+  parameterPath: string;
+  role: string;
+  ordinal: number;
+};
+
+function assetReferences(value: JsonValue | undefined): AssetReference[] {
+  const found: AssetReference[] = [];
+  const visit = (item: JsonValue, path: (string | number)[]): void => {
+    if (typeof item === "string") {
+      try {
+        const referenceUrl = new URL(item);
+        if (referenceUrl.origin !== publicOrigin()) return;
+        const match = referenceUrl.pathname.match(/^\/api\/assets\/([^/]+)$/);
+        if (!match) return;
+        const field = [...path]
+          .reverse()
+          .find((part) => typeof part === "string");
+        const ordinal = [...path]
+          .reverse()
+          .find((part) => typeof part === "number");
+        found.push({
+          id: decodeURIComponent(match[1]!),
+          parameterPath: path.join("."),
+          role: typeof field === "string" ? field : "input",
+          ordinal: typeof ordinal === "number" ? ordinal : 0,
+        });
+      } catch {
+        // Captured strings need not be URLs.
+      }
+      return;
+    }
+    if (Array.isArray(item))
+      item.forEach((child, index) => visit(child, [...path, index]));
+    else if (item && typeof item === "object")
+      Object.entries(item).forEach(([key, child]) =>
+        visit(child, [...path, key])
+      );
+  };
+  if (value !== undefined) visit(value, []);
+  return found;
+}
+
 export async function resolveRunOwner(principalId: string): Promise<RunOwner> {
   const account = await findExternalAccountOwner({
     ...configuredPymthouseScope(),
@@ -83,17 +136,40 @@ async function detail(
   db: Reader,
   row: typeof runs.$inferSelect
 ): Promise<RunDetail> {
-  const [assets, events, emails] = await Promise.all([
+  const links = await db
+    .select()
+    .from(runAssetLinks)
+    .where(eq(runAssetLinks.runId, row.id))
+    .orderBy(asc(runAssetLinks.direction), asc(runAssetLinks.ordinal));
+  const referencedAssetIds = new Set([
+    ...assetReferences(row.submittedArguments ?? undefined).map(({ id }) => id),
+    ...links.map(({ assetId }) => assetId),
+  ]);
+  const assetFilter = referencedAssetIds.size
+    ? or(
+        eq(mcpAssets.runId, row.id),
+        and(
+          eq(mcpAssets.principalId, row.principalId),
+          inArray(mcpAssets.id, [...referencedAssetIds])
+        )
+      )
+    : eq(mcpAssets.runId, row.id);
+  const [assets, events, receipts, emails, manifests] = await Promise.all([
     db
       .select()
       .from(mcpAssets)
-      .where(eq(mcpAssets.runId, row.id))
+      .where(assetFilter)
       .orderBy(asc(mcpAssets.createdAt), asc(mcpAssets.id)),
     db
       .select()
       .from(runEvents)
       .where(eq(runEvents.runId, row.id))
       .orderBy(asc(runEvents.createdAt), asc(runEvents.id)),
+    db
+      .select({ networkFeeUsdMicros: runUsageReceipts.networkFeeUsdMicros })
+      .from(runUsageReceipts)
+      .where(eq(runUsageReceipts.runId, row.id))
+      .orderBy(asc(runUsageReceipts.occurredAt), asc(runUsageReceipts.id)),
     db
       .select({ email: userEmails.email })
       .from(userEmails)
@@ -101,11 +177,25 @@ async function detail(
         and(eq(userEmails.userId, row.userId), eq(userEmails.isPrimary, true))
       )
       .limit(1),
+    db
+      .select()
+      .from(runPaymentManifests)
+      .where(eq(runPaymentManifests.runId, row.id)),
   ]);
+  const mappedEvents = events.map((event) => ({
+    ...event,
+    createdAt: event.createdAt.toISOString(),
+  }));
+  const linksByAsset = new Map(links.map((link) => [link.assetId, link]));
   return {
     ...record(row, emails[0]?.email ?? null),
     assets: assets.map((asset) => ({
       id: asset.id,
+      role:
+        linksByAsset.get(asset.id)?.direction === "input" ||
+        asset.runId !== row.id
+          ? "input"
+          : "output",
       url: asset.url,
       mediaType: asset.mediaType,
       providerRequestId: asset.providerRequestId,
@@ -115,10 +205,10 @@ async function detail(
       hiddenAt: iso(asset.hiddenAt),
       createdAt: asset.createdAt.toISOString(),
     })),
-    events: events.map((event) => ({
-      ...event,
-      createdAt: event.createdAt.toISOString(),
-    })),
+    events: mappedEvents,
+    billing: manifests.length
+      ? billingSummaryFromManifests(manifests)
+      : billingSummaryFromReceipts(receipts),
   };
 }
 
@@ -126,38 +216,82 @@ export async function createRun(
   owner: RunOwner,
   input: CreateRunInput
 ): Promise<RunDetail> {
-  return getDb().transaction(async (tx) => {
-    // Independently enforce the authenticated binding even when a caller constructs an owner object.
-    const scope = configuredPymthouseScope();
-    const [account] = await tx
-      .select({ id: externalAccounts.id })
-      .from(externalAccounts)
+  return getDb().transaction((tx) => createRunTx(tx, owner, input));
+}
+
+async function createRunTx(
+  tx: Transaction,
+  owner: RunOwner,
+  input: CreateRunInput,
+  repairFixture = false
+): Promise<RunDetail> {
+  // Independently enforce the authenticated binding even when a caller constructs an owner object.
+  const scope = configuredPymthouseScope();
+  const [account] = await tx
+    .select({ id: externalAccounts.id })
+    .from(externalAccounts)
+    .where(
+      and(
+        eq(externalAccounts.id, owner.externalAccountId),
+        eq(externalAccounts.userId, owner.userId),
+        eq(externalAccounts.externalUserId, owner.principalId),
+        eq(externalAccounts.service, scope.service),
+        eq(externalAccounts.issuer, scope.issuer),
+        eq(externalAccounts.appId, scope.appId)
+      )
+    );
+  if (!account) throw new Error("run_owner_unresolved");
+  const [existing] =
+    repairFixture && input.id
+      ? await tx
+          .select()
+          .from(runs)
+          .where(and(ownerWhere(owner), eq(runs.id, input.id)))
+      : [];
+  const row =
+    existing ??
+    (
+      await tx
+        .insert(runs)
+        .values({
+          ...owner,
+          ...input,
+          id: input.id ?? randomUUID(),
+          source: "mcp",
+          status: "queued",
+        })
+        .returning()
+    )[0]!;
+  await tx
+    .insert(runEvents)
+    .values({ runId: row.id, eventKey: "created", status: "queued" })
+    .onConflictDoNothing();
+  const references = assetReferences(row.submittedArguments ?? undefined);
+  if (references.length) {
+    const ownedAssets = await tx
+      .select({ id: mcpAssets.id })
+      .from(mcpAssets)
       .where(
         and(
-          eq(externalAccounts.id, owner.externalAccountId),
-          eq(externalAccounts.userId, owner.userId),
-          eq(externalAccounts.externalUserId, owner.principalId),
-          eq(externalAccounts.service, scope.service),
-          eq(externalAccounts.issuer, scope.issuer),
-          eq(externalAccounts.appId, scope.appId)
+          eq(mcpAssets.principalId, owner.principalId),
+          inArray(mcpAssets.id, [...new Set(references.map(({ id }) => id))])
         )
       );
-    if (!account) throw new Error("run_owner_unresolved");
-    const [row] = await tx
-      .insert(runs)
-      .values({
-        ...owner,
-        ...input,
-        id: input.id ?? randomUUID(),
-        source: "mcp",
-        status: "queued",
-      })
-      .returning();
-    await tx
-      .insert(runEvents)
-      .values({ runId: row.id, eventKey: "created", status: "queued" });
-    return detail(tx, row);
-  });
+    const ownedIds = new Set(ownedAssets.map(({ id }) => id));
+    const values = references
+      .filter(({ id }) => ownedIds.has(id))
+      .map((reference) => ({
+        runId: row.id,
+        assetId: reference.id,
+        direction: "input",
+        role: reference.role,
+        parameterPath: reference.parameterPath,
+        ordinal: reference.ordinal,
+      }));
+    if (values.length)
+      await tx.insert(runAssetLinks).values(values).onConflictDoNothing();
+  }
+  return detail(tx, row);
 }
 
 export async function transitionRun(
@@ -166,156 +300,196 @@ export async function transitionRun(
   change: RunTransition
 ): Promise<RunDetail> {
   if (!change.eventKey.trim()) throw new Error("invalid_run_event_key");
-  return getDb().transaction(async (tx) => {
-    const [current] = await tx
+  return getDb().transaction((tx) => transitionRunTx(tx, owner, id, change));
+}
+
+async function transitionRunTx(
+  tx: Transaction,
+  owner: RunOwner,
+  id: string,
+  change: RunTransition,
+  repairFixture = false
+): Promise<RunDetail> {
+  if (!change.eventKey.trim()) throw new Error("invalid_run_event_key");
+
+  const [current] = await tx
+    .select()
+    .from(runs)
+    .where(and(ownerWhere(owner), eq(runs.id, id)))
+    .for("update");
+  if (!current) throw new Error("run_not_found");
+  if (change.reconciliationLease) {
+    const [lease] = await tx
       .select()
-      .from(runs)
-      .where(and(ownerWhere(owner), eq(runs.id, id)))
-      .for("update");
-    if (!current) throw new Error("run_not_found");
-    if (change.reconciliationLease) {
-      const [lease] = await tx
-        .select()
-        .from(runReconciliationJobs)
-        .where(
-          and(
-            eq(runReconciliationJobs.id, change.reconciliationLease.jobId),
-            eq(runReconciliationJobs.runId, id)
-          )
+      .from(runReconciliationJobs)
+      .where(
+        and(
+          eq(runReconciliationJobs.id, change.reconciliationLease.jobId),
+          eq(runReconciliationJobs.runId, id)
         )
-        .for("update");
-      if (
-        !lease ||
-        lease.leaseToken !== change.reconciliationLease.leaseToken ||
-        !lease.leasedUntil ||
-        lease.leasedUntil <= new Date() ||
-        lease.completedAt
       )
-        throw new Error("run_reconciliation_lease_lost");
-    }
-    const [existing] = await tx
-      .select({ id: runEvents.id })
-      .from(runEvents)
-      .where(
-        and(eq(runEvents.runId, id), eq(runEvents.eventKey, change.eventKey))
-      );
-    if (existing || terminal.has(current.status)) return detail(tx, current);
+      .for("update");
     if (
-      change.expectedVersion !== undefined &&
-      current.version !== change.expectedVersion
+      !lease ||
+      lease.leaseToken !== change.reconciliationLease.leaseToken ||
+      !lease.leasedUntil ||
+      lease.leasedUntil <= new Date() ||
+      lease.completedAt
     )
-      throw new Error("run_version_conflict");
-    if (change.status === "queued" && current.status !== "queued")
-      throw new Error("invalid_run_transition");
-    const now = new Date();
-    const [row] = await tx
-      .update(runs)
-      .set({
-        status: change.status,
-        provider: change.provider ?? current.provider,
-        providerRequestId:
-          change.providerRequestId ?? current.providerRequestId,
-        result: change.result ?? current.result,
-        errorCode:
-          change.errorCode === undefined ? current.errorCode : change.errorCode,
-        errorMessage:
-          change.errorMessage === undefined
-            ? current.errorMessage
-            : change.errorMessage,
-        startedAt:
-          current.startedAt ?? (change.status === "running" ? now : null),
-        completedAt: terminal.has(change.status) ? now : null,
-        updatedAt: now,
-        version: current.version + 1,
-      })
-      .where(eq(runs.id, id))
-      .returning();
-    if (change.assets?.length) {
-      for (const asset of change.assets) {
-        const url = new URL(asset.url);
-        if (
-          !["https:", "http:"].includes(url.protocol) ||
-          url.username ||
-          url.password
-        )
-          throw new Error("invalid_run_asset_url");
+      throw new Error("run_reconciliation_lease_lost");
+  }
+  const [existing] = await tx
+    .select({ id: runEvents.id })
+    .from(runEvents)
+    .where(
+      and(eq(runEvents.runId, id), eq(runEvents.eventKey, change.eventKey))
+    );
+  if (!repairFixture && (existing || terminal.has(current.status)))
+    return detail(tx, current);
+  if (
+    change.expectedVersion !== undefined &&
+    current.version !== change.expectedVersion
+  )
+    throw new Error("run_version_conflict");
+  if (change.status === "queued" && current.status !== "queued")
+    throw new Error("invalid_run_transition");
+  const now = new Date();
+  const row =
+    repairFixture && terminal.has(current.status)
+      ? current
+      : (
+          await tx
+            .update(runs)
+            .set({
+              status: change.status,
+              provider: change.provider ?? current.provider,
+              providerRequestId:
+                change.providerRequestId ?? current.providerRequestId,
+              result: change.result ?? current.result,
+              errorCode:
+                change.errorCode === undefined
+                  ? current.errorCode
+                  : change.errorCode,
+              errorMessage:
+                change.errorMessage === undefined
+                  ? current.errorMessage
+                  : change.errorMessage,
+              startedAt:
+                current.startedAt ?? (change.status === "running" ? now : null),
+              completedAt: terminal.has(change.status) ? now : null,
+              updatedAt: now,
+              version: current.version + 1,
+            })
+            .where(eq(runs.id, id))
+            .returning()
+        )[0]!;
+  if (change.assets?.length) {
+    for (const [ordinal, asset] of change.assets.entries()) {
+      const url = new URL(asset.url);
+      if (
+        !["https:", "http:"].includes(url.protocol) ||
+        url.username ||
+        url.password
+      )
+        throw new Error("invalid_run_asset_url");
+      const [persisted] = await tx
+        .insert(mcpAssets)
+        .values({
+          id: asset.id ?? randomUUID(),
+          runId: id,
+          principalId: owner.principalId,
+          gatewayRequestId: current.gatewayRequestId,
+          capability: current.capability,
+          providerRequestId:
+            asset.providerRequestId ?? change.providerRequestId ?? null,
+          url: asset.url,
+          mediaType: asset.mediaType ?? null,
+          availableUntil: asset.availableUntil
+            ? new Date(asset.availableUntil)
+            : null,
+          expiresAt: asset.expiresAt ? new Date(asset.expiresAt) : null,
+        })
+        .onConflictDoUpdate({
+          target: [
+            mcpAssets.principalId,
+            mcpAssets.gatewayRequestId,
+            mcpAssets.url,
+          ],
+          set: {
+            providerRequestId: sql`coalesce(excluded.provider_request_id, ${mcpAssets.providerRequestId})`,
+            mediaType: sql`coalesce(excluded.media_type, ${mcpAssets.mediaType})`,
+            availableUntil: sql`coalesce(excluded.available_until, ${mcpAssets.availableUntil})`,
+            expiresAt: sql`coalesce(excluded.expires_at, ${mcpAssets.expiresAt})`,
+          },
+        })
+        .returning({ id: mcpAssets.id });
+      if (persisted)
         await tx
-          .insert(mcpAssets)
+          .insert(runAssetLinks)
           .values({
-            id: asset.id ?? randomUUID(),
             runId: id,
-            principalId: owner.principalId,
-            gatewayRequestId: current.gatewayRequestId,
-            capability: current.capability,
-            providerRequestId:
-              asset.providerRequestId ?? change.providerRequestId ?? null,
-            url: asset.url,
-            mediaType: asset.mediaType ?? null,
-            availableUntil: asset.availableUntil
-              ? new Date(asset.availableUntil)
-              : null,
-            expiresAt: asset.expiresAt ? new Date(asset.expiresAt) : null,
+            assetId: persisted.id,
+            direction: "output",
+            role: "generated_output",
+            parameterPath: "result",
+            ordinal,
           })
-          .onConflictDoNothing({
-            target: [
-              mcpAssets.principalId,
-              mcpAssets.gatewayRequestId,
-              mcpAssets.url,
-            ],
-          });
-      }
+          .onConflictDoNothing();
     }
-    await tx.insert(runEvents).values({
+  }
+  await tx
+    .insert(runEvents)
+    .values({
       runId: id,
       eventKey: change.eventKey,
       status: change.status,
       metadata: change.metadata ?? {},
-    });
-    if (
-      change.queue &&
-      !change.stopReconciliation &&
-      !terminal.has(change.status)
-    ) {
-      // Progress receipts are recovery breadcrumbs, not authority to race the live SDK.
-      // The final dispatch receipt wakes recovery immediately; a crash falls back after 15m.
-      const progressOnly = change.eventKey.startsWith("progress:");
-      const availableAt = progressOnly
-        ? new Date(current.createdAt.getTime() + 15 * 60_000)
-        : now;
-      await tx
-        .insert(runReconciliationJobs)
-        .values({
-          runId: id,
+    })
+    .onConflictDoNothing();
+  if (
+    change.queue &&
+    !change.stopReconciliation &&
+    !terminal.has(change.status)
+  ) {
+    // Progress receipts are recovery breadcrumbs, not authority to race the live SDK.
+    // The final dispatch receipt wakes recovery immediately; a crash falls back after 15m.
+    const progressOnly = change.eventKey.startsWith("progress:");
+    const availableAt = progressOnly
+      ? new Date(current.createdAt.getTime() + 15 * 60_000)
+      : now;
+    await tx
+      .insert(runReconciliationJobs)
+      .values({
+        runId: id,
+        queue: change.queue,
+        availableAt,
+        deadlineAt: new Date(current.createdAt.getTime() + 86_400_000),
+      })
+      .onConflictDoUpdate({
+        target: runReconciliationJobs.runId,
+        set: {
           queue: change.queue,
+          leaseToken: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.leaseToken} end`,
+          leasedUntil: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.leasedUntil} end`,
+          completedAt: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.completedAt} end`,
           availableAt,
-          deadlineAt: new Date(current.createdAt.getTime() + 86_400_000),
-        })
-        .onConflictDoUpdate({
-          target: runReconciliationJobs.runId,
-          set: {
-            queue: change.queue,
-            leaseToken: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.leaseToken} end`,
-            leasedUntil: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.leasedUntil} end`,
-            completedAt: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then null else ${runReconciliationJobs.completedAt} end`,
-            availableAt,
-            attempts: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then 0 else ${runReconciliationJobs.attempts} end`,
-            lastReason: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then 'queue_handle_replaced' else ${runReconciliationJobs.lastReason} end`,
-          },
-          setWhere: sql`${runReconciliationJobs.queue} is distinct from excluded.queue or (${!progressOnly} and ${runReconciliationJobs.completedAt} is null)`,
-        });
-    }
-    if (terminal.has(change.status) || change.stopReconciliation)
-      await tx
-        .update(runReconciliationJobs)
-        .set({
-          completedAt: now,
-          leaseToken: null,
-          leasedUntil: null,
-          lastReason: change.stopReconciliation ?? "run_terminal",
-        })
-        .where(eq(runReconciliationJobs.runId, id));
-    return detail(tx, row);
-  });
+          attempts: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then 0 else ${runReconciliationJobs.attempts} end`,
+          lastReason: sql`case when ${runReconciliationJobs.queue} is distinct from excluded.queue then 'queue_handle_replaced' else ${runReconciliationJobs.lastReason} end`,
+        },
+        setWhere: sql`${runReconciliationJobs.queue} is distinct from excluded.queue or (${!progressOnly} and ${runReconciliationJobs.completedAt} is null)`,
+      });
+  }
+  if (terminal.has(change.status) || change.stopReconciliation)
+    await tx
+      .update(runReconciliationJobs)
+      .set({
+        completedAt: now,
+        leaseToken: null,
+        leasedUntil: null,
+        lastReason: change.stopReconciliation ?? "run_terminal",
+      })
+      .where(eq(runReconciliationJobs.runId, id));
+  return detail(tx, row);
 }
 
 export async function getOwnRun(
@@ -330,7 +504,7 @@ export async function getOwnRun(
   return row ? detail(db, row) : null;
 }
 
-function decodeCursor(cursor: string): { createdAt: Date; id: string } {
+function decodeCursor(cursor: string): { createdAt: string; id: string } {
   try {
     const parsed = JSON.parse(
       Buffer.from(cursor, "base64url").toString("utf8")
@@ -344,7 +518,13 @@ function decodeCursor(cursor: string): { createdAt: Date; id: string } {
     const createdAt = new Date(parsed.createdAt);
     if (!Number.isFinite(createdAt.getTime()) || cursor.length > 1024)
       throw new Error();
-    return { createdAt, id: parsed.id };
+    if (
+      !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,6})?Z$/.test(
+        parsed.createdAt
+      )
+    )
+      throw new Error();
+    return { createdAt: parsed.createdAt, id: parsed.id };
   } catch {
     throw new Error("invalid_run_cursor");
   }
@@ -368,14 +548,21 @@ async function list(
     const cursor = decodeCursor(query.cursor);
     filters.push(
       or(
-        lt(runs.createdAt, cursor.createdAt),
-        and(eq(runs.createdAt, cursor.createdAt), lt(runs.id, cursor.id))
+        sql`${runs.createdAt} < ${cursor.createdAt}::timestamptz`,
+        and(
+          sql`${runs.createdAt} = ${cursor.createdAt}::timestamptz`,
+          lt(runs.id, cursor.id)
+        )
       )
     );
   }
   const limit = Math.max(1, Math.min(100, Math.trunc(query.limit ?? 25) || 25));
   const rows = await db
-    .select({ row: runs, email: userEmails.email })
+    .select({
+      row: runs,
+      email: userEmails.email,
+      cursorCreatedAt: sql<string>`to_char(${runs.createdAt} at time zone 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.US"Z"')`,
+    })
     .from(runs)
     .leftJoin(
       userEmails,
@@ -384,6 +571,47 @@ async function list(
     .where(and(...filters))
     .orderBy(desc(runs.createdAt), desc(runs.id))
     .limit(limit + 1);
+  const visibleRows = rows.slice(0, limit);
+  const billingReceipts = visibleRows.length
+    ? await db
+        .select({
+          runId: runUsageReceipts.runId,
+          networkFeeUsdMicros: runUsageReceipts.networkFeeUsdMicros,
+        })
+        .from(runUsageReceipts)
+        .where(
+          inArray(
+            runUsageReceipts.runId,
+            visibleRows.map(({ row }) => row.id)
+          )
+        )
+    : [];
+  const billingByRun = new Map<
+    string,
+    { networkFeeUsdMicros: string | null }[]
+  >();
+  for (const receipt of billingReceipts) {
+    const receipts = billingByRun.get(receipt.runId) ?? [];
+    receipts.push({ networkFeeUsdMicros: receipt.networkFeeUsdMicros });
+    billingByRun.set(receipt.runId, receipts);
+  }
+  const manifests = visibleRows.length
+    ? await db
+        .select()
+        .from(runPaymentManifests)
+        .where(
+          inArray(
+            runPaymentManifests.runId,
+            visibleRows.map(({ row }) => row.id)
+          )
+        )
+    : [];
+  const manifestsByRun = new Map<string, typeof manifests>();
+  for (const manifest of manifests) {
+    const group = manifestsByRun.get(manifest.runId) ?? [];
+    group.push(manifest);
+    manifestsByRun.set(manifest.runId, group);
+  }
   const grouped = await db
     .select({ status: runs.status, count: sql<number>`count(*)::int` })
     .from(runs)
@@ -406,7 +634,7 @@ async function list(
     counts[group.status] = group.count;
     counts.total += group.count;
   }
-  const items: RunSummary[] = rows.slice(0, limit).map(({ row, email }) => {
+  const items: RunSummary[] = visibleRows.map(({ row, email }) => {
     const full = record(row, email);
     const {
       submittedArguments: _args,
@@ -417,16 +645,21 @@ async function list(
     void _args;
     void _result;
     void _paths;
-    return summary;
+    return {
+      ...summary,
+      billing: manifestsByRun.has(row.id)
+        ? billingSummaryFromManifests(manifestsByRun.get(row.id)!)
+        : billingSummaryFromReceipts(billingByRun.get(row.id) ?? []),
+    };
   });
-  const last = items.at(-1);
+  const last = visibleRows.at(-1);
   return {
     items,
     counts,
     nextCursor:
       rows.length > limit && last
         ? Buffer.from(
-            JSON.stringify({ createdAt: last.createdAt, id: last.id })
+            JSON.stringify({ createdAt: last.cursorCreatedAt, id: last.row.id })
           ).toString("base64url")
         : null,
   };
@@ -434,9 +667,16 @@ async function list(
 
 export function listOwnRuns(
   owner: RunOwner,
-  query: RunListQuery = {}
+  query: RunListQuery = {},
+  options: { excludeLegacyPreview?: boolean } = {}
 ): Promise<RunPage> {
-  return list(getDb(), ownerWhere(owner), query);
+  const scope = options.excludeLegacyPreview
+    ? and(
+        ownerWhere(owner),
+        sql`(left(${runs.id}, 12) <> 'run_preview_' or left(${runs.id}, 15) = 'run_preview_v2_')`
+      )!
+    : ownerWhere(owner);
+  return list(getDb(), scope, query);
 }
 
 async function validateAdmin(actor: AdminPrincipal): Promise<string> {
@@ -525,40 +765,95 @@ export async function recordRunUsage(
     gatewayRequestId: string;
     metadata: Record<string, JsonValue>;
   }[]
-): Promise<void> {
-  await getDb().transaction(async (tx) => {
-    for (const ticket of [...tickets].sort(
-      (a, b) =>
-        a.gatewayRequestId.localeCompare(b.gatewayRequestId) ||
-        a.eventId.localeCompare(b.eventId)
-    )) {
-      if (!ticket.eventId || !ticket.gatewayRequestId) continue;
-      const [run] = await tx
-        .select({ id: runs.id, status: runs.status })
-        .from(runs)
-        .where(
-          and(
-            ownerWhere(owner),
-            eq(runs.gatewayRequestId, ticket.gatewayRequestId)
-          )
+): Promise<string[]> {
+  return getDb().transaction((tx) => recordRunUsageTx(tx, owner, tickets));
+}
+
+async function recordRunUsageTx(
+  tx: Transaction,
+  owner: RunOwner,
+  tickets: {
+    eventId: string;
+    gatewayRequestId: string;
+    metadata: Record<string, JsonValue>;
+  }[]
+): Promise<string[]> {
+  const changed = new Set<string>();
+  for (const ticket of [...tickets].sort(
+    (a, b) =>
+      a.gatewayRequestId.localeCompare(b.gatewayRequestId) ||
+      a.eventId.localeCompare(b.eventId)
+  )) {
+    if (!ticket.eventId || !ticket.gatewayRequestId) continue;
+    const [run] = await tx
+      .select({ id: runs.id, status: runs.status })
+      .from(runs)
+      .where(
+        and(
+          ownerWhere(owner),
+          eq(runs.gatewayRequestId, ticket.gatewayRequestId)
         )
-        .for("update");
-      if (!run) continue;
-      await tx
-        .insert(runEvents)
-        .values({
-          runId: run.id,
-          eventKey: `usage:${ticket.eventId}`,
-          status: run.status,
-          metadata: {
-            ...ticket.metadata,
-            kind: "billing_usage",
-            eventId: ticket.eventId,
-          },
-        })
-        .onConflictDoNothing({ target: [runEvents.runId, runEvents.eventKey] });
-    }
-  });
+      )
+      .for("update");
+    if (!run) continue;
+    const decimal = (key: string) => {
+      const value = ticket.metadata[key];
+      return typeof value === "string" ? value : null;
+    };
+    const timestamp = ticket.metadata.timestamp;
+    const insertedReceipt = await tx
+      .insert(runUsageReceipts)
+      .values({
+        eventId: ticket.eventId,
+        runId: run.id,
+        gatewayRequestId: ticket.gatewayRequestId,
+        occurredAt: typeof timestamp === "string" ? new Date(timestamp) : null,
+        pipeline:
+          typeof ticket.metadata.pipeline === "string"
+            ? ticket.metadata.pipeline
+            : null,
+        modelId:
+          typeof ticket.metadata.modelId === "string"
+            ? ticket.metadata.modelId
+            : null,
+        networkFeeUsdMicros: decimal("networkFeeUsdMicros"),
+        feeWei: decimal("feeWei"),
+        pixels: decimal("pixels"),
+        ethUsdPrice: decimal("ethUsdPrice"),
+      })
+      .onConflictDoNothing({ target: runUsageReceipts.eventId })
+      .returning({ runId: runUsageReceipts.runId });
+    if (!insertedReceipt[0]) continue;
+    await tx
+      .insert(runEvents)
+      .values({
+        runId: run.id,
+        eventKey: `usage:${ticket.eventId}`,
+        status: run.status,
+        metadata: {
+          ...ticket.metadata,
+          kind: "billing_usage",
+          eventId: ticket.eventId,
+        },
+      })
+      .onConflictDoNothing({ target: [runEvents.runId, runEvents.eventKey] });
+    changed.add(insertedReceipt[0].runId);
+  }
+  return [...changed];
+}
+
+export async function ownedRunsByIds(owner: RunOwner, ids: string[]) {
+  const unique = [...new Set(ids)].slice(0, 50);
+  if (!unique.length) return [];
+  return getDb()
+    .select({
+      id: runs.id,
+      gatewayRequestId: runs.gatewayRequestId,
+      status: runs.status,
+      updatedAt: runs.updatedAt,
+    })
+    .from(runs)
+    .where(and(ownerWhere(owner), inArray(runs.id, unique)));
 }
 
 export async function claimReconciliationJobs(
@@ -713,3 +1008,239 @@ export async function releaseReconciliationJob(
       )
     );
 }
+
+/** Capture before paying, then mark accepted; neither phase claims execution success. */
+export async function recordRunPaymentManifest(
+  owner: RunOwner,
+  runId: string,
+  payment: { manifestId: string; phase: "prepared" | "accepted" }
+): Promise<void> {
+  if (
+    !payment.manifestId ||
+    payment.manifestId.length > 512 ||
+    /\s/.test(payment.manifestId)
+  )
+    throw new Error("invalid_payment_manifest");
+  await getDb().transaction(async (tx) => {
+    const [run] = await tx
+      .select({ id: runs.id })
+      .from(runs)
+      .where(and(ownerWhere(owner), eq(runs.id, runId)))
+      .for("update");
+    if (!run) throw new Error("run_owner_mismatch");
+    const [saved] = await tx
+      .insert(runPaymentManifests)
+      .values({
+        runId,
+        externalAccountId: owner.externalAccountId,
+        manifestId: payment.manifestId,
+        accepted: payment.phase === "accepted",
+      })
+      .onConflictDoUpdate({
+        target: [
+          runPaymentManifests.externalAccountId,
+          runPaymentManifests.manifestId,
+        ],
+        set: {
+          accepted: sql`${runPaymentManifests.accepted} or ${payment.phase === "accepted"}`,
+        },
+        setWhere: eq(runPaymentManifests.runId, runId),
+      })
+      .returning({ id: runPaymentManifests.id });
+    if (!saved) throw new Error("payment_manifest_already_linked");
+  });
+}
+
+export async function ownedPaymentManifests(owner: RunOwner, ids: string[]) {
+  const unique = [...new Set(ids)].slice(0, 50);
+  if (!unique.length) return [];
+  return getDb()
+    .select({
+      manifest: runPaymentManifests,
+      status: runs.status,
+      updatedAt: runs.updatedAt,
+    })
+    .from(runPaymentManifests)
+    .innerJoin(runs, eq(runs.id, runPaymentManifests.runId))
+    .where(
+      and(
+        ownerWhere(owner),
+        eq(runPaymentManifests.externalAccountId, owner.externalAccountId),
+        inArray(runs.id, unique)
+      )
+    );
+}
+
+/** Replace cumulative snapshots, never append them as charge receipts. */
+export async function recordManifestUsage(
+  owner: RunOwner,
+  runIds: string[],
+  aggregates: {
+    manifestId: string;
+    networkFeeUsdMicros: string;
+    feeWei: string | null;
+  }[],
+  observedAt: Date
+): Promise<string[]> {
+  const changed = new Set<string>();
+  await getDb().transaction(async (tx) => {
+    const owned = await tx
+      .select({ manifest: runPaymentManifests })
+      .from(runPaymentManifests)
+      .innerJoin(runs, eq(runs.id, runPaymentManifests.runId))
+      .where(
+        and(
+          ownerWhere(owner),
+          eq(runPaymentManifests.externalAccountId, owner.externalAccountId),
+          inArray(runs.id, runIds)
+        )
+      )
+      .orderBy(asc(runPaymentManifests.id))
+      .for("update", { of: runPaymentManifests });
+    const byId = new Map(aggregates.map((row) => [row.manifestId, row]));
+    for (const { manifest } of owned) {
+      const value = byId.get(manifest.manifestId);
+      if (!value || (manifest.observedAt && manifest.observedAt >= observedAt))
+        continue;
+      if (
+        !/^\d{1,30}(?:\.\d{1,18})?$/.test(value.networkFeeUsdMicros) ||
+        (value.feeWei !== null && !/^\d{1,128}$/.test(value.feeWei))
+      )
+        throw new Error("invalid_manifest_usage");
+      const sameFee =
+        manifest.networkFeeUsdMicros !== null &&
+        addDecimalStrings(manifest.networkFeeUsdMicros, "0") ===
+          addDecimalStrings(value.networkFeeUsdMicros, "0");
+      await tx
+        .update(runPaymentManifests)
+        .set({
+          networkFeeUsdMicros: value.networkFeeUsdMicros,
+          feeWei: value.feeWei,
+          observedAt,
+        })
+        .where(eq(runPaymentManifests.id, manifest.id));
+      if (!sameFee || manifest.feeWei !== value.feeWei)
+        changed.add(manifest.runId);
+    }
+  });
+  return [...changed];
+}
+
+/** Preview-only transaction boundary: fixed fixture IDs and owner-scoped lock. */
+export async function withPreviewRunFixtures<T>(
+  owner: RunOwner,
+  work: (store: {
+    createRun: (owner: RunOwner, input: CreateRunInput) => Promise<RunDetail>;
+    transitionRun: typeof transitionRun;
+    recordRunUsage: typeof recordRunUsage;
+    ownedRunsByIds: typeof ownedRunsByIds;
+    completedRunIds: () => Promise<string[]>;
+  }) => Promise<T>
+): Promise<T> {
+  if (
+    process.env.VERCEL_ENV !== "preview" ||
+    process.env.CONSOLE_PREVIEW_FIXTURES !== "1"
+  )
+    throw new Error("preview_fixtures_disabled");
+  const suffix = createHash("sha256")
+    .update(owner.principalId)
+    .digest("hex")
+    .slice(0, 12);
+  const ids = new Set(
+    ["portrait", "variation", "caption", "failed"].map(
+      (name) => `run_preview_v2_${suffix}_${name}`
+    )
+  );
+  const assertOwner = (candidate: RunOwner) => {
+    if (
+      candidate.principalId !== owner.principalId ||
+      candidate.userId !== owner.userId ||
+      candidate.externalAccountId !== owner.externalAccountId
+    )
+      throw new Error("preview_owner_mismatch");
+  };
+  return getDb().transaction(async (tx) => {
+    await tx.execute(sql`SET LOCAL statement_timeout = '60s'`);
+    await tx.execute(
+      sql`select pg_advisory_xact_lock(hashtextextended(${`console-preview:${owner.externalAccountId}`}, 0))`
+    );
+    return work({
+      completedRunIds: async () => {
+        const complete: string[] = [];
+        // One query per fixture checks durable stages, not just run existence.
+        for (const name of ["portrait", "variation", "caption", "failed"]) {
+          const id = `run_preview_v2_${suffix}_${name}`;
+          const receiptIds =
+            name === "failed"
+              ? []
+              : name === "variation"
+                ? [
+                    `receipt_preview_v2_${suffix}_variation_1`,
+                    `receipt_preview_v2_${suffix}_variation_2`,
+                  ]
+                : [`receipt_preview_v2_${suffix}_${name}`];
+          const [state] = await tx
+            .select({
+              id: runs.id,
+              complete: sql<boolean>`
+              exists(select 1 from run_events e where e.run_id = ${id} and e.event_key = 'dispatch-returned')
+              and (select count(*) from run_usage_receipts u where u.run_id = ${id} and u.event_id in (select jsonb_array_elements_text(${JSON.stringify(receiptIds)}::jsonb))) = ${receiptIds.length}
+              and (${!["portrait", "variation"].includes(name)} or exists(select 1 from run_asset_links l join mcp_assets a on a.id = l.asset_id where l.run_id = ${id} and l.direction = 'output' and a.id = ${`asset_preview_v2_${suffix}_${name}`} and a.principal_id = ${owner.principalId}))
+              and (${name !== "variation"} or exists(select 1 from run_asset_links l join mcp_assets a on a.id = l.asset_id where l.run_id = ${id} and l.direction = 'input' and a.id = ${`asset_preview_v2_${suffix}_portrait`} and a.principal_id = ${owner.principalId}))`,
+            })
+            .from(runs)
+            .where(
+              and(
+                ownerWhere(owner),
+                eq(runs.id, id),
+                eq(runs.status, name === "failed" ? "failed" : "succeeded")
+              )
+            );
+          if (state?.complete) complete.push(id);
+        }
+        return complete;
+      },
+      createRun: (candidate, input) => {
+        assertOwner(candidate);
+        if (!input.id || !ids.has(input.id))
+          throw new Error("invalid_preview_fixture");
+        return createRunTx(tx, owner, input, true);
+      },
+      transitionRun: (candidate, id, change) => {
+        assertOwner(candidate);
+        if (!ids.has(id) || change.eventKey !== "dispatch-returned")
+          throw new Error("invalid_preview_fixture");
+        return transitionRunTx(tx, owner, id, change, true);
+      },
+      recordRunUsage: (candidate, tickets) => {
+        assertOwner(candidate);
+        if (
+          tickets.some(
+            (ticket) =>
+              ![...ids].some(
+                (id) =>
+                  ticket.gatewayRequestId ===
+                  id.replace("run_preview_", "job_preview_")
+              )
+          )
+        )
+          throw new Error("invalid_preview_fixture");
+        return recordRunUsageTx(tx, owner, tickets);
+      },
+      ownedRunsByIds: async (candidate, requested) => {
+        assertOwner(candidate);
+        if (requested.some((id) => !ids.has(id)))
+          throw new Error("invalid_preview_fixture");
+        return tx
+          .select({
+            id: runs.id,
+            gatewayRequestId: runs.gatewayRequestId,
+            status: runs.status,
+            updatedAt: runs.updatedAt,
+          })
+          .from(runs)
+          .where(and(ownerWhere(owner), inArray(runs.id, requested)));
+      },
+    });
+  });
+}
diff --git a/lib/runs/types.ts b/lib/runs/types.ts
index 5604d236..fb189ea7 100644
--- a/lib/runs/types.ts
+++ b/lib/runs/types.ts
@@ -1,17 +1,7 @@
 export type JsonValue =
-  | null
-  | boolean
-  | number
-  | string
-  | JsonValue[]
-  | { [key: string]: JsonValue };
+  null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue };
 export type RunStatus =
-  | "queued"
-  | "running"
-  | "succeeded"
-  | "failed"
-  | "cancelled"
-  | "unknown";
+  "queued" | "running" | "succeeded" | "failed" | "cancelled" | "unknown";
 export type RunOwner = {
   principalId: string;
   userId: string;
@@ -32,10 +22,33 @@ export type RunAssetInput = {
 };
 export type RunAsset = RunAssetInput & {
   id: string;
+  /** Whether this asset was produced by this run or referenced as owned input. */
+  role?: "input" | "output";
+  /** User-facing filename/title when known; history falls back to the asset id. */
+  displayName?: string | null;
   createdAt: string;
   unavailableAt: string | null;
   hiddenAt: string | null;
 };
+export type RunInputFieldSchema = {
+  /** Dot path into submitted inputs. Array items use `*`, for example `keyframes.*.image_url`. */
+  path: string;
+  title: string | null;
+  description: string | null;
+  required: boolean;
+  types: string[];
+  options: Array<string | number | boolean | null>;
+  defaultValue?: JsonValue;
+  minimum?: number;
+  maximum?: number;
+  exclusiveMinimum?: number;
+  exclusiveMaximum?: number;
+};
+export type RunInputSchema = {
+  endpointId: string;
+  schemaSha256: string;
+  fields: RunInputFieldSchema[];
+};
 export type RunRecord = RunOwner & {
   id: string;
   gatewayRequestId: string;
@@ -59,7 +72,16 @@ export type RunRecord = RunOwner & {
   completedAt: string | null;
   email: string | null;
 };
+export type RunBillingSummary = {
+  /** PymtHouse network cost, in decimal USD micros. */
+  networkFeeUsdMicros: string;
+  receiptCount?: number;
+  manifestCount?: number;
+};
 export type RunDetail = RunRecord & {
+  billing: RunBillingSummary | null;
+  /** Current provider metadata used to explain submitted inputs in user history. */
+  inputSchema?: RunInputSchema | null;
   assets: RunAsset[];
   events: {
     id: string;
@@ -105,7 +127,7 @@ export type RunListQuery = {
 export type RunSummary = Omit<
   RunRecord,
   "submittedArguments" | "result" | "captureRedactedPaths"
->;
+> & { billing: RunBillingSummary | null };
 export type RunPage = {
   items: RunSummary[];
   nextCursor: string | null;
diff --git a/lib/waitlist/auth0-sync.test.ts b/lib/waitlist/auth0-sync.test.ts
index 43959b74..98226db3 100644
--- a/lib/waitlist/auth0-sync.test.ts
+++ b/lib/waitlist/auth0-sync.test.ts
@@ -1,5 +1,4 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import { NextRequest } from "next/server";
 vi.mock("server-only", () => ({}));
 vi.mock("@/lib/authentication/session", () => ({
   getAuthenticatedIdentity: vi.fn(),
@@ -19,7 +18,7 @@ import { resolveProviderIdentity } from "@/lib/identity/provider-user";
 import { enrollAuthenticatedUser } from "@/lib/access/enrollment";
 import { getAccessDecision } from "@/lib/access/service";
 import { getAdminPrincipalForUser } from "@/lib/admin/permissions";
-import { GET } from "@/app/api/identity/sync/route";
+import { signedInLandingPath } from "@/lib/identity/signed-in-landing";
 const identity = {
   authority: "auth0",
   issuer: "https://auth.invalid",
@@ -34,9 +33,7 @@ const canonical = {
   conflicts: [],
   identityCreated: false,
 };
-const request = (query = "") =>
-  new NextRequest(`https://preview.invalid/api/identity/sync${query}`);
-describe("post-Auth0 landing and enrollment context", () => {
+describe("post-Auth0 landing on login paths", () => {
   beforeEach(() => {
     vi.resetAllMocks();
     vi.mocked(getAuthenticatedIdentity).mockResolvedValue(identity);
@@ -51,58 +48,39 @@ describe("post-Auth0 landing and enrollment context", () => {
     });
     vi.mocked(getAdminPrincipalForUser).mockResolvedValue(null);
   });
-  it("returns retired waitlist Auth0 transactions to the Resend form without enrolling", async () => {
-    expect(
-      (
-        await GET(
-          request("?from=waitlist&ref=friend&utm_source=campaign&role=admin")
-        )
-      ).headers.get("location")
-    ).toBe("https://preview.invalid/waitlist?ref=friend&utm_source=campaign");
-    expect(enrollAuthenticatedUser).not.toHaveBeenCalled();
-  });
   it("sends approved ordinary users home and administrators to administration", async () => {
     vi.mocked(getAccessDecision).mockResolvedValue({
       state: "approved",
       userId: "user",
     });
-    expect(
-      (await GET(request("?returnTo=%2Fhome"))).headers.get("location")
-    ).toBe("https://preview.invalid/home");
+    expect(await signedInLandingPath("/home")).toBe("/home");
     vi.mocked(getAdminPrincipalForUser).mockResolvedValue({
       adminGrantId: "grant",
       signupId: "signup",
       userId: "user",
     });
-    expect((await GET(request())).headers.get("location")).toBe(
-      "https://preview.invalid/admin"
-    );
+    expect(await signedInLandingPath("/home")).toBe("/admin");
   });
-  it("preserves safe explicit member/device/MCP destinations without treating them as approval", async () => {
+  it("preserves waitlist, device, and MCP destinations without treating them as approval", async () => {
     for (const path of [
       "/waitlist",
       "/device?user_code=ABC",
       "/api/mcp/oauth/callback?state=opaque",
     ])
-      expect(
-        (
-          await GET(request(`?returnTo=${encodeURIComponent(path)}`))
-        ).headers.get("location")
-      ).toBe(`https://preview.invalid${path}`);
-    expect(
-      (await GET(request("?returnTo=%2F%2Fevil.invalid"))).headers.get(
-        "location"
-      )
-    ).toBe("https://preview.invalid/access-pending");
+      expect(await signedInLandingPath(path)).toBe(path);
+    expect(await signedInLandingPath("//evil.invalid")).toBe("/access-pending");
   });
   it("retains authentication on storage failure but routes to the fail-closed waiting surface", async () => {
     const log = vi.spyOn(console, "error").mockImplementation(() => {});
     vi.mocked(resolveProviderIdentity).mockRejectedValue(
       new Error("unavailable")
     );
-    expect((await GET(request())).headers.get("location")).toBe(
-      "https://preview.invalid/access-pending"
-    );
+    expect(await signedInLandingPath("/home")).toBe("/access-pending");
     log.mockRestore();
   });
+  it("sends unauthenticated callers to sign-in", async () => {
+    vi.mocked(getAuthenticatedIdentity).mockResolvedValue(null);
+    expect(await signedInLandingPath("/keys")).toBe("/login?returnTo=%2Fkeys");
+    expect(enrollAuthenticatedUser).not.toHaveBeenCalled();
+  });
 });
diff --git a/package.json b/package.json
index 9834685f..0214ef87 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@base-ui/react": "^1.8.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@pymthouse/builder-sdk": "^0.6.5",
-    "@pymthouse/gateway-web": "0.3.4",
+    "@pymthouse/gateway-web": "0.3.5",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "drizzle-orm": "^0.45.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4dd11e95..58ae4036 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -24,8 +24,8 @@ importers:
         specifier: ^0.6.5
         version: 0.6.5
       '@pymthouse/gateway-web':
-        specifier: 0.3.4
-        version: 0.3.4
+        specifier: 0.3.5
+        version: 0.3.5
       class-variance-authority:
         specifier: ^0.7.1
         version: 0.7.1
@@ -1026,8 +1026,8 @@ packages:
     resolution: {integrity: sha512-oWQC3y7vTqOKG+fEaZRc7TtbIMJaLZZoS6kCqBzF5M4489wGS31LlE2gwhYDEuVNAeyoJwaK/Uu+mfEe8TwGFw==}
     engines: {node: '>=20'}
 
-  '@pymthouse/gateway-web@0.3.4':
-    resolution: {integrity: sha512-tsxjD9P12LSsRZ6vGpVAjLd/imbuVq3aaynqggQhTpilJshYvyLHvpsO2WuG8+k8Nb5x7C3uACRIlyNmmZ1PNw==}
+  '@pymthouse/gateway-web@0.3.5':
+    resolution: {integrity: sha512-qir87lWY7qi+1lGDUCyqC5kK7A148nn7TMYcOI/FoTFkO3CPO0YhdL55fmeBIH0/Jj0AIQkZbg1nzGeR9O6lsw==}
     engines: {node: '>=20'}
 
   '@reduxjs/toolkit@2.12.0':
@@ -4443,7 +4443,7 @@ snapshots:
     dependencies:
       oauth4webapi: 3.8.8
 
-  '@pymthouse/gateway-web@0.3.4':
+  '@pymthouse/gateway-web@0.3.5':
     dependencies:
       undici: 7.29.1
 
diff --git a/proxy.ts b/proxy.ts
index d589b820..57987ab8 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from "next/server";
 import { auth0 } from "@/lib/auth0";
 import { AUTH_SIGNIN_HREF } from "@/lib/console/auth-login";
 import { devMockResponse } from "@/lib/console/dev-mock";
-import { identitySyncPath } from "@/lib/identity/sync-return";
 
 function copyAuthCookies(from: NextResponse, to: NextResponse): NextResponse {
   from.cookies.getAll().forEach((cookie) => {
@@ -30,7 +29,10 @@ export async function proxy(request: NextRequest) {
     const mocked = devMockResponse(
       request.nextUrl.pathname,
       request.nextUrl.searchParams,
-      request.url
+      new URL(
+        `${request.nextUrl.pathname}${request.nextUrl.search}`,
+        `${request.nextUrl.protocol}//${request.headers.get("host") ?? request.nextUrl.host}`
+      ).href
     );
     if (mocked) return mocked;
   }
@@ -64,10 +66,10 @@ export async function proxy(request: NextRequest) {
         ? redirectTo(AUTH_SIGNIN_HREF)
         : authRes;
     }
-    // `/` is a pure redirect in both auth states; resolve it here too so the
-    // signed-in case resolves admission and admin landing in Node, not Edge.
+    // `/` is a pure redirect in both auth states. Admission and admin landing
+    // run on `/login` after Auth0 and on `/home` via requireConsolePage.
     if (pathname === "/") {
-      return redirectTo(devMock ? "/home" : identitySyncPath("/home"));
+      return redirectTo("/home");
     }
   } catch {
     return authRes;
diff --git a/public/fixtures/history/README.md b/public/fixtures/history/README.md
new file mode 100644
index 00000000..5e74a765
--- /dev/null
+++ b/public/fixtures/history/README.md
@@ -0,0 +1 @@
+Synthetic local History fixtures: a one-second 440 Hz mono WAV and an untextured octahedron GLB. Generated for testing; no third-party media. The 3D preview/texture mock intentionally reuses an existing bundled image.
diff --git a/public/fixtures/history/octahedron.glb b/public/fixtures/history/octahedron.glb
new file mode 100644
index 00000000..607827ba
Binary files /dev/null and b/public/fixtures/history/octahedron.glb differ
diff --git a/public/fixtures/history/sample-tone.wav b/public/fixtures/history/sample-tone.wav
new file mode 100644
index 00000000..74aa634e
Binary files /dev/null and b/public/fixtures/history/sample-tone.wav differ
diff --git a/tests/contracts/account-history-route.test.ts b/tests/contracts/account-history-route.test.ts
index 3c751c27..d4ec9acd 100644
--- a/tests/contracts/account-history-route.test.ts
+++ b/tests/contracts/account-history-route.test.ts
@@ -74,7 +74,7 @@ beforeEach(() => {
     email: "fixture@example.invalid",
   } as never);
   vi.mocked(resolveRunOwner).mockResolvedValue(owner);
-  vi.mocked(recordRunUsage).mockResolvedValue(undefined);
+  vi.mocked(recordRunUsage).mockResolvedValue([]);
   vi.mocked(existingRunGatewayIds).mockResolvedValue([]);
   vi.mocked(attachOutputsToTickets).mockImplementation(
     async (_principal, items) => items
@@ -105,10 +105,15 @@ it("suppresses owned run tickets, persists fee-only evidence, and joins assets o
         eventId: "event-owned",
         gatewayRequestId: "owned",
         metadata: {
+          billingEventId: "event-owned",
+          ticketGatewayRequestId: "owned",
+          pipeline: "image",
+          modelId: "model",
           networkFeeUsdMicros: "100",
           feeWei: "10",
           ethUsdPrice: "2000.25",
           pixels: "512",
+          timestamp: "2020-01-01T00:00:00.000Z",
         },
       },
     ])
@@ -139,6 +144,13 @@ it("returns scoped matched receipts when Home explicitly requests correlation",
   expect(result.items).toEqual([row("owned")]);
   expect(result.nextCursor).toBe("next");
   expect(recordRunUsage).toHaveBeenCalledTimes(1);
+  expect(fetchAccountRequestsForExternalUser).toHaveBeenCalledWith({
+    externalUserId: "eu_fixture",
+    email: "fixture@example.invalid",
+    cursor: undefined,
+    limit: 50,
+    recentWindow: true,
+  });
   expect(JSON.stringify(vi.mocked(recordRunUsage).mock.calls)).not.toContain(
     "event-other"
   );
@@ -239,3 +251,24 @@ it("returns an independent billing error without creating fabricated execution h
   expect(recordRunUsage).not.toHaveBeenCalled();
   expect(attachOutputsToTickets).not.toHaveBeenCalled();
 });
+
+it.each(["", "?includeCorrelated=1"])(
+  "sanitizes asset URLs on account requests %s",
+  async (query) => {
+    vi.mocked(fetchAccountRequestsForExternalUser).mockResolvedValue(
+      payload(
+        [{ ...row("legacy"), outputUrl: "https://provider.example/a" }],
+        null
+      )
+    );
+    vi.mocked(attachOutputsToTickets).mockImplementation(
+      async (_owner, items) =>
+        items.map((item) => ({ ...item, outputUrl: null }))
+    );
+    const response = await GET(
+      new NextRequest(`http://localhost/api/pymthouse/account-requests${query}`)
+    );
+    expect((await response.json()).items[0].outputUrl).toBeNull();
+    expect(attachOutputsToTickets).toHaveBeenCalledTimes(1);
+  }
+);
diff --git a/tests/contracts/account-history.test.ts b/tests/contracts/account-history.test.ts
index 95a6a75b..f5b76c62 100644
--- a/tests/contracts/account-history.test.ts
+++ b/tests/contracts/account-history.test.ts
@@ -63,8 +63,28 @@ it("keeps old history and pagination even when its media is unavailable", async
   expect(url.searchParams.get("limit")).toBe("50");
 });
 
+it("omits the year window for Cost so the current-month ticket feed is kept", async () => {
+  const fetch = vi.fn<typeof globalThis.fetch>(async () =>
+    Response.json({
+      items: [],
+      nextCursor: null,
+      openMeterConfigured: true,
+    })
+  );
+  vi.stubGlobal("fetch", fetch);
+  await fetchAccountRequestsForExternalUser({
+    externalUserId: "test-user",
+    limit: 50,
+    recentWindow: true,
+  });
+  const url = new URL(fetch.mock.calls[0][0] as string);
+  expect(url.searchParams.get("from")).toBeNull();
+  expect(url.searchParams.get("to")).toBeNull();
+});
+
 it("does not label History with media expiry or a seven-day limit", () => {
   const source = readFileSync("components/console/CallsSection.tsx", "utf8");
   expect(source).toContain('title="History"');
   expect(source).not.toMatch(/Last 7 days|expir/i);
+  expect(source).not.toMatch(/setTimeout\(\(\) => void refresh\(\), 30_000\)/);
 });
diff --git a/tests/contracts/activity-asset-boundary.test.ts b/tests/contracts/activity-asset-boundary.test.ts
new file mode 100644
index 00000000..99da538f
--- /dev/null
+++ b/tests/contracts/activity-asset-boundary.test.ts
@@ -0,0 +1,16 @@
+import { expect, it, vi } from "vitest";
+vi.mock("server-only", () => ({}));
+vi.mock("@/lib/mcp/store", () => ({
+  listAssetsForGatewayRequestIds: vi.fn().mockResolvedValue([]),
+}));
+import { attachOutputsToTickets } from "@/lib/console/activity-assets";
+import type { SignedTicketRequestRow } from "@/lib/console/account-usage";
+it("removes an upstream outputUrl without a matching owned asset", async () => {
+  const result = await attachOutputsToTickets("eu_test", [
+    {
+      gatewayRequestId: "job",
+      outputUrl: "https://provider.example/a",
+    } as SignedTicketRequestRow,
+  ]);
+  expect(result[0]?.outputUrl).toBeNull();
+});
diff --git a/tests/contracts/admin-access-table.test.tsx b/tests/contracts/admin-access-table.test.tsx
index 6b702d75..27031181 100644
--- a/tests/contracts/admin-access-table.test.tsx
+++ b/tests/contracts/admin-access-table.test.tsx
@@ -198,6 +198,11 @@ it("scopes actions and selections to the selected status section", async () => {
     screen.queryByRole("checkbox", { name: "Select this page" })
   ).toBeNull();
   expect(screen.getByRole("checkbox", { name: "Select all" })).toBeTruthy();
+  expect(
+    screen
+      .getByRole("checkbox", { name: "Select all" })
+      .getAttribute("autocomplete")
+  ).toBe("off");
   expect(screen.queryByRole("button", { name: "Revoke selected" })).toBeNull();
   fireEvent.click(selected);
   expect(
diff --git a/tests/contracts/admin-runs-preview.test.tsx b/tests/contracts/admin-runs-preview.test.tsx
index 52979f11..991c65f1 100644
--- a/tests/contracts/admin-runs-preview.test.tsx
+++ b/tests/contracts/admin-runs-preview.test.tsx
@@ -49,6 +49,7 @@ const records: RunSummary[] = ["alex", "jamie"].map((name, index) => ({
   startedAt: "2026-09-01T12:00:00.000Z",
   completedAt: "2026-09-01T12:00:01.000Z",
   email: `${name}@example.invalid`,
+  billing: null,
 }));
 const fetcher = vi.fn();
 beforeEach(() => {
@@ -145,7 +146,7 @@ it("preserves personal History navigation without an admin inspector", () => {
   expect(screen.queryByRole("button")).toBeNull();
 });
 
-it("loads persisted platform history and inspects submitted/returned JSON in the shared drawer", async () => {
+it("loads persisted platform history and presents captured fields without raw JSON", async () => {
   render(
     <AdminWorkspace>
       <div>Existing waitlist</div>
@@ -164,12 +165,15 @@ it("loads persisted platform history and inspects submitted/returned JSON in the
   );
   fireEvent.click(screen.getByRole("button", { name: "Inspect run-alex" }));
   const inspector = screen.getByRole("dialog");
-  await within(inspector).findByText("Submitted JSON");
+  await within(inspector).findByText("Submitted prompts");
   await waitFor(() =>
     expect(inspector.textContent).toContain("Durable lighthouse prompt")
   );
   expect(inspector.textContent).toContain("Captured text output");
-  expect(within(inspector).getByText("Returned JSON")).toBeTruthy();
+  expect(within(inspector).getByText("Request parameters")).toBeTruthy();
+  expect(within(inspector).getByText("Response")).toBeTruthy();
+  expect(within(inspector).queryByText("Submitted JSON")).toBeNull();
+  expect(within(inspector).queryByText("Returned JSON")).toBeNull();
   expect(
     fetcher.mock.calls.some(([url]) => url === "/api/admin/runs/run-alex")
   ).toBe(true);
diff --git a/tests/contracts/asset-proxy.test.ts b/tests/contracts/asset-proxy.test.ts
new file mode 100644
index 00000000..1ce05e4f
--- /dev/null
+++ b/tests/contracts/asset-proxy.test.ts
@@ -0,0 +1,370 @@
+import { createHash } from "node:crypto";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("@/lib/assets/transport", () => ({ fetchPinnedAsset: vi.fn() }));
+import { fetchPinnedAsset } from "@/lib/assets/transport";
+
+vi.mock("node:dns/promises", () => ({ lookup: vi.fn() }));
+vi.mock("@/lib/mcp/store", () => ({ getAssetSource: vi.fn() }));
+
+import { lookup } from "node:dns/promises";
+import { getAssetSource } from "@/lib/mcp/store";
+import { GET, HEAD } from "@/app/api/assets/[id]/route";
+import { publicAssetUrl } from "@/lib/assets/public";
+
+describe("first-party asset proxy", () => {
+  beforeEach(() => {
+    vi.mocked(lookup).mockReset();
+    vi.mocked(fetchPinnedAsset).mockReset();
+    vi.mocked(getAssetSource).mockReset();
+    vi.unstubAllGlobals();
+  });
+
+  it("streams stored media and preserves byte-range requests", async () => {
+    vi.mocked(getAssetSource).mockResolvedValue({
+      url: "https://media.example.test/video.mp4",
+      mediaType: "video",
+      principalId: "eu_test",
+      unavailableAt: null,
+      expiresAt: null,
+    });
+    vi.mocked(lookup).mockResolvedValue([
+      { address: "203.0.113.10", family: 4 },
+    ] as never);
+    const fetcher = vi.fn().mockResolvedValue(
+      new Response("bytes", {
+        status: 206,
+        headers: {
+          "content-type": "video/mp4",
+          "content-range": "bytes 0-4/10",
+        },
+      })
+    );
+    vi.mocked(fetchPinnedAsset).mockImplementation(fetcher);
+
+    const response = await GET(
+      new Request(publicAssetUrl("asset_123", "eu_test"), {
+        headers: { Range: "bytes=0-4" },
+      }),
+      { params: Promise.resolve({ id: "asset_123" }) }
+    );
+
+    expect(response.status).toBe(206);
+    expect(response.headers.get("content-type")).toBe("video/mp4");
+    expect(response.headers.get("content-security-policy")).toBeNull();
+    expect(await response.text()).toBe("bytes");
+    expect(fetcher).toHaveBeenCalledWith(
+      new URL("https://media.example.test/video.mp4"),
+      [{ address: "203.0.113.10", family: 4 }],
+      expect.objectContaining({
+        headers: expect.objectContaining({
+          Range: "bytes=0-4",
+          "Accept-Encoding": "identity",
+        }),
+      })
+    );
+  });
+
+  it("refuses asset origins that resolve to a private address", async () => {
+    vi.mocked(getAssetSource).mockResolvedValue({
+      url: "https://media.example.test/video.mp4",
+      mediaType: "video",
+      principalId: "eu_test",
+      unavailableAt: null,
+      expiresAt: null,
+    });
+    vi.mocked(lookup).mockResolvedValue([
+      { address: "127.0.0.1", family: 4 },
+    ] as never);
+    const fetcher = vi.fn();
+    vi.mocked(fetchPinnedAsset).mockImplementation(fetcher);
+
+    const response = await GET(
+      new Request(publicAssetUrl("asset_123", "eu_test")),
+      { params: Promise.resolve({ id: "asset_123" }) }
+    );
+
+    expect(response.status).toBe(502);
+    expect(fetcher).not.toHaveBeenCalled();
+  });
+
+  it("returns the same non-revealing 404 for missing and tampered signatures", async () => {
+    vi.mocked(getAssetSource).mockResolvedValue({
+      url: "https://media.example.test/video.mp4",
+      mediaType: "video",
+      principalId: "eu_test",
+      unavailableAt: null,
+      expiresAt: null,
+    });
+    const signed = new URL(publicAssetUrl("asset_123", "eu_test"));
+    signed.searchParams.set("sig", "tampered");
+    const response = await GET(new Request(signed), {
+      params: Promise.resolve({ id: "asset_123" }),
+    });
+    expect(response.status).toBe(404);
+    expect(response.headers.get("cache-control")).toContain("no-store");
+  });
+
+  it("treats stored expiresAt as a hard expiry", async () => {
+    vi.mocked(getAssetSource).mockResolvedValue({
+      url: "https://media.example.test/video.mp4",
+      mediaType: "video",
+      principalId: "eu_test",
+      unavailableAt: null,
+      expiresAt: new Date(Date.now() - 1),
+    });
+    const response = await GET(
+      new Request(publicAssetUrl("asset_123", "eu_test")),
+      { params: Promise.resolve({ id: "asset_123" }) }
+    );
+    expect(response.status).toBe(404);
+  });
+
+  it("revalidates redirect destinations against the provider allowlist", async () => {
+    vi.mocked(getAssetSource).mockResolvedValue({
+      url: "https://media.example.test/video.mp4",
+      mediaType: "video",
+      principalId: "eu_test",
+      unavailableAt: null,
+      expiresAt: null,
+    });
+    vi.mocked(lookup).mockResolvedValue([
+      { address: "203.0.113.10", family: 4 },
+    ] as never);
+    const fetcher = vi.fn().mockResolvedValue(
+      new Response(null, {
+        status: 302,
+        headers: { location: "https://evil.example/file" },
+      })
+    );
+    vi.mocked(fetchPinnedAsset).mockImplementation(fetcher);
+    const response = await GET(
+      new Request(publicAssetUrl("asset_123", "eu_test")),
+      { params: Promise.resolve({ id: "asset_123" }) }
+    );
+    expect(response.status).toBe(502);
+    expect(fetcher).toHaveBeenCalledTimes(1);
+  });
+});
+
+const source = {
+  url: "https://media.example.test/a.png",
+  principalId: "eu_test",
+  mediaType: "image",
+  expiresAt: null,
+  unavailableAt: null,
+};
+const context = { params: Promise.resolve({ id: "asset_123" }) };
+const signedRequest = (method = "GET") =>
+  new Request(publicAssetUrl("asset_123", "eu_test"), { method });
+
+it("does not resolve or fetch unavailable media", async () => {
+  vi.mocked(lookup).mockClear();
+  vi.mocked(fetchPinnedAsset).mockClear();
+  vi.mocked(getAssetSource).mockResolvedValue({
+    ...source,
+    unavailableAt: new Date(),
+  });
+  expect((await GET(signedRequest(), context)).status).toBe(404);
+  expect(lookup).not.toHaveBeenCalled();
+  expect(fetchPinnedAsset).not.toHaveBeenCalled();
+});
+it.each([
+  "10.0.0.1",
+  "169.254.169.254",
+  "100.64.0.1",
+  "::1",
+  "fc00::1",
+  "::ffff:7f00:1",
+  "::ffff:127.0.0.1",
+  "fe80::1",
+])("rejects mixed public/private DNS results including %s", async (address) => {
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(fetchPinnedAsset).mockClear();
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+    { address, family: address.includes(":") ? 6 : 4 },
+  ] as never);
+  expect((await GET(signedRequest(), context)).status).toBe(502);
+  expect(fetchPinnedAsset).not.toHaveBeenCalled();
+});
+it("pins every redirect, cancels abandoned bodies, and bounds the redirect count", async () => {
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  const cancel = vi.fn();
+  vi.mocked(fetchPinnedAsset)
+    .mockReset()
+    .mockImplementation(
+      async () =>
+        new Response(new ReadableStream({ cancel }), {
+          status: 302,
+          headers: { location: "/again" },
+        })
+    );
+  expect((await GET(signedRequest(), context)).status).toBe(502);
+  expect(fetchPinnedAsset).toHaveBeenCalledTimes(4);
+  expect(cancel).toHaveBeenCalledTimes(4);
+});
+it("caps unknown expiry caching, bounds known expiry, and never caches errors", async () => {
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () => new Response("ok")
+  );
+  expect(
+    (await GET(signedRequest(), context)).headers.get("cache-control")
+  ).toBe("private, max-age=60");
+  vi.mocked(getAssetSource).mockResolvedValue({
+    ...source,
+    expiresAt: new Date(Date.now() + 15_000),
+  });
+  const bounded = await GET(signedRequest(), context);
+  expect(
+    Number(bounded.headers.get("cache-control")!.split("=")[1])
+  ).toBeLessThanOrEqual(15);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () => new Response("temporary", { status: 503 })
+  );
+  expect(
+    (await GET(signedRequest(), context)).headers.get("cache-control")
+  ).toContain("no-store");
+});
+it("forwards HEAD and an abortable signal without a response body", async () => {
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () => new Response(null)
+  );
+  const req = signedRequest("HEAD");
+  expect((await HEAD(req, context)).body).toBeNull();
+  expect(fetchPinnedAsset).toHaveBeenLastCalledWith(
+    new URL(source.url),
+    [{ address: "8.8.8.8", family: 4 }],
+    expect.objectContaining({ method: "HEAD", signal: expect.any(AbortSignal) })
+  );
+});
+
+it("passes provider media types through without sandboxing the document player", async () => {
+  vi.mocked(getAssetSource).mockResolvedValue({
+    ...source,
+    mediaType: "video",
+    url: "https://media.example.test/video.mp4",
+  });
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () =>
+      new Response("bytes", { headers: { "content-type": "video/mp4" } })
+  );
+  const playable = await GET(signedRequest(), context);
+  expect(playable.headers.get("content-type")).toBe("video/mp4");
+  expect(playable.headers.get("content-security-policy")).toBeNull();
+  expect(playable.headers.get("x-content-type-options")).toBe("nosniff");
+});
+
+it("does not forward a provider HTML type as playable media", async () => {
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () =>
+      new Response("<html>", { headers: { "content-type": "text/html" } })
+  );
+  const blocked = await GET(signedRequest(), context);
+  expect(blocked.headers.get("content-type")).not.toBe("text/html");
+  expect(blocked.headers.get("content-security-policy")).toContain("sandbox");
+});
+
+it("sandboxes SVG so a signed script cannot run on the console origin", async () => {
+  vi.mocked(lookup).mockResolvedValue([
+    { address: "8.8.8.8", family: 4 },
+  ] as never);
+  vi.mocked(getAssetSource).mockResolvedValue(source);
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () =>
+      new Response("<svg><script></script></svg>", {
+        headers: { "content-type": "image/svg+xml" },
+      })
+  );
+  const fromUpstream = await GET(signedRequest(), context);
+  expect(fromUpstream.headers.get("content-type")).not.toBe("image/svg+xml");
+  expect(fromUpstream.headers.get("content-security-policy")).toContain(
+    "sandbox"
+  );
+
+  vi.mocked(getAssetSource).mockResolvedValue({
+    ...source,
+    mediaType: "image/svg+xml",
+  });
+  vi.mocked(fetchPinnedAsset).mockImplementation(
+    async () =>
+      new Response("<svg>", {
+        headers: { "content-type": "application/octet-stream" },
+      })
+  );
+  const fromStored = await GET(signedRequest(), context);
+  expect(fromStored.headers.get("content-type")).not.toBe("image/svg+xml");
+  expect(fromStored.headers.get("content-security-policy")).toContain(
+    "sandbox"
+  );
+});
+
+it("serves only owner-bound synthetic fixtures without widening the proxy host allowlist", async () => {
+  vi.stubEnv("VERCEL_ENV", "preview");
+  vi.stubEnv("CONSOLE_PREVIEW_FIXTURES", "1");
+  try {
+    const suffix = createHash("sha256")
+      .update("eu_test")
+      .digest("hex")
+      .slice(0, 12);
+    const id = `asset_preview_v2_${suffix}_portrait`;
+    vi.mocked(getAssetSource).mockResolvedValue({
+      ...source,
+      url: "https://old-preview.example/images/console/explore/flux-schnell.webp",
+    });
+    vi.mocked(lookup).mockClear();
+    vi.mocked(fetchPinnedAsset).mockClear();
+    const response = await GET(new Request(publicAssetUrl(id, "eu_test")), {
+      params: Promise.resolve({ id }),
+    });
+    expect(response.status).toBe(307);
+    expect(response.headers.get("location")).toBe(
+      "/images/console/explore/flux-schnell.webp"
+    );
+    expect(lookup).not.toHaveBeenCalled();
+    expect(fetchPinnedAsset).not.toHaveBeenCalled();
+    vi.mocked(getAssetSource).mockResolvedValue({
+      ...source,
+      unavailableAt: new Date(),
+    });
+    expect(
+      (
+        await GET(new Request(publicAssetUrl(id, "eu_test")), {
+          params: Promise.resolve({ id }),
+        })
+      ).status
+    ).toBe(404);
+    vi.stubEnv("VERCEL_ENV", "production");
+    vi.mocked(getAssetSource).mockResolvedValue({
+      ...source,
+      url: "https://old-preview.example/file",
+    });
+    expect(
+      (
+        await GET(new Request(publicAssetUrl(id, "eu_test")), {
+          params: Promise.resolve({ id }),
+        })
+      ).status
+    ).toBe(502);
+  } finally {
+    vi.unstubAllEnvs();
+  }
+});
diff --git a/tests/contracts/asset-transport.test.ts b/tests/contracts/asset-transport.test.ts
new file mode 100644
index 00000000..21b3e1e0
--- /dev/null
+++ b/tests/contracts/asset-transport.test.ts
@@ -0,0 +1,119 @@
+import { mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { execFileSync } from "node:child_process";
+import { once } from "node:events";
+import type { AddressInfo } from "node:net";
+import type { TLSSocket } from "node:tls";
+import { expect, it, vi } from "vitest";
+
+const harness = vi.hoisted(() => ({ ca: "" }));
+vi.mock("node:https", async (importOriginal) => {
+  const original = await importOriginal<typeof import("node:https")>();
+  return {
+    ...original,
+    request: vi.fn((url, options, callback) =>
+      original.request(url, { ...options, ca: harness.ca }, callback)
+    ),
+  };
+});
+import { createServer, request } from "node:https";
+import { fetchPinnedAsset } from "@/lib/assets/transport";
+
+it("pins the connection while preserving TLS hostname, range, HEAD, and stream cancellation", async () => {
+  const dir = mkdtempSync(join(tmpdir(), "asset-transport-"));
+  execFileSync(
+    "openssl",
+    [
+      "req",
+      "-x509",
+      "-newkey",
+      "rsa:2048",
+      "-nodes",
+      "-keyout",
+      join(dir, "key.pem"),
+      "-out",
+      join(dir, "cert.pem"),
+      "-days",
+      "1",
+      "-subj",
+      "/CN=media.example.test",
+      "-addext",
+      "subjectAltName=DNS:media.example.test",
+    ],
+    { stdio: "ignore" }
+  );
+  harness.ca = readFileSync(join(dir, "cert.pem"), "utf8");
+  let host = "",
+    servername = "",
+    range = "";
+  const server = createServer(
+    { key: readFileSync(join(dir, "key.pem")), cert: harness.ca },
+    (req, res) => {
+      host = req.headers.host!;
+      servername = (req.socket as TLSSocket).servername || "";
+      range = req.headers.range || "";
+      if (req.url === "/slow") {
+        res.writeHead(200);
+        res.write("start");
+        return;
+      }
+      res.writeHead(req.headers.range ? 206 : 200, {
+        "content-type": "video/mp4",
+      });
+      res.end("bytes");
+    }
+  );
+  try {
+    server.listen(0, "127.0.0.1");
+    await once(server, "listening");
+    const port = (server.address() as AddressInfo).port;
+    const url = new URL(`https://media.example.test:${port}/video`);
+    const options = {
+      method: "GET",
+      headers: { Range: "bytes=0-4" },
+      signal: AbortSignal.timeout(5000),
+    };
+    const response = await fetchPinnedAsset(
+      url,
+      [{ address: "127.0.0.1", family: 4 }],
+      options
+    );
+    expect(response.status).toBe(206);
+    expect(await response.text()).toBe("bytes");
+    expect(host).toBe(`media.example.test:${port}`);
+    expect(servername).toBe("media.example.test");
+    expect(range).toBe("bytes=0-4");
+    expect(vi.mocked(request).mock.calls[0]?.[1]).toMatchObject({
+      agent: false,
+      lookup: expect.any(Function),
+    });
+    const head = await fetchPinnedAsset(
+      url,
+      [{ address: "127.0.0.1", family: 4 }],
+      { ...options, method: "HEAD" }
+    );
+    expect(head.body).toBeNull();
+    const controller = new AbortController();
+    const slow = await fetchPinnedAsset(
+      new URL("/slow", url),
+      [{ address: "127.0.0.1", family: 4 }],
+      { ...options, signal: controller.signal }
+    );
+    const reader = slow.body!.getReader();
+    await reader.read();
+    controller.abort();
+    await expect(reader.read()).rejects.toThrow();
+    await expect(
+      fetchPinnedAsset(
+        new URL(`https://wrong.example.test:${port}/`),
+        [{ address: "127.0.0.1", family: 4 }],
+        options
+      )
+    ).rejects.toThrow();
+  } finally {
+    server.closeAllConnections();
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+    rmSync(dir, { recursive: true, force: true });
+  }
+}, 15000);
diff --git a/tests/contracts/auth0-entry-pages.test.ts b/tests/contracts/auth0-entry-pages.test.ts
index fdc8ac38..b206e9e1 100644
--- a/tests/contracts/auth0-entry-pages.test.ts
+++ b/tests/contracts/auth0-entry-pages.test.ts
@@ -1,10 +1,16 @@
 import { beforeEach, expect, it, vi } from "vitest";
 
-const mocks = vi.hoisted(() => ({ identity: vi.fn() }));
+const mocks = vi.hoisted(() => ({
+  identity: vi.fn(),
+  landing: vi.fn(async (returnTo: string) => returnTo),
+}));
 vi.mock("server-only", () => ({}));
 vi.mock("@/lib/authentication/session", () => ({
   getAuthenticatedIdentity: mocks.identity,
 }));
+vi.mock("@/lib/identity/signed-in-landing", () => ({
+  signedInLandingPath: mocks.landing,
+}));
 vi.mock("@/components/console/LoginPage", () => ({ default: () => null }));
 vi.mock("next/navigation", () => ({
   redirect: (url: string) => {
@@ -15,30 +21,29 @@ import LoginRoute from "@/app/(auth)/login/page";
 import SignupRoute from "@/app/(auth)/signup/page";
 import RootPage from "@/app/(app)/page";
 
-beforeEach(() => mocks.identity.mockResolvedValue({ subject: "synthetic" }));
-it("signed-in login and signup delegate landing to canonical admission", async () => {
+beforeEach(() => {
+  mocks.identity.mockResolvedValue({ subject: "synthetic" });
+  mocks.landing.mockImplementation(async (returnTo: string) => returnTo);
+});
+it("signed-in login and signup land through the page, not a sync route", async () => {
   for (const page of [LoginRoute, SignupRoute])
     await expect(page({ searchParams: Promise.resolve({}) })).rejects.toThrow(
-      "redirect:/api/identity/sync?returnTo=%2Fhome"
+      "redirect:/home"
     );
 });
-it("preserves MCP and explicit device return paths through synchronization", async () => {
+it("preserves MCP and explicit device return paths through login", async () => {
   await expect(
     LoginRoute({ searchParams: Promise.resolve({ mcp_oauth: "1" }) })
-  ).rejects.toThrow(
-    "redirect:/api/identity/sync?returnTo=%2Fapi%2Fmcp%2Foauth%2Fcallback"
-  );
+  ).rejects.toThrow("redirect:/api/mcp/oauth/callback");
   await expect(
     LoginRoute({
       searchParams: Promise.resolve({ returnTo: "/device?code=fixture" }),
     })
-  ).rejects.toThrow(
-    "redirect:/api/identity/sync?returnTo=%2Fdevice%3Fcode%3Dfixture"
-  );
+  ).rejects.toThrow("redirect:/device?code=fixture");
 });
-it("root delegates landing and preserves legacy referral links", async () => {
+it("root goes home and preserves legacy referral links", async () => {
   await expect(RootPage({ searchParams: Promise.resolve({}) })).rejects.toThrow(
-    "redirect:/api/identity/sync?returnTo=%2Fhome"
+    "redirect:/home"
   );
   await expect(
     RootPage({ searchParams: Promise.resolve({ ref: "abc_123" }) })
diff --git a/tests/contracts/billing-sync-route.test.ts b/tests/contracts/billing-sync-route.test.ts
new file mode 100644
index 00000000..2971a6d7
--- /dev/null
+++ b/tests/contracts/billing-sync-route.test.ts
@@ -0,0 +1,176 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+vi.mock("server-only", () => ({}));
+const mocks = vi.hoisted(() => ({
+  session: vi.fn(),
+  fetchUsage: vi.fn(),
+  manifests: vi.fn(),
+  record: vi.fn(),
+  owner: vi.fn(),
+  runs: vi.fn(),
+}));
+vi.mock("@/lib/console/session-user", () => ({
+  requireConsoleSession: mocks.session,
+}));
+vi.mock("@/lib/console/manifest-usage", () => ({
+  fetchManifestUsage: mocks.fetchUsage,
+}));
+vi.mock("@/lib/runs/store", () => ({
+  ownedPaymentManifests: mocks.manifests,
+  recordManifestUsage: mocks.record,
+  resolveRunOwner: mocks.owner,
+  ownedRunsByIds: mocks.runs,
+}));
+vi.mock("@/lib/runs/http", () => ({
+  RUN_HEADERS: {},
+  runError: (e: Error) =>
+    Response.json(
+      {},
+      { status: e.message === "invalid_run_query" ? 400 : 503 }
+    ),
+}));
+import { POST } from "@/app/api/console/runs/billing-sync/route";
+const post = (ids: string[]) =>
+  POST(
+    new Request("https://test/api", {
+      method: "POST",
+      body: JSON.stringify({ runIds: ids }),
+    })
+  );
+beforeEach(() => {
+  vi.resetAllMocks();
+  mocks.session.mockResolvedValue({
+    externalUserId: "eu",
+    canonicalUserId: "user",
+  });
+  mocks.owner.mockResolvedValue({
+    userId: "user",
+    externalAccountId: "account",
+  });
+  mocks.manifests.mockResolvedValue([
+    {
+      manifest: {
+        manifestId: "mid",
+        accepted: true,
+        createdAt: new Date("2026-08-31"),
+        observedAt: null,
+      },
+      status: "succeeded",
+      updatedAt: new Date("2026-01-01"),
+    },
+  ]);
+  mocks.fetchUsage.mockResolvedValue([
+    { manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "123" },
+    { manifestId: "unrelated", networkFeeUsdMicros: "999", feeWei: null },
+  ]);
+  mocks.record.mockResolvedValue(["run"]);
+  mocks.runs.mockResolvedValue([]);
+});
+describe("manifest billing sync", () => {
+  it("queries one lifetime aggregate interval and persists only exact owned manifests", async () => {
+    const r = await post(["run"]);
+    expect(await r.json()).toEqual({
+      changedRunIds: ["run"],
+      changedCount: 1,
+      pending: false,
+    });
+    expect(mocks.fetchUsage).toHaveBeenCalledTimes(1);
+    expect(mocks.fetchUsage).toHaveBeenCalledWith(
+      expect.objectContaining({
+        externalUserId: "eu",
+        startDate: "2026-08-01T00:00:00.000Z",
+      })
+    );
+    expect(mocks.record).toHaveBeenCalledWith(
+      expect.anything(),
+      ["run"],
+      [{ manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "123" }],
+      expect.any(Date)
+    );
+  });
+  it("does not infer manifests for historical runs", async () => {
+    mocks.manifests.mockResolvedValue([]);
+    expect((await post(["old"])).status).toBe(200);
+    expect(mocks.fetchUsage).not.toHaveBeenCalled();
+  });
+  it("retries when a running run has not yet reached payment", async () => {
+    mocks.manifests.mockResolvedValue([]);
+    mocks.runs.mockResolvedValue([{ status: "running" }]);
+    expect((await (await post(["run"])).json()).pending).toBe(true);
+  });
+  it("keeps missing accepted usage pending without fabricating zero receipts", async () => {
+    mocks.fetchUsage.mockResolvedValue([]);
+    expect((await (await post(["run"])).json()).pending).toBe(true);
+    expect(mocks.record.mock.calls[0][2]).toEqual([]);
+  });
+  it("does not repeatedly fetch a fresh terminal snapshot", async () => {
+    mocks.manifests.mockResolvedValue([
+      {
+        manifest: { observedAt: new Date() },
+        status: "succeeded",
+        updatedAt: new Date("2026-01-01"),
+      },
+    ]);
+    await post(["run"]);
+    expect(mocks.fetchUsage).not.toHaveBeenCalled();
+  });
+  it("refreshes a recently completed run while final usage may still be arriving", async () => {
+    mocks.runs.mockResolvedValue([
+      { status: "succeeded", updatedAt: new Date() },
+    ]);
+    mocks.manifests.mockResolvedValue([
+      {
+        manifest: { observedAt: new Date() },
+        status: "succeeded",
+        updatedAt: new Date(),
+      },
+    ]);
+    expect((await (await post(["run"])).json()).pending).toBe(true);
+  });
+  it("rejects oversized requests and mismatched owners before upstream calls", async () => {
+    expect(
+      (await post(Array.from({ length: 51 }, (_, i) => String(i)))).status
+    ).toBe(400);
+    mocks.owner.mockResolvedValue({ userId: "foreign" });
+    expect((await post(["run"])).status).toBe(503);
+    expect(mocks.fetchUsage).not.toHaveBeenCalled();
+  });
+});
+
+it.each([false, true])(
+  "keeps a manifest-free active run pending beside a settled run (cached=%s)",
+  async (cached) => {
+    mocks.runs.mockResolvedValue([
+      { id: "settled", status: "succeeded", updatedAt: new Date("2026-01-01") },
+      { id: "waiting", status: "running", updatedAt: new Date() },
+    ]);
+    mocks.manifests.mockResolvedValue([
+      {
+        status: "succeeded",
+        updatedAt: new Date("2026-01-01"),
+        manifest: {
+          manifestId: "mid",
+          accepted: true,
+          networkFeeUsdMicros: "2982",
+          createdAt: new Date("2026-08-01"),
+          observedAt: cached ? new Date() : null,
+        },
+      },
+    ]);
+    expect((await (await post(["settled", "waiting"])).json()).pending).toBe(
+      true
+    );
+    if (cached) expect(mocks.fetchUsage).not.toHaveBeenCalled();
+  }
+);
+it("does not treat a recent observation without a fee as settled", async () => {
+  mocks.manifests.mockResolvedValue([
+    {
+      manifest: {
+        accepted: true,
+        networkFeeUsdMicros: null,
+        observedAt: new Date(),
+      },
+    },
+  ]);
+  expect((await (await post(["run"])).json()).pending).toBe(true);
+});
diff --git a/tests/contracts/call-detail-media.test.tsx b/tests/contracts/call-detail-media.test.tsx
new file mode 100644
index 00000000..9cf04851
--- /dev/null
+++ b/tests/contracts/call-detail-media.test.tsx
@@ -0,0 +1,491 @@
+// @vitest-environment jsdom
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import type { ReactElement } from "react";
+import { afterEach, expect, it, vi } from "vitest";
+import CallsTable from "@/components/console/CallsTable";
+import CallDetailDrawer from "@/components/console/CallDetailDrawer";
+import { TooltipProvider } from "@/components/ui/tooltip";
+import type { AccountActivityRow } from "@/lib/console/types";
+import type { RunDetail } from "@/lib/runs/types";
+
+class ResizeObserverMock {
+  observe() {}
+  unobserve() {}
+  disconnect() {}
+}
+
+globalThis.ResizeObserver = ResizeObserverMock;
+
+const row: AccountActivityRow = {
+  id: "run-media",
+  recordKind: "run",
+  gatewayRequestId: "job-media",
+  environmentId: "console",
+  timestamp: "2026-09-09T12:00:00.000Z",
+  model: "Whisper Transcribe",
+  pipeline: "audio-to-text",
+  modality: "asr",
+  status: "success",
+  kind: "batch",
+  latencyMs: 1_000,
+  durationMs: null,
+  signer: "paymthouse",
+  signerLabel: "MCP",
+  tokenId: "",
+  tokenName: "",
+  costDisplay: "$0.01",
+  providerRequestId: "provider-media",
+};
+
+function detail(assets: RunDetail["assets"]): RunDetail {
+  return {
+    id: row.id,
+    principalId: "eu_test",
+    userId: "user-test",
+    externalAccountId: "account-test",
+    gatewayRequestId: row.gatewayRequestId!,
+    providerRequestId: row.providerRequestId ?? null,
+    provider: "fal",
+    source: "mcp",
+    capability: "livepeer-example/fal-whisper-transcribe",
+    modelId: "livepeer-example/fal-whisper-transcribe",
+    endpoint: null,
+    status: "succeeded",
+    billing: { networkFeeUsdMicros: "10000", receiptCount: 1 },
+    submittedArguments: {
+      inputs: {
+        audio_url: "https://earlyaccess.livepeer.org/api/assets/asset-audio",
+        diarize: true,
+      },
+    },
+    result: {
+      value: {
+        text: "A transcript must not occupy the media stage.",
+        inference_time_ms: 1_000,
+      },
+    },
+    captureVersion: 1,
+    captureRedactedPaths: [],
+    errorCode: null,
+    errorMessage: null,
+    version: 1,
+    createdAt: "2026-09-09T12:00:00.000Z",
+    updatedAt: "2026-09-09T12:00:01.000Z",
+    startedAt: "2026-09-09T12:00:00.000Z",
+    completedAt: "2026-09-09T12:00:01.000Z",
+    email: "test@example.invalid",
+    assets,
+    events: [],
+  };
+}
+
+afterEach(cleanup);
+
+function renderWithTooltips(element: ReactElement) {
+  return render(<TooltipProvider>{element}</TooltipProvider>);
+}
+
+it("never renders JSON or text results in the user media stage", async () => {
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={detail([])}
+      variant="user"
+    />
+  );
+
+  expect(screen.getByText("Media unavailable")).toBeTruthy();
+  expect(screen.queryByText(/transcript must not occupy/i)).toBeNull();
+  expect(screen.getByText("asr").className).toContain("h-[18px]");
+  expect(screen.queryByText("Speech to text")).toBeNull();
+  expect(screen.queryByText("Modality")).toBeNull();
+  expect(screen.getByText("Render status")).toBeTruthy();
+  fireEvent.focus(screen.getByRole("button", { name: "About Render status" }));
+  const tooltip = await screen.findByRole("tooltip");
+  expect(tooltip.textContent).toBe(
+    "Amount of time it took the model to generate your request."
+  );
+  expect(
+    tooltip.closest('[data-slot="tooltip-positioner"]')?.className
+  ).toContain("z-[130]");
+});
+
+it("uses asset media type and shows its expiry countdown", async () => {
+  const expiresAt = new Date(Date.now() + 2 * 60 * 60 * 1000).toISOString();
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={detail([
+        {
+          id: "asset-audio",
+          url: "https://earlyaccess.livepeer.org/api/assets/asset-audio",
+          mediaType: "audio/mpeg",
+          providerRequestId: row.providerRequestId ?? null,
+          availableUntil: null,
+          expiresAt,
+          unavailableAt: null,
+          hiddenAt: null,
+          createdAt: "2026-09-09T12:00:01.000Z",
+        },
+      ])}
+      variant="user"
+    />
+  );
+
+  expect(document.querySelector("audio")).toBeTruthy();
+  expect(
+    screen.getByText(/Expires in 00:01:59:5\d|Expires in 00:02:00:00/)
+  ).toBeTruthy();
+  expect(screen.getByText("Audio")).toBeTruthy();
+  fireEvent.focus(screen.getByRole("button", { name: "About Audio" }));
+  expect((await screen.findByRole("tooltip")).textContent).toContain(
+    "upload or an earlier platform result"
+  );
+  expect(screen.getByRole("link", { name: "asset-audio" })).toHaveProperty(
+    "target",
+    "_blank"
+  );
+  expect(screen.getByRole("link", { name: "asset-audio" }).className).toContain(
+    "text-xs"
+  );
+  expect(screen.queryByText(/earlyaccess\.livepeer\.org/)).toBeNull();
+});
+
+it("keeps every asset in an input array as a compact URL-backed link", () => {
+  const run = detail([
+    {
+      id: "asset-first",
+      displayName: "First reference.png",
+      url: "https://earlyaccess.livepeer.org/api/assets/asset-first",
+      mediaType: "image/png",
+      providerRequestId: null,
+      availableUntil: null,
+      expiresAt: null,
+      unavailableAt: null,
+      hiddenAt: null,
+      createdAt: "2026-09-09T12:00:01.000Z",
+    },
+    {
+      id: "asset-second",
+      displayName: "Second reference.png",
+      url: "https://earlyaccess.livepeer.org/api/assets/asset-second",
+      mediaType: "image/png",
+      providerRequestId: null,
+      availableUntil: null,
+      expiresAt: null,
+      unavailableAt: null,
+      hiddenAt: null,
+      createdAt: "2026-09-09T12:00:01.000Z",
+    },
+  ]);
+  run.submittedArguments = {
+    inputs: {
+      image_urls: [
+        "https://earlyaccess.livepeer.org/api/assets/asset-first",
+        "https://earlyaccess.livepeer.org/api/assets/asset-second",
+      ],
+    },
+  };
+
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={run}
+      variant="user"
+    />
+  );
+
+  for (const name of ["First reference.png", "Second reference.png"]) {
+    const link = screen.getByRole("link", { name });
+    expect(link).toHaveProperty("target", "_blank");
+    expect(link.className).toContain("text-xs");
+    expect(link.getAttribute("href")).toContain("/api/assets/asset-");
+  }
+});
+
+it("groups each keyframe timestamp with its linked asset", async () => {
+  const run = detail([
+    {
+      id: "asset-frame",
+      displayName: "Train entering station.webp",
+      url: "https://earlyaccess.livepeer.org/api/assets/asset-frame",
+      mediaType: "image/webp",
+      providerRequestId: row.providerRequestId ?? null,
+      availableUntil: null,
+      expiresAt: null,
+      unavailableAt: null,
+      hiddenAt: null,
+      createdAt: "2026-09-09T12:00:01.000Z",
+    },
+  ]);
+  run.submittedArguments = {
+    inputs: {
+      keyframes: [
+        {
+          timestamp_seconds: 3.5,
+          image_url: "https://earlyaccess.livepeer.org/api/assets/asset-frame",
+        },
+      ],
+      loop: false,
+    },
+  };
+
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={run}
+      variant="user"
+    />
+  );
+
+  expect(screen.getByText("Keyframe 1")).toBeTruthy();
+  const timestamp = screen.getByText("00:03");
+  const assetLink = screen.getByRole("link", {
+    name: "Train entering station.webp",
+  });
+  expect(assetLink).toHaveProperty("target", "_blank");
+  expect(assetLink).toHaveProperty("title", "Train entering station.webp");
+  expect(assetLink.className).toContain("text-xs");
+  expect(assetLink.querySelector("span")?.className).toContain("truncate");
+  expect(timestamp.parentElement).toBe(assetLink.parentElement);
+  expect(
+    timestamp.compareDocumentPosition(assetLink) &
+      Node.DOCUMENT_POSITION_FOLLOWING
+  ).toBeTruthy();
+  expect(screen.queryByText("Timestamp Seconds")).toBeNull();
+  expect(screen.getAllByText("false")[0]?.getAttribute("data-slot")).toBe(
+    "badge"
+  );
+  fireEvent.focus(screen.getByRole("button", { name: "About Loop" }));
+  const loopTooltip = await screen.findByRole("tooltip");
+  expect(loopTooltip.textContent).toContain(
+    "Makes the video repeat continuously. When set to true, the final frame transitions back to the first"
+  );
+  expect(loopTooltip.className).toContain("p-0");
+  const loopTooltipBody = loopTooltip.querySelector(
+    '[data-slot="tooltip-body"]'
+  );
+  expect(loopTooltipBody?.className).toContain("items-start");
+  expect(loopTooltipBody?.className).toContain("pb-4");
+  const loopOptions = loopTooltip.querySelector('[aria-label="Options"]');
+  expect(loopOptions).toBeTruthy();
+  expect(loopOptions?.className).toContain("self-start");
+  expect(loopOptions?.className).toContain("flex-col");
+  expect(loopOptions?.className).toContain("w-[7.5rem]");
+  expect(screen.getAllByText("true").at(-1)?.getAttribute("data-slot")).toBe(
+    "badge"
+  );
+  expect(screen.getAllByText("false").at(-1)?.getAttribute("data-slot")).toBe(
+    "badge"
+  );
+});
+
+it("shows Flux Schnell image-size alternatives", async () => {
+  const run = detail([]);
+  run.submittedArguments = {
+    inputs: { image_size: "landscape_16_9" },
+  };
+  run.inputSchema = {
+    endpointId: "fal-ai/flux/schnell",
+    schemaSha256: "fixture",
+    fields: [
+      {
+        path: "image_size",
+        title: "Image Size",
+        description: "The size of the generated image.",
+        required: false,
+        types: ["object", "string"],
+        options: [
+          "square_hd",
+          "square",
+          "portrait_4_3",
+          "portrait_16_9",
+          "landscape_4_3",
+          "landscape_16_9",
+        ],
+        defaultValue: "landscape_4_3",
+      },
+      {
+        path: "image_size.width",
+        title: "Width",
+        description: "Custom output width.",
+        required: false,
+        types: ["integer"],
+        options: [],
+      },
+      {
+        path: "image_size.height",
+        title: "Height",
+        description: "Custom output height.",
+        required: false,
+        types: ["integer"],
+        options: [],
+      },
+    ],
+  };
+
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={{ ...row, model: "Flux Schnell", modality: "t2i" }}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={run}
+      variant="user"
+    />
+  );
+
+  fireEvent.focus(screen.getByRole("button", { name: "About Image Size" }));
+  const tooltip = await screen.findByRole("tooltip");
+  expect(tooltip.textContent).toContain("portrait_16_9");
+  expect(tooltip.textContent).toContain("landscape_16_9");
+  expect(
+    Array.from(tooltip.querySelectorAll('[data-slot="badge"]')).map(
+      (badge) => badge.textContent
+    )
+  ).toEqual([
+    "square_hd",
+    "square",
+    "portrait_4_3",
+    "portrait_16_9",
+    "landscape_4_3",
+    "landscape_16_9",
+  ]);
+  expect((await screen.findByRole("tooltip")).textContent).toContain(
+    "custom width and height"
+  );
+});
+
+it("exposes exact table cost by keyboard without activating or nesting the row button", async () => {
+  const select = vi.fn();
+  renderWithTooltips(
+    <CallsTable
+      rows={[{ ...row, costExact: "$0.01000025" }]}
+      onSelectRow={select}
+    />
+  );
+  const cost = screen.getByRole("button", { name: "Exact cost $0.01000025" });
+  expect(cost.parentElement?.closest("button")).toBeNull();
+  fireEvent.focus(cost);
+  expect((await screen.findByRole("tooltip")).textContent).toBe("$0.01000025");
+  fireEvent.click(cost);
+  expect(select).not.toHaveBeenCalled();
+  fireEvent.click(screen.getByRole("button", { name: `Inspect ${row.id}` }));
+  expect(select).toHaveBeenCalledOnce();
+});
+it("retains unavailable media records and cost", () => {
+  const d = detail([
+    {
+      id: "asset-audio",
+      url: "https://preview.example/api/assets/asset-audio",
+      mediaType: "audio/mpeg",
+      unavailableAt: "2026-09-10T00:00:00Z",
+      hiddenAt: null,
+      createdAt: "2026-09-09T00:00:00Z",
+      providerRequestId: null,
+      role: "input",
+    },
+  ]);
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={d}
+      variant="user"
+    />
+  );
+  expect(screen.getByText("Media unavailable")).toBeTruthy();
+  expect(document.querySelector("audio")).toBeNull();
+  expect(screen.getByText("Cost")).toBeTruthy();
+});
+it("labels mixed lineage and lets keyboard users inspect admin exact costs", async () => {
+  const d = detail([
+    {
+      id: "input",
+      url: "https://preview.example/api/assets/input",
+      mediaType: "image",
+      role: "input",
+      unavailableAt: null,
+      hiddenAt: null,
+      createdAt: row.timestamp,
+      providerRequestId: null,
+    },
+    {
+      id: "output",
+      url: "https://preview.example/api/assets/output",
+      mediaType: "image",
+      role: "output",
+      unavailableAt: null,
+      hiddenAt: null,
+      createdAt: row.timestamp,
+      providerRequestId: null,
+    },
+  ]);
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={{ ...row, costExact: "$0.01000025" }}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={d}
+      variant="admin"
+    />
+  );
+  expect(screen.getByText("Input 1")).toBeTruthy();
+  expect(screen.getByText("Output 1")).toBeTruthy();
+  const cost = screen.getByRole("button", { name: "$0.01" });
+  fireEvent.focus(cost);
+  expect((await screen.findByRole("tooltip")).textContent).toBe("$0.01000025");
+});
+
+it("prefers a renderable 3D preview over the model download", () => {
+  const d = detail([
+    {
+      id: "model",
+      url: "https://preview.example/api/assets/model",
+      mediaType: "model",
+      role: "output",
+      createdAt: row.timestamp,
+      providerRequestId: null,
+      unavailableAt: null,
+      hiddenAt: null,
+    },
+    {
+      id: "preview",
+      url: "https://preview.example/api/assets/preview",
+      mediaType: "image",
+      role: "output",
+      createdAt: row.timestamp,
+      providerRequestId: null,
+      unavailableAt: null,
+      hiddenAt: null,
+    },
+  ]);
+  renderWithTooltips(
+    <CallDetailDrawer
+      row={row}
+      rows={[row]}
+      open
+      onClose={() => {}}
+      detail={d}
+      variant="user"
+    />
+  );
+  expect(document.querySelector("img")?.getAttribute("src")).toBe(
+    "https://preview.example/api/assets/preview"
+  );
+});
diff --git a/tests/contracts/dev-mock-billing.test.ts b/tests/contracts/dev-mock-billing.test.ts
new file mode 100644
index 00000000..a7b22829
--- /dev/null
+++ b/tests/contracts/dev-mock-billing.test.ts
@@ -0,0 +1,86 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { expect, it } from "vitest";
+import { devMockResponse } from "@/lib/console/dev-mock";
+import type { RunSummary, RunDetail } from "@/lib/runs/types";
+it("shares mock costs between summaries, details and events without billing network access", async () => {
+  const response = devMockResponse(
+    "/api/console/runs",
+    new URLSearchParams(),
+    "http://localhost:3000"
+  );
+  const { items } = (await response!.json()) as { items: RunSummary[] };
+  for (const run of items) {
+    const detail = (await devMockResponse(
+      `/api/console/runs/${run.id}`,
+      new URLSearchParams(),
+      "http://localhost:3000"
+    )!.json()) as RunDetail;
+    expect(detail.billing).toEqual(run.billing);
+    if (run.status === "succeeded")
+      expect(
+        detail.events.find((e) => e.metadata.kind === "billing_usage")?.metadata
+          .networkFeeUsdMicros
+      ).toBe(run.billing?.networkFeeUsdMicros);
+  }
+  expect(
+    await devMockResponse(
+      "/api/console/runs/billing-sync",
+      new URLSearchParams(),
+      "http://localhost:3000"
+    )!.json()
+  ).toMatchObject({ pending: false, changedCount: 0 });
+});
+
+it("serves every mock asset locally and never falls through for unknown IDs", async () => {
+  const { items } = (await devMockResponse(
+    "/api/console/runs",
+    new URLSearchParams(),
+    "http://localhost:3000"
+  )!.json()) as { items: RunSummary[] };
+  for (const run of items) {
+    const detail = (await devMockResponse(
+      `/api/console/runs/${run.id}`,
+      new URLSearchParams(),
+      "http://localhost:3000"
+    )!.json()) as RunDetail;
+    for (const asset of detail.assets) {
+      const reply = devMockResponse(
+        new URL(asset.url).pathname,
+        new URLSearchParams(),
+        "http://localhost:3000"
+      )!;
+      expect(reply.status).toBe(307);
+      expect(new URL(reply.headers.get("location")!).origin).toBe(
+        "http://localhost:3000"
+      );
+      expect(
+        existsSync(
+          join(
+            process.cwd(),
+            "public",
+            new URL(reply.headers.get("location")!).pathname
+          )
+        )
+      ).toBe(true);
+    }
+  }
+  expect(
+    devMockResponse(
+      "/api/assets/unknown",
+      new URLSearchParams(),
+      "http://localhost:3000"
+    )!.status
+  ).toBe(404);
+});
+
+it("bundles valid audio and model fixture containers", () => {
+  expect(
+    readFileSync("public/fixtures/history/sample-tone.wav")
+      .subarray(0, 4)
+      .toString()
+  ).toBe("RIFF");
+  const glb = readFileSync("public/fixtures/history/octahedron.glb");
+  expect(glb.subarray(0, 4).toString()).toBe("glTF");
+  expect(glb.readUInt32LE(8)).toBe(glb.length);
+});
diff --git a/tests/contracts/end-user-token-cache.test.ts b/tests/contracts/end-user-token-cache.test.ts
new file mode 100644
index 00000000..83f7f5b1
--- /dev/null
+++ b/tests/contracts/end-user-token-cache.test.ts
@@ -0,0 +1,80 @@
+import { afterEach, expect, it } from "vitest";
+import {
+  cachedEndUserAccessToken,
+  endUserTokenCacheKey,
+  resetEndUserTokenCache,
+  type CachedEndUserToken,
+} from "@/lib/console/end-user-token-cache";
+
+function token(access_token: string, expires_in = 300): CachedEndUserToken {
+  return {
+    access_token,
+    refresh_token: "refresh",
+    token_type: "Bearer",
+    expires_in,
+    scope: "sign:job",
+  };
+}
+
+afterEach(() => {
+  resetEndUserTokenCache();
+});
+
+it("reuses a live token and single-flights concurrent mints", async () => {
+  let mints = 0;
+  let release!: (value: CachedEndUserToken) => void;
+  const first = new Promise<CachedEndUserToken>((resolve) => {
+    release = resolve;
+  });
+  const mint = () => {
+    mints += 1;
+    return mints === 1 ? first : Promise.resolve(token("late"));
+  };
+  const key = endUserTokenCacheKey("app", "eu");
+  const a = cachedEndUserAccessToken(key, mint);
+  const b = cachedEndUserAccessToken(key, mint);
+  release(token("minted"));
+  expect(await a).toMatchObject({ access_token: "minted" });
+  expect(await b).toMatchObject({ access_token: "minted" });
+  expect(mints).toBe(1);
+  expect(
+    (await cachedEndUserAccessToken(key, mint, Date.now() + 60_000))
+      .access_token
+  ).toBe("minted");
+  expect(mints).toBe(1);
+});
+
+it("force mint replaces a live token", async () => {
+  const key = endUserTokenCacheKey("app", "eu");
+  let mints = 0;
+  const mint = async () => token(`t${++mints}`);
+  expect(
+    (await cachedEndUserAccessToken(key, mint, 1_000_000)).access_token
+  ).toBe("t1");
+  expect(
+    (await cachedEndUserAccessToken(key, mint, 1_000_000, { force: true }))
+      .access_token
+  ).toBe("t2");
+  expect(mints).toBe(2);
+});
+
+it("remints after expiry skew and keeps a still-valid token if refresh fails", async () => {
+  const key = endUserTokenCacheKey("app", "eu");
+  let mints = 0;
+  const mint = async () => {
+    mints += 1;
+    if (mints >= 2) throw new Error("mint_failed");
+    return token(`t${mints}`, 40);
+  };
+  const now = 1_000_000;
+  expect((await cachedEndUserAccessToken(key, mint, now)).access_token).toBe(
+    "t1"
+  );
+  expect(
+    (await cachedEndUserAccessToken(key, mint, now + 15_000)).access_token
+  ).toBe("t1");
+  expect(mints).toBe(2);
+  await expect(
+    cachedEndUserAccessToken(key, mint, now + 41_000)
+  ).rejects.toThrow("mint_failed");
+});
diff --git a/tests/contracts/gateway-payment-manifest.test.ts b/tests/contracts/gateway-payment-manifest.test.ts
new file mode 100644
index 00000000..574a3901
--- /dev/null
+++ b/tests/contracts/gateway-payment-manifest.test.ts
@@ -0,0 +1,158 @@
+import { createServer } from "node:http";
+import { once } from "node:events";
+import { createRequire } from "node:module";
+import { expect, it } from "vitest";
+import * as esm from "@pymthouse/gateway-web";
+const cjs = createRequire(import.meta.url)(
+  "@pymthouse/gateway-web"
+) as typeof esm;
+
+async function fixture(mode: "single-shot" | "persistent", failFirst = false) {
+  const order: string[] = [];
+  let payments = 0;
+  let origin = "";
+  const server = createServer(async (req, res) => {
+    const parts: Buffer[] = [];
+    for await (const part of req) parts.push(Buffer.from(part));
+    const body = parts.length
+      ? JSON.parse(Buffer.concat(parts).toString())
+      : {};
+    const path = new URL(req.url!, origin).pathname.replace("/app/", "/");
+    const json = (status: number, value: unknown) => {
+      res.writeHead(status, { "content-type": "application/json" });
+      res.end(JSON.stringify(value));
+    };
+    if (path === "/discover-orchestrators")
+      return json(
+        200,
+        (failFirst ? ["first", "second"] : ["first"]).map((id) => ({
+          address: origin + "/orch-" + id,
+          runners: [
+            {
+              app: "test-app",
+              url: origin + "/" + id + "/",
+              mode,
+              runner_id: id,
+              price_info: { price: 1, currency: "wei", unit: "fixed" },
+            },
+          ],
+        }))
+      );
+    if (path === "/sign-orchestrator-info")
+      return json(200, { address: "0xabc", signature: "0xsig" });
+    if (path === "/generate-live-payment") {
+      payments++;
+      order.push("paid:" + body.ManifestID);
+      return json(200, { payment: "PAY", segCreds: "SEG", state: {} });
+    }
+    if (path === "/first/" || path === "/second/") {
+      const id = path.slice(1, -1);
+      if (!req.headers["livepeer-payment"])
+        return json(402, {
+          payment_params: "p",
+          manifest_id: "manifest-" + id,
+          payment_url: origin + "/pay",
+        });
+      order.push("provider:" + id);
+      if (failFirst && id === "first")
+        return json(503, { error: "provider_failed" });
+      return json(
+        200,
+        mode === "persistent"
+          ? {
+              session_id: "provider-session",
+              app_url: origin + "/session-app",
+              control_url: origin + "/control",
+            }
+          : { text: "ok", request_id: "provider" }
+      );
+    }
+    if (path === "/session-app/hello") return json(200, { text: "ok" });
+    if (path === "/control/stop") return json(200, {});
+    json(404, {});
+  });
+  server.listen(0, "127.0.0.1");
+  await once(server, "listening");
+  origin = `http://127.0.0.1:${(server.address() as { port: number }).port}`;
+  return {
+    order,
+    payments: () => payments,
+    origin,
+    close: async () => {
+      server.closeAllConnections();
+      await new Promise<void>((resolve) => server.close(() => resolve()));
+    },
+  };
+}
+for (const [name, sdk] of [
+  ["ESM", esm],
+  ["CJS", cjs],
+] as const) {
+  it.each(["single-shot", "persistent"] as const)(
+    `${name} records the payment manifest before charging and before provider completion (%s)`,
+    async (mode) => {
+      const f = await fixture(mode);
+      try {
+        await sdk
+          .createGateway({ signerUrl: f.origin, timeoutMs: 5000 })
+          .runInference({
+            capability: "test-app",
+            ...(mode === "persistent" ? { endpoint: "/hello" } : {}),
+            onPayment: async ({ manifestId, phase }) => {
+              f.order.push(phase + ":" + manifestId);
+            },
+          });
+        expect(f.order).toEqual([
+          "prepared:manifest-first",
+          "paid:manifest-first",
+          "accepted:manifest-first",
+          "provider:first",
+        ]);
+      } finally {
+        await f.close();
+      }
+    }
+  );
+  it(`${name} preserves manifests from paid failed attempts and failover`, async () => {
+    const f = await fixture("single-shot", true);
+    try {
+      await sdk
+        .createGateway({ signerUrl: f.origin, timeoutMs: 5000 })
+        .runInference({
+          capability: "test-app",
+          onPayment: async ({ manifestId, phase }) => {
+            f.order.push(phase + ":" + manifestId);
+          },
+        });
+      expect(f.order.filter((s) => s.startsWith("accepted:"))).toEqual([
+        "accepted:manifest-first",
+        "accepted:manifest-second",
+      ]);
+      expect(f.payments()).toBe(2);
+    } finally {
+      await f.close();
+    }
+  });
+  it.each(["prepared", "accepted"])(
+    `${name} stops without paid failover if persistence fails at %s`,
+    async (phase) => {
+      const f = await fixture("single-shot", true);
+      try {
+        await expect(
+          sdk
+            .createGateway({ signerUrl: f.origin, timeoutMs: 5000 })
+            .runInference({
+              capability: "test-app",
+              onPayment: async (p) => {
+                if (p.phase === phase) throw new Error("db unavailable");
+              },
+            })
+        ).rejects.toThrow("payment_manifest_persistence_failed");
+        expect(f.payments()).toBe(phase === "prepared" ? 0 : 1);
+        expect(f.order.some((s) => s.startsWith("provider:"))).toBe(false);
+      } finally {
+        await f.close();
+      }
+    }
+  );
+}
diff --git a/tests/contracts/home-history-surface.test.tsx b/tests/contracts/home-history-surface.test.tsx
index 2733e4a7..07363df7 100644
--- a/tests/contracts/home-history-surface.test.tsx
+++ b/tests/contracts/home-history-surface.test.tsx
@@ -2,6 +2,7 @@
 import { cleanup, render, screen, waitFor } from "@testing-library/react";
 import { afterEach, beforeEach, expect, it, vi } from "vitest";
 import CallsSection from "@/components/console/CallsSection";
+import { TooltipProvider } from "@/components/ui/tooltip";
 import type { RunSummary } from "@/lib/runs/types";
 
 const navigation = vi.hoisted(() => ({ search: "" }));
@@ -22,6 +23,13 @@ vi.mock("@/components/console/CallDetailDrawer", () => ({
 }));
 const records: RunSummary[] = [];
 const fetcher = vi.fn();
+function renderCallsSection(query = "") {
+  return render(
+    <TooltipProvider>
+      <CallsSection query={query} onQueryChange={vi.fn()} />
+    </TooltipProvider>
+  );
+}
 beforeEach(() => {
   navigation.search = "";
   records.length = 0;
@@ -53,7 +61,7 @@ afterEach(() => {
 });
 
 it("renders exactly one History and one empty state, without the billing feed", async () => {
-  render(<CallsSection query="" onQueryChange={vi.fn()} />);
+  renderCallsSection();
   await screen.findByText("No history yet.");
   expect(screen.getAllByRole("heading", { name: "History" })).toHaveLength(1);
   expect(
@@ -88,6 +96,7 @@ it("shows Postgres rows even when billing is unavailable", async () => {
     startedAt: "2026-09-01T12:00:00Z",
     completedAt: "2026-09-01T12:00:01Z",
     email: null,
+    billing: null,
   });
   navigation.search = "request=saved-run";
   fetcher.mockImplementation(async (input: string) => {
@@ -113,17 +122,82 @@ it("shows Postgres rows even when billing is unavailable", async () => {
       ? Response.json({ items: records, nextCursor: null })
       : Response.json({ error: "billing unavailable" }, { status: 503 });
   });
-  render(<CallsSection query="" onQueryChange={vi.fn()} />);
+  renderCallsSection();
   await screen.findByRole("button", { name: "Inspect saved-run" });
   expect(screen.queryByText("No history yet.")).toBeNull();
   expect(screen.queryByRole("alert")).toBeNull();
   expect(screen.queryByText("Usage-only history")).toBeNull();
   await waitFor(() =>
-    expect(screen.getByTestId("detail-cost").textContent).toBe("$0.0025")
+    expect(screen.getByTestId("detail-cost").textContent).toBe("—")
   );
 });
 
-it("joins a correlated ticket fee onto the saved run, without adding a billing row", async () => {
+it("does not infer a cost from an unmatched orchestrator ticket", async () => {
+  const run = {
+    id: "28d04c8a-7edd-487e-a0c4-5f95ed637a4b",
+    principalId: "external",
+    userId: "user",
+    externalAccountId: "account",
+    gatewayRequestId: "job_fe3e40004a49442c",
+    providerRequestId: null,
+    provider: null,
+    source: "mcp",
+    capability: "livepeer-example/fal-ideogram-v4",
+    modelId: "livepeer-example/fal-ideogram-v4",
+    endpoint: null,
+    status: "succeeded" as const,
+    captureVersion: 1,
+    errorCode: null,
+    errorMessage: null,
+    version: 2,
+    createdAt: "2026-09-09T21:42:18.000Z",
+    updatedAt: "2026-09-09T21:42:19.000Z",
+    startedAt: "2026-09-09T21:42:18.000Z",
+    completedAt: "2026-09-09T21:42:19.000Z",
+    email: null,
+    billing: null,
+  };
+  records.push(run);
+  navigation.search = "request=28d04c8a-7edd-487e-a0c4-5f95ed637a4b";
+  fetcher.mockImplementation(async (input: string) => {
+    if (input === "/api/console/runs/28d04c8a-7edd-487e-a0c4-5f95ed637a4b") {
+      return Response.json({
+        ...run,
+        submittedArguments: null,
+        result: null,
+        captureRedactedPaths: [],
+        assets: [],
+        events: [],
+      });
+    }
+    if (input === "/api/console/runs/billing-sync")
+      return Response.json({ changedRunIds: [], changedCount: 0 });
+    if (String(input).startsWith("/api/console/runs"))
+      return Response.json({ items: records, nextCursor: null });
+    return Response.json({
+      items: [
+        {
+          eventId: "c9a1fae7",
+          gatewayRequestId: "c9a1fae7",
+          time: "2026-09-09T21:42:19.000Z",
+          clientId: "app_test",
+          externalUserId: "eu_test",
+          pipeline: "text-to-image",
+          modelId: "livepeer-example/fal-ideogram-v4",
+          networkFeeUsdMicros: "9984.675492933755",
+          feeWei: "4048746912830",
+        },
+      ],
+      nextCursor: null,
+      openMeterConfigured: true,
+    });
+  });
+  render(<CallsSection query="" onQueryChange={vi.fn()} />);
+  await waitFor(() => expect(fetcher).toHaveBeenCalled());
+  expect(screen.getByTestId("detail-cost").textContent).toBe("—");
+});
+
+it("reloads the Neon cost after an exact billing sync", async () => {
   records.push({
     id: "saved-run",
     principalId: "external",
@@ -146,50 +220,219 @@ it("joins a correlated ticket fee onto the saved run, without adding a billing r
     startedAt: "2026-09-01T12:00:00Z",
     completedAt: "2026-09-01T12:00:01Z",
     email: null,
+    billing: null,
   });
+  let synced = false;
   fetcher.mockImplementation(async (input: string) => {
+    if (input === "/api/console/runs/billing-sync") {
+      synced = true;
+      records[0]!.billing = {
+        networkFeeUsdMicros: "1000",
+        receiptCount: 1,
+      };
+      return Response.json({ changedRunIds: ["saved-run"], changedCount: 1 });
+    }
     if (input.startsWith("/api/console/runs"))
       return Response.json({ items: records, nextCursor: null });
-    return Response.json({
-      items: [
-        {
-          eventId: "evt-saved",
-          gatewayRequestId: "job_saved",
-          time: "2026-09-01T12:00:00Z",
-          clientId: "app_test",
-          externalUserId: "eu_test",
-          pipeline: "text-generation",
-          modelId: "saved-model",
-          networkFeeUsdMicros: "1000",
-        },
-        {
-          eventId: "legacy-event",
-          gatewayRequestId: "legacy-job",
-          time: "2025-01-01T00:00:00Z",
-          clientId: "app_test",
-          externalUserId: "eu_test",
-          pipeline: "text-generation",
-          modelId: "legacy-only-model",
-          networkFeeUsdMicros: "100",
-        },
-      ],
-      nextCursor: null,
-      openMeterConfigured: true,
-    });
+    return Response.json({ error: "not found" }, { status: 404 });
   });
-  render(<CallsSection query="" onQueryChange={vi.fn()} />);
+  renderCallsSection();
   await screen.findByRole("button", { name: "Inspect saved-run" });
-  expect(screen.getByText("$0.0010")).toBeTruthy();
+  await waitFor(() => expect(screen.getByText("$0.0010")).toBeTruthy());
+  expect(synced).toBe(true);
+  expect(screen.queryByText("legacy-only-model")).toBeNull();
+});
+
+it("includes a deep-linked run in billing-sync even when it is off the first page", async () => {
+  records.push({
+    id: "page-run",
+    principalId: "external",
+    userId: "user",
+    externalAccountId: "account",
+    gatewayRequestId: "job_page",
+    providerRequestId: null,
+    provider: null,
+    source: "mcp",
+    capability: "text-generation",
+    modelId: "page-model",
+    endpoint: null,
+    status: "succeeded",
+    captureVersion: 1,
+    errorCode: null,
+    errorMessage: null,
+    version: 2,
+    createdAt: "2026-09-01T12:00:00Z",
+    updatedAt: "2026-09-01T12:00:01Z",
+    startedAt: "2026-09-01T12:00:00Z",
+    completedAt: "2026-09-01T12:00:01Z",
+    email: null,
+    billing: null,
+  });
+  navigation.search = "request=deep-run";
+  fetcher.mockImplementation(async (input: string) => {
+    if (input === "/api/console/runs/billing-sync")
+      return Response.json({ changedRunIds: [], changedCount: 0 });
+    if (input === "/api/console/runs/deep-run") {
+      return Response.json({
+        id: "deep-run",
+        principalId: "external",
+        userId: "user",
+        externalAccountId: "account",
+        gatewayRequestId: "job_deep",
+        providerRequestId: null,
+        provider: null,
+        source: "mcp",
+        capability: "text-generation",
+        modelId: "deep-model",
+        endpoint: null,
+        status: "succeeded",
+        captureVersion: 1,
+        errorCode: null,
+        errorMessage: null,
+        version: 2,
+        createdAt: "2026-08-01T12:00:00Z",
+        updatedAt: "2026-08-01T12:00:01Z",
+        startedAt: "2026-08-01T12:00:00Z",
+        completedAt: "2026-08-01T12:00:01Z",
+        email: null,
+        billing: null,
+        submittedArguments: null,
+        result: null,
+        captureRedactedPaths: [],
+        assets: [],
+        events: [],
+      });
+    }
+    if (String(input).startsWith("/api/console/runs"))
+      return Response.json({ items: records, nextCursor: null });
+    return Response.json({ error: "not found" }, { status: 404 });
+  });
+  renderCallsSection();
+  await waitFor(() =>
+    expect(
+      fetcher.mock.calls.some(([url, init]) => {
+        if (url !== "/api/console/runs/billing-sync") return false;
+        const body = JSON.parse(
+          String((init as RequestInit | undefined)?.body)
+        );
+        return (
+          Array.isArray(body.runIds) &&
+          body.runIds[0] === "deep-run" &&
+          body.runIds.includes("page-run")
+        );
+      })
+    ).toBe(true)
+  );
+});
+
+it("does not keep polling billing-sync when usage is still pending", async () => {
+  records.push({
+    id: "saved-run",
+    principalId: "external",
+    userId: "user",
+    externalAccountId: "account",
+    gatewayRequestId: "job_saved",
+    providerRequestId: null,
+    provider: null,
+    source: "mcp",
+    capability: "text-generation",
+    modelId: "saved-model",
+    endpoint: null,
+    status: "succeeded",
+    captureVersion: 1,
+    errorCode: null,
+    errorMessage: null,
+    version: 2,
+    createdAt: "2026-09-01T12:00:00Z",
+    updatedAt: "2026-09-01T12:00:01Z",
+    startedAt: "2026-09-01T12:00:00Z",
+    completedAt: "2026-09-01T12:00:01Z",
+    email: null,
+    billing: null,
+  });
+  fetcher.mockImplementation(async (input: string) => {
+    if (input === "/api/console/runs/billing-sync")
+      return Response.json({
+        changedRunIds: [],
+        changedCount: 0,
+        pending: true,
+      });
+    if (String(input).startsWith("/api/console/runs"))
+      return Response.json({ items: records, nextCursor: null });
+    return Response.json({ error: "not found" }, { status: 404 });
+  });
+  renderCallsSection();
+  await waitFor(() =>
+    expect(
+      fetcher.mock.calls.filter(
+        ([url]) => url === "/api/console/runs/billing-sync"
+      )
+    ).toHaveLength(1)
+  );
+  await new Promise((resolve) => setTimeout(resolve, 25));
   expect(
-    fetcher.mock.calls.some(([url]) =>
-      String(url).includes("includeCorrelated=1")
+    fetcher.mock.calls.filter(
+      ([url]) => url === "/api/console/runs/billing-sync"
     )
-  ).toBe(true);
-  expect(screen.queryByText("legacy-only-model")).toBeNull();
+  ).toHaveLength(1);
+});
+
+it("does not restart billing sync when run detail arrives", async () => {
+  records.push({
+    id: "saved-run",
+    principalId: "external",
+    userId: "user",
+    externalAccountId: "account",
+    gatewayRequestId: "job_saved",
+    providerRequestId: null,
+    provider: null,
+    source: "mcp",
+    capability: "text-generation",
+    modelId: "saved-model",
+    endpoint: null,
+    status: "succeeded",
+    captureVersion: 1,
+    errorCode: null,
+    errorMessage: null,
+    version: 2,
+    createdAt: "2026-09-01T12:00:00Z",
+    updatedAt: "2026-09-01T12:00:01Z",
+    startedAt: "2026-09-01T12:00:00Z",
+    completedAt: "2026-09-01T12:00:01Z",
+    email: null,
+    billing: null,
+  });
+  navigation.search = "request=saved-run";
+  fetcher.mockImplementation(async (input: string) => {
+    if (input === "/api/console/runs/billing-sync")
+      return Response.json({ changedRunIds: [], changedCount: 0 });
+    if (input === "/api/console/runs/saved-run") {
+      return Response.json({
+        ...records[0],
+        submittedArguments: null,
+        result: null,
+        captureRedactedPaths: [],
+        assets: [],
+        events: [],
+      });
+    }
+    if (String(input).startsWith("/api/console/runs"))
+      return Response.json({ items: records, nextCursor: null });
+    return Response.json({ error: "not found" }, { status: 404 });
+  });
+  renderCallsSection();
+  await waitFor(() => expect(screen.getByTestId("detail-cost")).toBeTruthy());
+  await waitFor(() =>
+    expect(
+      fetcher.mock.calls.filter(
+        ([url]) => url === "/api/console/runs/billing-sync"
+      )
+    ).toHaveLength(1)
+  );
 });
 
 it("searches the same Postgres history rather than a separate loaded billing list", async () => {
-  render(<CallsSection query="flux" onQueryChange={vi.fn()} />);
+  renderCallsSection("flux");
   await screen.findByText("No history matches this search.");
   await waitFor(() =>
     expect(fetcher).toHaveBeenCalledWith(
diff --git a/tests/contracts/job-billing.test.ts b/tests/contracts/job-billing.test.ts
new file mode 100644
index 00000000..b57575c1
--- /dev/null
+++ b/tests/contracts/job-billing.test.ts
@@ -0,0 +1,136 @@
+import { beforeEach, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+  fetchRange: vi.fn(),
+  manifests: vi.fn(),
+  record: vi.fn(),
+}));
+vi.mock("server-only", () => ({}));
+vi.mock("@/lib/console/manifest-usage", () => ({
+  fetchManifestUsage: mocks.fetchRange,
+}));
+vi.mock("@/lib/runs/store", () => ({
+  ownedPaymentManifests: mocks.manifests,
+  recordManifestUsage: mocks.record,
+  ownedRunsByIds: vi.fn(),
+}));
+import { refreshOwnedRunBillingByJob } from "@/lib/runs/manifest-billing";
+
+const owner = {
+  principalId: "eu",
+  userId: "user",
+  externalAccountId: "account",
+};
+const input = {
+  owner,
+  runId: "run_test",
+  externalUserId: "eu",
+  now: new Date("2026-09-11T12:00:00.000Z"),
+  retryDelayMs: 0,
+};
+
+beforeEach(() => {
+  vi.resetAllMocks();
+  mocks.manifests.mockResolvedValue([
+    {
+      manifest: {
+        manifestId: "mid",
+        accepted: true,
+        createdAt: new Date("2026-09-11T11:55:00.000Z"),
+        networkFeeUsdMicros: null,
+      },
+    },
+  ]);
+  mocks.fetchRange.mockResolvedValue([
+    { manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "123" },
+    { manifestId: "other", networkFeeUsdMicros: "119005", feeWei: null },
+  ]);
+  mocks.record.mockResolvedValue(["run_test"]);
+});
+
+it("persists the exact owned manifest and ignores other jobs in the window", async () => {
+  expect(await refreshOwnedRunBillingByJob(input)).toEqual({
+    changedRunIds: ["run_test"],
+    pending: false,
+  });
+  expect(mocks.fetchRange).toHaveBeenCalledTimes(1);
+  expect(mocks.fetchRange).toHaveBeenCalledWith({
+    externalUserId: "eu",
+    startDate: "2026-09-11T11:54:00.000Z",
+    endDate: "2026-09-11T12:00:00.000Z",
+  });
+  expect(mocks.record).toHaveBeenCalledWith(
+    owner,
+    ["run_test"],
+    [{ manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "123" }],
+    input.now
+  );
+});
+
+it("does not call PymtHouse when the run has no accepted manifest", async () => {
+  mocks.manifests.mockResolvedValue([]);
+  expect(await refreshOwnedRunBillingByJob(input)).toEqual({
+    changedRunIds: [],
+    pending: false,
+  });
+  expect(mocks.fetchRange).not.toHaveBeenCalled();
+});
+
+it("stamps each accepted manifest from the same run without using a job total", async () => {
+  mocks.manifests.mockResolvedValue([
+    {
+      manifest: {
+        manifestId: "a",
+        accepted: true,
+        createdAt: new Date("2026-09-11T11:55:00.000Z"),
+      },
+    },
+    {
+      manifest: {
+        manifestId: "b",
+        accepted: true,
+        createdAt: new Date("2026-09-11T11:55:01.000Z"),
+      },
+    },
+  ]);
+  mocks.fetchRange.mockResolvedValue([
+    { manifestId: "a", networkFeeUsdMicros: "1000", feeWei: null },
+    { manifestId: "b", networkFeeUsdMicros: "2000", feeWei: null },
+  ]);
+  expect(await refreshOwnedRunBillingByJob(input)).toEqual({
+    changedRunIds: ["run_test"],
+    pending: false,
+  });
+  expect(mocks.record).toHaveBeenCalledWith(
+    owner,
+    ["run_test"],
+    [
+      { manifestId: "a", networkFeeUsdMicros: "1000", feeWei: null },
+      { manifestId: "b", networkFeeUsdMicros: "2000", feeWei: null },
+    ],
+    input.now
+  );
+});
+
+it("retries until the exact manifest appears instead of requiring History", async () => {
+  mocks.fetchRange
+    .mockResolvedValueOnce([])
+    .mockResolvedValueOnce([
+      { manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "123" },
+    ]);
+  expect(await refreshOwnedRunBillingByJob(input)).toEqual({
+    changedRunIds: ["run_test"],
+    pending: false,
+  });
+  expect(mocks.fetchRange).toHaveBeenCalledTimes(2);
+});
+
+it("stays pending when the exact manifest is still missing", async () => {
+  mocks.fetchRange.mockResolvedValue([]);
+  expect(await refreshOwnedRunBillingByJob(input)).toEqual({
+    changedRunIds: [],
+    pending: true,
+  });
+  expect(mocks.fetchRange).toHaveBeenCalledTimes(3);
+  expect(mocks.record).not.toHaveBeenCalled();
+});
diff --git a/tests/contracts/manifest-usage.test.ts b/tests/contracts/manifest-usage.test.ts
new file mode 100644
index 00000000..6251ac9e
--- /dev/null
+++ b/tests/contracts/manifest-usage.test.ts
@@ -0,0 +1,57 @@
+import { afterEach, expect, it, vi } from "vitest";
+vi.mock("server-only", () => ({}));
+vi.mock("@/lib/console/pymthouse-bff", () => ({
+  getEndUserAccessToken: vi.fn(async () => ({ access_token: "test-token" })),
+}));
+vi.mock("@/lib/console/pymthouse-http", () => ({
+  issuerOriginFromConfig: () => "https://pymthouse.test",
+}));
+import { fetchManifestUsage } from "@/lib/console/manifest-usage";
+const input = {
+  externalUserId: "eu",
+  startDate: "2026-08-01",
+  endDate: "2026-09-12",
+};
+afterEach(() => vi.unstubAllGlobals());
+it("uses Bearer scope and documented manifest grouping without receipt cursors or subject overrides", async () => {
+  const f = vi.fn(async () =>
+    Response.json({
+      byManifest: [
+        {
+          manifestId: "mid",
+          networkFeeUsdMicros: "2982",
+          feeWei: "1190385777842",
+        },
+      ],
+    })
+  );
+  vi.stubGlobal("fetch", f);
+  expect(await fetchManifestUsage(input)).toEqual([
+    { manifestId: "mid", networkFeeUsdMicros: "2982", feeWei: "1190385777842" },
+  ]);
+  const [url, init] = (f.mock.calls as unknown as [URL, RequestInit][])[0];
+  expect(url.pathname).toBe("/api/v1/user/usage");
+  expect([...url.searchParams.keys()]).toEqual([
+    "groupBy",
+    "startDate",
+    "endDate",
+  ]);
+  expect(url.searchParams.get("groupBy")).toBe("manifest");
+  expect(init.headers).toEqual({
+    Authorization: "Bearer test-token",
+    Accept: "application/json",
+  });
+});
+it.each([
+  {},
+  { byManifest: [{ manifestId: "mid", networkFeeUsdMicros: -1 }] },
+  { byManifest: [{ manifestId: "mid", networkFeeUsdMicros: "NaN" }] },
+  {
+    byManifest: Array(2).fill({ manifestId: "mid", networkFeeUsdMicros: "1" }),
+  },
+])("rejects malformed or duplicate aggregate rows", async (body) => {
+  vi.stubGlobal("fetch", async () => Response.json(body));
+  await expect(fetchManifestUsage(input)).rejects.toThrow(
+    "invalid_manifest_usage"
+  );
+});
diff --git a/tests/contracts/preview-run-fixtures-route.test.ts b/tests/contracts/preview-run-fixtures-route.test.ts
new file mode 100644
index 00000000..b44aae0a
--- /dev/null
+++ b/tests/contracts/preview-run-fixtures-route.test.ts
@@ -0,0 +1,93 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("server-only", () => ({}));
+
+const mocks = vi.hoisted(() => ({
+  owner: vi.fn(),
+  ownedRuns: vi.fn(),
+  createRun: vi.fn(),
+  transitionRun: vi.fn(),
+  recordUsage: vi.fn(),
+}));
+
+vi.mock("@/lib/runs/http", () => ({
+  requireRunOwner: mocks.owner,
+  RUN_HEADERS: { "cache-control": "no-store" },
+  runError: () => Response.json({ error: "failed" }, { status: 500 }),
+}));
+vi.mock("@/lib/runs/store", () => ({
+  withPreviewRunFixtures: async (
+    _owner: unknown,
+    work: (store: unknown) => unknown
+  ) =>
+    work({
+      completedRunIds: async () => [],
+      ownedRunsByIds: mocks.ownedRuns,
+      createRun: mocks.createRun,
+      transitionRun: mocks.transitionRun,
+      recordRunUsage: mocks.recordUsage,
+    }),
+  ownedRunsByIds: mocks.ownedRuns,
+  createRun: mocks.createRun,
+  transitionRun: mocks.transitionRun,
+  recordRunUsage: mocks.recordUsage,
+}));
+
+import { POST } from "@/app/api/console/runs/preview-fixtures/route";
+
+describe("POST /api/console/runs/preview-fixtures", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    vi.stubEnv("VERCEL_ENV", "preview");
+    vi.stubEnv("CONSOLE_PREVIEW_FIXTURES", "1");
+    mocks.owner.mockResolvedValue({
+      principalId: "eu_preview",
+      userId: "user_preview",
+      externalAccountId: "account_preview",
+    });
+    mocks.ownedRuns.mockResolvedValue([]);
+    mocks.createRun.mockImplementation(async (_owner, input) => ({
+      id: input.id,
+    }));
+    mocks.transitionRun.mockResolvedValue({});
+    mocks.recordUsage.mockResolvedValue([]);
+  });
+
+  it("is unavailable outside an explicitly enabled Vercel preview", async () => {
+    vi.stubEnv("VERCEL_ENV", "production");
+    const response = await POST(
+      new Request("https://console.example/api/console/runs/preview-fixtures", {
+        method: "POST",
+      })
+    );
+    expect(response.status).toBe(404);
+    expect(mocks.owner).not.toHaveBeenCalled();
+  });
+
+  it("creates owner-scoped Neon fixtures with exact receipt joins and lineage", async () => {
+    const response = await POST(
+      new Request("https://preview.example/api/console/runs/preview-fixtures", {
+        method: "POST",
+      })
+    );
+    expect(response.status).toBe(200);
+    expect((await response.json()).createdCount).toBe(4);
+    expect(mocks.createRun).toHaveBeenCalledTimes(4);
+    expect(mocks.transitionRun).toHaveBeenCalledTimes(4);
+    expect(mocks.recordUsage).toHaveBeenCalledTimes(3);
+    expect(mocks.recordUsage.mock.calls.flatMap((call) => call[1])).toEqual(
+      expect.arrayContaining([
+        expect.objectContaining({
+          gatewayRequestId: expect.stringContaining("job_preview_"),
+          metadata: expect.objectContaining({ networkFeeUsdMicros: "1000.25" }),
+        }),
+        expect.objectContaining({
+          metadata: expect.objectContaining({ networkFeeUsdMicros: "2000.75" }),
+        }),
+      ])
+    );
+    expect(JSON.stringify(mocks.createRun.mock.calls)).toContain(
+      "/api/assets/asset_preview_"
+    );
+  });
+});
diff --git a/tests/contracts/public-media.test.ts b/tests/contracts/public-media.test.ts
new file mode 100644
index 00000000..c6d10002
--- /dev/null
+++ b/tests/contracts/public-media.test.ts
@@ -0,0 +1,291 @@
+import { afterEach, expect, it, vi } from "vitest";
+import { sanitizePublicMedia, publicRunDetail } from "@/lib/assets/public";
+import { extractRunOutputs } from "@/lib/runs/outputs";
+import type { RunDetail } from "@/lib/runs/types";
+afterEach(() => vi.unstubAllEnvs());
+it("removes input and redacted provider media while preserving prompts and unrelated links", () => {
+  const url = "https://provider.example/a?token=[REDACTED]";
+  const clean = sanitizePublicMedia(
+    {
+      inputs: {
+        reference_image: url,
+        mask_url: url,
+        image_prompt: url,
+        prompt: `paint ${url}`,
+        website: "https://example.com",
+        keyframes: [{ image_url: url }],
+        images: [{ url, width: 20 }],
+      },
+      result: { video: { url } },
+    },
+    [],
+    "eu_test"
+  );
+  expect(clean).toEqual({
+    inputs: {
+      image_prompt: url,
+      prompt: `paint ${url}`,
+      website: "https://example.com",
+      keyframes: [{}],
+      images: [{ width: 20 }],
+    },
+    result: { video: {} },
+  });
+});
+it("rewrites owned media but removes unmatched media even with partial persistence", () => {
+  vi.stubEnv("NEXT_PUBLIC_APP_URL", "https://preview.example");
+  const assets = [{ id: "owned", url: "https://provider.example/a" }];
+  const clean = sanitizePublicMedia(
+    {
+      images: [{ url: assets[0]!.url }, { url: "https://provider.example/b" }],
+      reference_image: "https://preview.example/api/assets/owned?sig=old",
+      mask_url: "https://evil.example/api/assets/owned",
+      video_url: "https://preview.example/api/assets/foreign",
+    },
+    assets,
+    "eu_test"
+  );
+  expect(JSON.stringify(clean)).not.toMatch(/provider|evil|foreign|sig=old/);
+  expect(JSON.stringify(clean)).toContain(
+    "https://preview.example/api/assets/owned?exp="
+  );
+});
+it("strips provider URLs from public error messages and drops empty leftovers", () => {
+  const queue = "https://queue.fal.run/fal-ai/flux/requests/req-1/status";
+  const signed = "https://v3b.fal.media/files/output.mp4?token=secret";
+  const clean = publicRunDetail({
+    principalId: "eu_test",
+    assets: [],
+    errorMessage: `upstream failed ${queue} then ${signed}`,
+    result: { value: { text: "ok" } },
+  } as unknown as RunDetail);
+  expect(clean.errorMessage).toBe("upstream failed then");
+  expect(JSON.stringify(clean)).not.toMatch(/queue\.fal\.run|fal\.media/);
+  expect(
+    publicRunDetail({
+      principalId: "eu_test",
+      assets: [],
+      errorMessage: queue,
+    } as unknown as RunDetail).errorMessage
+  ).toBeNull();
+});
+it("strips provider queue URLs from public event keys and metadata", () => {
+  const queue = "https://queue.fal.run/fal-ai/flux/requests/req-1/status";
+  const relative = "//queue.fal.run/fal-ai/flux/requests/req-1/status";
+  const bare = "queue.fal.run/fal-ai/flux/requests/req-1/status";
+  const event = (
+    id: string,
+    eventKey: string,
+    metadata: Record<string, unknown> = { providerStatus: "IN_QUEUE" }
+  ) => ({
+    id,
+    eventKey,
+    status: "running" as const,
+    createdAt: "2026-09-11T00:00:00.000Z",
+    metadata,
+  });
+  const clean = publicRunDetail({
+    principalId: "eu_test",
+    billing: { networkFeeUsdMicros: "2982", manifestCount: 1 },
+    assets: [],
+    submittedArguments: { prompt: "portrait" },
+    result: { value: { text: "ok" } },
+    events: [
+      {
+        ...event("evt_progress", `progress:IN_QUEUE:req-1:${queue}`),
+        metadata: {
+          providerStatus: "IN_QUEUE",
+          queue: {
+            statusUrl: queue,
+            resultUrl: queue.replace(/\/status$/, ""),
+          },
+          recoveryHandle: queue,
+        },
+        runId: "run_hidden",
+      },
+      event("evt_empty_id", `progress:IN_QUEUE::${queue}`),
+      event("evt_relative", `progress:IN_QUEUE:req-1:${relative}`),
+      event("evt_bare", `progress:IN_QUEUE:req-1:${bare}`),
+      {
+        id: "evt_usage",
+        eventKey: "usage:receipt",
+        status: "succeeded",
+        createdAt: "2026-09-11T00:00:01.000Z",
+        metadata: {
+          kind: "billing_usage",
+          networkFeeUsdMicros: "2982",
+          feeWei: "1",
+          pipeline: "fal-ai/flux/schnell",
+          modelId: "fal-ai/flux/schnell",
+          reason: queue,
+          providerStatus: `IN_QUEUE ${relative}`,
+        },
+      },
+    ],
+  } as unknown as RunDetail);
+  expect(JSON.stringify(clean)).not.toMatch(
+    /queue\.fal\.run|statusUrl|run_hidden/
+  );
+  expect(clean.events).toEqual([
+    {
+      id: "evt_progress",
+      eventKey: "progress:IN_QUEUE:req-1",
+      status: "running",
+      createdAt: "2026-09-11T00:00:00.000Z",
+      metadata: { providerStatus: "IN_QUEUE" },
+    },
+    {
+      id: "evt_empty_id",
+      eventKey: "progress:IN_QUEUE:",
+      status: "running",
+      createdAt: "2026-09-11T00:00:00.000Z",
+      metadata: { providerStatus: "IN_QUEUE" },
+    },
+    {
+      id: "evt_relative",
+      eventKey: "progress:IN_QUEUE:req-1",
+      status: "running",
+      createdAt: "2026-09-11T00:00:00.000Z",
+      metadata: { providerStatus: "IN_QUEUE" },
+    },
+    {
+      id: "evt_bare",
+      eventKey: "progress:IN_QUEUE:req-1",
+      status: "running",
+      createdAt: "2026-09-11T00:00:00.000Z",
+      metadata: { providerStatus: "IN_QUEUE" },
+    },
+    {
+      id: "evt_usage",
+      eventKey: "usage:receipt",
+      status: "succeeded",
+      createdAt: "2026-09-11T00:00:01.000Z",
+      metadata: {
+        kind: "billing_usage",
+        networkFeeUsdMicros: "2982",
+        feeWei: "1",
+        pipeline: "fal-ai/flux/schnell",
+        modelId: "fal-ai/flux/schnell",
+        providerStatus: "IN_QUEUE",
+      },
+    },
+  ]);
+});
+it("keeps unavailable asset lineage and billing in public history", () => {
+  const unavailableAt = "2026-09-11T00:00:00Z";
+  const detail = {
+    principalId: "eu_test",
+    billing: { networkFeeUsdMicros: "2982", manifestCount: 1 },
+    assets: [
+      {
+        id: "owned",
+        url: "https://provider.example/a",
+        unavailableAt,
+        role: "output",
+      },
+    ],
+    submittedArguments: { prompt: "portrait" },
+    result: { value: { image_url: "https://provider.example/a" } },
+  } as unknown as RunDetail;
+  const clean = publicRunDetail(detail);
+  expect(clean.assets[0]).toMatchObject({
+    id: "owned",
+    unavailableAt,
+    role: "output",
+  });
+  expect(clean.billing).toEqual(detail.billing);
+  expect(clean.submittedArguments).toEqual(detail.submittedArguments);
+});
+it("captures distinct explicit expiries, keeps availability guarantees separate, and leaves unknown expiry unknown", () => {
+  const a = "2026-09-12T00:00:00.000Z",
+    b = "2026-09-13T00:00:00.000Z";
+  expect(
+    extractRunOutputs({
+      images: [
+        { url: "https://p.example/a", expiresAt: a },
+        { url: "https://p.example/b", available_until: b },
+        { url: "https://p.example/c", expiresAt: "invalid" },
+      ],
+    })
+  ).toEqual([
+    { url: "https://p.example/a", mediaKind: "image", expiresAt: a },
+    {
+      url: "https://p.example/b",
+      mediaKind: "image",
+      availableUntil: b,
+    },
+    { url: "https://p.example/c", mediaKind: "image" },
+  ]);
+  expect(
+    extractRunOutputs({ imageUrl: "https://p.example/a", expiresAt: a })[0]
+      ?.expiresAt
+  ).toBe(a);
+});
+
+it("strips provider URLs under generic output/data/result wrappers", () => {
+  const url = "https://provider.example/file?token=secret";
+  expect(
+    sanitizePublicMedia(
+      {
+        output: url,
+        data: url,
+        result: url,
+        nested: { output: { data: url } },
+        prompt: `see ${url}`,
+        text: url,
+        website: "https://example.com",
+      },
+      [],
+      "eu_test"
+    )
+  ).toEqual({
+    nested: { output: {} },
+    prompt: `see ${url}`,
+    text: url,
+    website: "https://example.com",
+  });
+});
+
+it("strips compound provider URL keys including credentialed values", () => {
+  const token = "https://v3.fal.media/files/x?token=secret";
+  const queue = "https://queue.fal.run/fal-ai/flux/requests/id/status";
+  expect(
+    sanitizePublicMedia(
+      {
+        output_url: token,
+        outputUrl: token,
+        outputURL: token,
+        preview_url: token,
+        previewUrl: token,
+        download_url: token,
+        status_url: queue,
+        statusUrl: queue,
+        response_url: "https://queue.fal.run/fal-ai/flux/requests/id",
+        responseURI: queue,
+        asset2Url: token,
+        prompt: `see ${token}`,
+        website: "https://example.com",
+      },
+      [],
+      "eu_test"
+    )
+  ).toEqual({ prompt: `see ${token}`, website: "https://example.com" });
+});
+
+it("drops unsupported 3D media URLs without removing ordinary model identifiers", () => {
+  expect(
+    sanitizePublicMedia(
+      {
+        model: "fal-ai/model",
+        model_mesh: "ftp://provider.example/a.glb",
+        textures: [
+          "ftp://p.example/a.png",
+          { url: "https://p.example/b?token=secret" },
+        ],
+        preview_image: { url: "https://p.example/c?token=secret" },
+      },
+      [],
+      "eu_test"
+    )
+  ).toEqual({ model: "fal-ai/model", textures: [{}], preview_image: {} });
+});
diff --git a/tests/contracts/receipt-precision.test.ts b/tests/contracts/receipt-precision.test.ts
new file mode 100644
index 00000000..36c24786
--- /dev/null
+++ b/tests/contracts/receipt-precision.test.ts
@@ -0,0 +1,31 @@
+import { expect, it } from "vitest";
+import { sanitizeBillingReceipt } from "@/lib/console/billing-receipts";
+import type { SignedTicketRequestRow } from "@/lib/console/account-usage";
+const row = (fields: Record<string, string | undefined>) =>
+  ({
+    eventId: "evt",
+    gatewayRequestId: "job",
+    ...fields,
+  }) as SignedTicketRequestRow;
+it("accepts exact column boundaries", () => {
+  expect(
+    sanitizeBillingReceipt(
+      row({
+        networkFeeUsdMicros: "9".repeat(60) + "." + "9".repeat(18),
+        feeWei: "9".repeat(78),
+      })
+    )
+  ).not.toBeNull();
+});
+it.each([
+  { networkFeeUsdMicros: "9".repeat(61) },
+  { pixels: "0." + "1".repeat(19) },
+  { feeWei: "1.1" },
+  { feeWei: "1.0" },
+  { feeWei: "9".repeat(79) },
+])("rejects out-of-range receipts before a batch write", (fields) => {
+  const batch = [row(fields), row({ feeWei: "42" })]
+    .map(sanitizeBillingReceipt)
+    .filter(Boolean);
+  expect(batch).toHaveLength(1);
+});
diff --git a/tests/contracts/run-execution.test.ts b/tests/contracts/run-execution.test.ts
index cc614d12..01d24cac 100644
--- a/tests/contracts/run-execution.test.ts
+++ b/tests/contracts/run-execution.test.ts
@@ -22,6 +22,7 @@ function fixture() {
   const run = { ...owner, id: "run_test" } as RunDetail;
   const deps: ExecutionDependencies = {
     store: {
+      recordRunPaymentManifest: vi.fn().mockResolvedValue(undefined),
       resolveRunOwner: vi.fn().mockResolvedValue(owner),
       createRun: vi.fn().mockResolvedValue(run),
       transitionRun: vi.fn().mockResolvedValue(run),
@@ -142,6 +143,60 @@ describe("durable MCP execution", () => {
     );
     expect(reply.payload.billable_units).toBe(2.5);
   });
+  it("returns asset ids and first-party URLs without leaking provider media URLs", async () => {
+    const deps = fixture();
+    const providerUrl = "https://v3b.fal.media/files/output.mp4";
+    vi.mocked(deps.infer).mockResolvedValue({
+      gatewayRequestId: "job_test",
+      data: { video_urls: [providerUrl] },
+      status: "COMPLETED",
+      videoUrl: providerUrl,
+    } as never);
+    vi.mocked(deps.store.transitionRun).mockImplementation(
+      async (_owner, _id, transition) =>
+        ({
+          ...owner,
+          id: "run_test",
+          assets:
+            transition.eventKey === "dispatch-returned"
+              ? [
+                  {
+                    id: "asset_123",
+                    url: providerUrl,
+                    mediaType: "video",
+                    providerRequestId: null,
+                    availableUntil: null,
+                    expiresAt: null,
+                    unavailableAt: null,
+                    hiddenAt: null,
+                    createdAt: "2026-09-09T12:00:00.000Z",
+                  },
+                ]
+              : [],
+        }) as RunDetail
+    );
+
+    const response = await executeDurableRun(
+      principal,
+      { capability: "video" },
+      deps
+    );
+    expect(response.payload.url).toMatch(
+      /^http:\/\/localhost:3000\/api\/assets\/asset_123\?exp=\d+&sig=[A-Za-z0-9_-]+$/
+    );
+    expect(response.payload.assets).toEqual([
+      {
+        id: "asset_123",
+        url: expect.stringMatching(
+          /^http:\/\/localhost:3000\/api\/assets\/asset_123\?exp=\d+&sig=[A-Za-z0-9_-]+$/
+        ),
+        media_type: "video",
+      },
+    ]);
+    expect(JSON.stringify(response.payload)).not.toContain("fal.media");
+    expect(response.payload).not.toHaveProperty("status_url");
+    expect(response.payload).not.toHaveProperty("response_url");
+  });
   it("persists interrupted execution as unknown, not failed", async () => {
     const deps = fixture();
     vi.mocked(deps.infer).mockRejectedValue(new Error("timeout"));
@@ -214,3 +269,185 @@ describe("durable MCP execution", () => {
     }
   );
 });
+
+it("retries accepted payment persist on a transient store failure", async () => {
+  const deps = fixture();
+  let acceptedAttempts = 0;
+  vi.mocked(deps.store.recordRunPaymentManifest).mockImplementation(
+    async (_owner, _id, payment) => {
+      if (payment.phase === "accepted" && ++acceptedAttempts === 1)
+        throw new Error("db unavailable");
+    }
+  );
+  vi.mocked(deps.infer).mockImplementation(async ({ onPayment }) => {
+    await onPayment({ manifestId: "manifest-1", phase: "prepared" });
+    await onPayment({ manifestId: "manifest-1", phase: "accepted" });
+    return {
+      gatewayRequestId: "job_test",
+      data: { text: "ok" },
+      status: "succeeded",
+      url: null,
+      billableUnits: null,
+    } as never;
+  });
+  const reply = await executeDurableRun(
+    principal,
+    { capability: "test" },
+    deps
+  );
+  expect(reply.isError).toBe(false);
+  expect(acceptedAttempts).toBe(2);
+  expect(deps.store.recordRunPaymentManifest).toHaveBeenCalledTimes(3);
+});
+
+it("aborts after payment persist retries are exhausted", async () => {
+  const deps = fixture();
+  vi.mocked(deps.store.recordRunPaymentManifest).mockRejectedValue(
+    new Error("db unavailable")
+  );
+  vi.mocked(deps.infer).mockImplementation(async ({ onPayment }) => {
+    await onPayment({ manifestId: "manifest-1", phase: "accepted" });
+    return {
+      gatewayRequestId: "job_test",
+      data: { text: "ok" },
+      status: "succeeded",
+      url: null,
+      billableUnits: null,
+    } as never;
+  });
+  const reply = await executeDurableRun(
+    principal,
+    { capability: "test" },
+    deps
+  );
+  expect(reply.isError).toBe(true);
+  expect(deps.store.recordRunPaymentManifest).toHaveBeenCalledTimes(3);
+  expect(deps.store.transitionRun).toHaveBeenCalledWith(
+    owner,
+    "run_test",
+    expect.objectContaining({
+      status: "unknown",
+      errorCode: "execution_outcome_unknown",
+    })
+  );
+});
+
+it("records every payment phase against the run even when inference fails afterward", async () => {
+  const deps = fixture();
+  vi.mocked(deps.infer).mockImplementation(async ({ onPayment }) => {
+    for (const manifestId of ["failed-attempt", "successful-attempt"])
+      for (const phase of ["prepared", "accepted"] as const)
+        await onPayment({ manifestId, phase });
+    throw new Error("provider unavailable");
+  });
+  await executeDurableRun(principal, { capability: "test" }, deps);
+  expect(deps.store.recordRunPaymentManifest).toHaveBeenCalledTimes(4);
+  expect(deps.store.recordRunPaymentManifest).toHaveBeenLastCalledWith(
+    owner,
+    "run_test",
+    { manifestId: "successful-attempt", phase: "accepted" }
+  );
+});
+
+it("persists explicit expiry and sanitizes all returned media with partial capture", async () => {
+  const deps = fixture();
+  const expiresAt = "2026-10-01T00:00:00.000Z";
+  vi.mocked(deps.infer).mockResolvedValue({
+    gatewayRequestId: "job_test",
+    status: "succeeded",
+    url: null,
+    billableUnits: null,
+    data: {
+      images: [
+        { url: "https://provider.example/owned", expiresAt },
+        { url: "https://provider.example/missing" },
+        { url: "https://provider.example/signed?token=private" },
+      ],
+      output: "https://provider.example/download?token=private",
+      data: "https://provider.example/download?token=private",
+      result: { output: "https://provider.example/download?token=private" },
+      output_url: "https://provider.example/download?token=private",
+      outputUrl: "https://provider.example/download?token=private",
+      outputURL: "https://provider.example/download?token=private",
+      preview_url: "https://provider.example/preview?token=private",
+      previewUrl: "https://provider.example/preview?token=private",
+      status_url: "https://queue.fal.run/fal-ai/flux/requests/id/status",
+      statusUrl: "https://queue.fal.run/fal-ai/flux/requests/id/status",
+      responseURI: "https://queue.fal.run/fal-ai/flux/requests/id",
+      asset2Url: "https://provider.example/signed?token=private",
+    },
+  } as unknown as Awaited<ReturnType<ExecutionDependencies["infer"]>>);
+  vi.mocked(deps.store.transitionRun).mockResolvedValue({
+    ...owner,
+    id: "run_test",
+    assets: [
+      { id: "owned", url: "https://provider.example/owned", role: "output" },
+    ],
+  } as RunDetail);
+  const result = await executeDurableRun(
+    principal,
+    { capability: "image" },
+    deps
+  );
+  expect(deps.store.transitionRun).toHaveBeenCalledWith(
+    owner,
+    "run_test",
+    expect.objectContaining({
+      assets: expect.arrayContaining([
+        expect.objectContaining({
+          url: "https://provider.example/owned",
+          expiresAt,
+        }),
+      ]),
+    })
+  );
+  expect(JSON.stringify(result.payload)).not.toMatch(
+    /provider.example|private|REDACTED|queue\.fal\.run/
+  );
+  expect(JSON.stringify(result.payload)).toContain("/api/assets/owned");
+});
+
+it("writes usage after inference and does not fail the job when billing refresh throws", async () => {
+  const deps = fixture();
+  deps.refreshBilling = vi.fn().mockRejectedValue(new Error("usage lag"));
+  const reply = await executeDurableRun(
+    principal,
+    { capability: "test" },
+    deps
+  );
+  expect(reply.isError).toBe(false);
+  expect(reply.payload.run_id).toBe("run_test");
+  expect(deps.refreshBilling).toHaveBeenCalledWith({
+    owner,
+    runId: "run_test",
+    gatewayRequestId: vi.mocked(deps.infer).mock.calls[0][0].gatewayRequestId,
+  });
+});
+
+it("does not refresh billing when execution was never dispatched", async () => {
+  const deps = fixture();
+  deps.refreshBilling = vi.fn();
+  vi.mocked(deps.store.createRun).mockRejectedValue(new Error("db"));
+  await executeDurableRun(principal, { capability: "test" }, deps);
+  expect(deps.refreshBilling).not.toHaveBeenCalled();
+});
+
+it("refreshes billing after an interrupted paid attempt", async () => {
+  const deps = fixture();
+  deps.refreshBilling = vi.fn().mockResolvedValue(undefined);
+  vi.mocked(deps.infer).mockImplementation(async ({ onPayment }) => {
+    await onPayment({ manifestId: "manifest-1", phase: "accepted" });
+    throw new Error("provider unavailable");
+  });
+  const reply = await executeDurableRun(
+    principal,
+    { capability: "test" },
+    deps
+  );
+  expect(reply.isError).toBe(true);
+  expect(deps.refreshBilling).toHaveBeenCalledWith({
+    owner,
+    runId: "run_test",
+    gatewayRequestId: vi.mocked(deps.infer).mock.calls[0][0].gatewayRequestId,
+  });
+});
diff --git a/tests/contracts/run-history-session.test.tsx b/tests/contracts/run-history-session.test.tsx
index 445ad10a..be34fceb 100644
--- a/tests/contracts/run-history-session.test.tsx
+++ b/tests/contracts/run-history-session.test.tsx
@@ -29,6 +29,32 @@ function deferred<T>() {
   return { promise, resolve };
 }
 
+it("keeps the current run list visible while reload fetches a newer page", async () => {
+  const next = deferred<Response>();
+  vi.stubGlobal(
+    "fetch",
+    vi
+      .fn()
+      .mockResolvedValueOnce(page("run-a"))
+      .mockReturnValueOnce(next.promise)
+  );
+  const hook = renderHook(() => useRunHistory("/api/console/runs", true, {}));
+  await waitFor(() =>
+    expect(hook.result.current.page?.items[0].id).toBe("run-a")
+  );
+  act(() => {
+    hook.result.current.reload();
+  });
+  expect(hook.result.current.page?.items[0].id).toBe("run-a");
+  expect(hook.result.current.loading).toBe(false);
+  await act(async () => {
+    next.resolve(page("run-b"));
+  });
+  await waitFor(() =>
+    expect(hook.result.current.page?.items[0].id).toBe("run-b")
+  );
+});
+
 it("invalidates run list data when the enabled account changes", async () => {
   const next = deferred<Response>();
   vi.stubGlobal(
@@ -82,6 +108,51 @@ it("ignores a late run page from an old account and hides data when disabled", a
   expect(hook.result.current.loading).toBe(false);
 });
 
+it("aborts pagination when reloading so a later loadMore is not blocked", async () => {
+  const more = deferred<Response>();
+  vi.stubGlobal(
+    "fetch",
+    vi
+      .fn()
+      .mockResolvedValueOnce(page("run-a", "cursor-1"))
+      .mockReturnValueOnce(more.promise)
+      .mockResolvedValueOnce(Response.json({}, { status: 500 }))
+      .mockResolvedValueOnce(page("run-older"))
+  );
+  const hook = renderHook(() => useRunHistory("/api/console/runs", true, {}));
+  await waitFor(() =>
+    expect(hook.result.current.page?.nextCursor).toBe("cursor-1")
+  );
+  let firstMore!: Promise<void>;
+  act(() => {
+    firstMore = hook.result.current.loadMore();
+  });
+  expect(hook.result.current.loadingMore).toBe(true);
+  act(() => {
+    hook.result.current.reload();
+  });
+  expect(hook.result.current.loadingMore).toBe(false);
+  await waitFor(() => expect(hook.result.current.error).toBeTruthy());
+  expect(hook.result.current.loadingMore).toBe(false);
+  await act(async () => {
+    await hook.result.current.loadMore();
+  });
+  await waitFor(() =>
+    expect(hook.result.current.page?.items.map((row) => row.id)).toEqual([
+      "run-a",
+      "run-older",
+    ])
+  );
+  await act(async () => {
+    more.resolve(page("run-stale"));
+    await firstMore;
+  });
+  expect(hook.result.current.page?.items.map((row) => row.id)).toEqual([
+    "run-a",
+    "run-older",
+  ]);
+});
+
 it("does not append another account's delayed continuation to the current run list", async () => {
   const more = deferred<Response>();
   vi.stubGlobal(
diff --git a/tests/contracts/run-http.test.ts b/tests/contracts/run-http.test.ts
index ec1e83c0..c1c1e2e8 100644
--- a/tests/contracts/run-http.test.ts
+++ b/tests/contracts/run-http.test.ts
@@ -8,6 +8,9 @@ const mocks = vi.hoisted(() => ({
   admin: vi.fn(),
   adminList: vi.fn(),
   adminDetail: vi.fn(),
+  seedPreview: vi.fn(),
+  previewEnabled: vi.fn(() => false),
+  hideLegacy: vi.fn((page) => page),
 }));
 vi.mock("@/lib/console/session-user", () => ({
   requireConsoleSession: mocks.session,
@@ -20,6 +23,11 @@ vi.mock("@/lib/runs/store", () => ({
   listAdminRuns: mocks.adminList,
   getAdminRun: mocks.adminDetail,
 }));
+vi.mock("@/lib/runs/preview-fixtures", () => ({
+  ensurePreviewRunFixtures: mocks.seedPreview,
+  previewFixturesEnabled: mocks.previewEnabled,
+  withoutLegacyPreviewFixtures: mocks.hideLegacy,
+}));
 import { GET as list } from "@/app/api/console/runs/route";
 import { GET as detail } from "@/app/api/console/runs/[id]/route";
 import { GET as adminList } from "@/app/api/admin/runs/route";
@@ -47,11 +55,30 @@ it("derives ownership from session and ignores submitted identity", async () =>
   expect(response.status).toBe(200);
   expect(response.headers.get("cache-control")).toBe("no-store");
   expect(mocks.owner).toHaveBeenCalledWith("external");
-  expect(mocks.list).toHaveBeenCalledWith(owner, {
-    limit: 2,
-    status: "unknown",
-    cursor: undefined,
-    search: undefined,
+  expect(mocks.list).toHaveBeenCalledWith(
+    owner,
+    {
+      limit: 2,
+      status: "unknown",
+      cursor: undefined,
+      search: undefined,
+    },
+    { excludeLegacyPreview: false }
+  );
+});
+it("automatically seeds owner-scoped preview history before listing", async () => {
+  mocks.previewEnabled.mockReturnValue(true);
+  const response = await list(
+    new Request("https://preview.example/api/console/runs?limit=10")
+  );
+  expect(response.status).toBe(200);
+  expect(mocks.seedPreview).toHaveBeenCalledWith(
+    owner,
+    "https://preview.example"
+  );
+  expect(mocks.list).toHaveBeenCalledAfter(mocks.seedPreview);
+  expect(mocks.list).toHaveBeenCalledWith(owner, expect.anything(), {
+    excludeLegacyPreview: true,
   });
 });
 it("fails closed for mismatched canonical identity and invalid filters", async () => {
@@ -70,6 +97,72 @@ it("fails closed for mismatched canonical identity and invalid filters", async (
   ).toBe(400);
   expect(mocks.list).not.toHaveBeenCalled();
 });
+it("strips provider queue URLs from user and admin run detail", async () => {
+  const queue = "https://queue.fal.run/fal-ai/flux/requests/req-1/status";
+  const leaky = {
+    principalId: owner.principalId,
+    userId: owner.userId,
+    externalAccountId: owner.externalAccountId,
+    id: "run_1",
+    gatewayRequestId: "job_1",
+    providerRequestId: null,
+    provider: "fal",
+    source: "mcp",
+    capability: "fal-ai/flux",
+    modelId: null,
+    endpoint: null,
+    status: "running",
+    submittedArguments: { prompt: "portrait" },
+    result: null,
+    captureVersion: 1,
+    captureRedactedPaths: [],
+    errorCode: null,
+    errorMessage: null,
+    version: 1,
+    createdAt: "2026-09-11T00:00:00.000Z",
+    updatedAt: "2026-09-11T00:00:00.000Z",
+    startedAt: "2026-09-11T00:00:00.000Z",
+    completedAt: null,
+    email: null,
+    billing: null,
+    assets: [],
+    events: [
+      {
+        id: "evt_progress",
+        eventKey: `progress:IN_QUEUE:req-1:${queue}`,
+        status: "running",
+        createdAt: "2026-09-11T00:00:00.000Z",
+        metadata: {
+          providerStatus: "IN_QUEUE",
+          queue: { statusUrl: queue },
+        },
+      },
+    ],
+  };
+  mocks.detail.mockResolvedValue(leaky);
+  const user = await detail(new Request("https://console.invalid"), {
+    params: Promise.resolve({ id: "run_1" }),
+  });
+  const actor = { userId: "admin", adminGrantId: "grant", signupId: "signup" };
+  mocks.admin.mockResolvedValue(actor);
+  mocks.adminDetail.mockResolvedValue(leaky);
+  const admin = await adminDetail(new Request("https://console.invalid"), {
+    params: Promise.resolve({ id: "run_1" }),
+  });
+  expect(user.status).toBe(200);
+  expect(admin.status).toBe(200);
+  for (const response of [user, admin]) {
+    const body = await response.json();
+    expect(JSON.stringify(body)).not.toContain("queue.fal.run");
+    expect(body.events[0]).toEqual({
+      id: "evt_progress",
+      eventKey: "progress:IN_QUEUE:req-1",
+      status: "running",
+      createdAt: "2026-09-11T00:00:00.000Z",
+      metadata: { providerStatus: "IN_QUEUE" },
+    });
+  }
+});
 it("does not expose foreign or missing runs and masks driver failures", async () => {
   mocks.detail.mockResolvedValue(null);
   expect(
diff --git a/tests/contracts/run-outputs.test.ts b/tests/contracts/run-outputs.test.ts
index 514c99df..ab88136a 100644
--- a/tests/contracts/run-outputs.test.ts
+++ b/tests/contracts/run-outputs.test.ts
@@ -15,3 +15,23 @@ it("recognizes multiple output objects in returned arrays without treating promp
     { url: "https://media.example.com/b.mp4", mediaKind: "video" },
   ]);
 });
+
+it("captures 3D model, texture and preview assets without confusing model identifiers or prompts", () => {
+  const result = {
+    model: { url: "https://provider.example/model.glb" },
+    textures: [{ url: "https://provider.example/texture.png" }],
+    preview_image: { url: "https://provider.example/preview.png" },
+    prompt: "https://example.com/prompt",
+  };
+  expect(extractRunOutputs(result)).toEqual([
+    { url: result.model.url, mediaKind: "model" },
+    { url: result.preview_image.url, mediaKind: "image" },
+    { url: result.textures[0]!.url, mediaKind: "image" },
+  ]);
+  expect(
+    extractRunOutputs({
+      model: "fal-ai/model",
+      model_id: "https://example.com/not-output",
+    })
+  ).toEqual([]);
+});
diff --git a/tests/contracts/run-recovery.test.ts b/tests/contracts/run-recovery.test.ts
index 90ca65e9..9e7c0340 100644
--- a/tests/contracts/run-recovery.test.ts
+++ b/tests/contracts/run-recovery.test.ts
@@ -32,7 +32,10 @@ describe("public queue recovery", () => {
       .mockResolvedValueOnce(
         Response.json({
           images: [
-            { url: "https://media.fal.media/a.png" },
+            {
+              url: "https://media.fal.media/a.png",
+              expiresAt: "2026-10-01T00:00:00.000Z",
+            },
             { url: "https://media.fal.media/b.png" },
           ],
         })
@@ -53,7 +56,11 @@ describe("public queue recovery", () => {
       expect.objectContaining({
         status: "succeeded",
         assets: [
-          { url: "https://media.fal.media/a.png", mediaType: "image" },
+          {
+            url: "https://media.fal.media/a.png",
+            mediaType: "image",
+            expiresAt: "2026-10-01T00:00:00.000Z",
+          },
           { url: "https://media.fal.media/b.png", mediaType: "image" },
         ],
       })
diff --git a/tests/contracts/run-security.test.ts b/tests/contracts/run-security.test.ts
index 24fcd3a1..dd4ef47d 100644
--- a/tests/contracts/run-security.test.ts
+++ b/tests/contracts/run-security.test.ts
@@ -129,6 +129,10 @@ describe("run capture privacy contract", () => {
       ],
       image: { url: "https://v3.fal.media/files/a.png" },
       video: { url: "https://v3.fal.media/files/c.mp4" },
+      video_urls: [
+        "https://v3.fal.media/files/d.mp4",
+        "https://v3.fal.media/files/e.mp4",
+      ],
       status_url: "https://queue.fal.run/fal-ai/flux/requests/request-1/status",
       prompt: "https://example.invalid/not-an-output.png",
     });
@@ -136,6 +140,8 @@ describe("run capture privacy contract", () => {
       "https://v3.fal.media/files/a.png",
       "https://v3.fal.media/files/c.mp4",
       "https://v3.fal.media/files/b.png",
+      "https://v3.fal.media/files/d.mp4",
+      "https://v3.fal.media/files/e.mp4",
     ]);
     expect(
       extractRunOutputs({
@@ -186,6 +192,7 @@ it("keeps a late queue receipt despite repeated provider status and broken clien
   };
   const record = { ...owner, id: "run-test" } as RunDetail;
   const store = {
+    recordRunPaymentManifest: vi.fn().mockResolvedValue(undefined),
     resolveRunOwner: vi.fn().mockResolvedValue(owner),
     createRun: vi.fn().mockResolvedValue(record),
     transitionRun: vi.fn().mockResolvedValue(record),
diff --git a/tests/contracts/session-allowance.test.tsx b/tests/contracts/session-allowance.test.tsx
index 9f3b72a2..88b27d3c 100644
--- a/tests/contracts/session-allowance.test.tsx
+++ b/tests/contracts/session-allowance.test.tsx
@@ -33,6 +33,14 @@ vi.mock("@/lib/console/session-user", () => ({
 vi.mock("@/lib/console/pymthouse-bff", () => ({
   fetchAccountUsageForExternalUser: vi.fn(),
 }));
+const preview = vi.hoisted(() => ({
+  enabled: vi.fn(() => false),
+  usage: vi.fn(),
+}));
+vi.mock("@/lib/runs/preview-fixtures", () => ({
+  previewFixturesEnabled: preview.enabled,
+  previewAccountUsage: preview.usage,
+}));
 
 import SidebarUsageCard from "@/components/console/SidebarUsageCard";
 import { GET } from "@/app/api/pymthouse/account-usage/route";
@@ -45,6 +53,29 @@ import { fetchAccountUsageForExternalUser } from "@/lib/console/pymthouse-bff";
 beforeEach(() => {
   fixture.connected = true;
   vi.resetAllMocks();
+  preview.enabled.mockReturnValue(false);
+});
+it("serves a preview balance without contacting PymtHouse", async () => {
+  vi.mocked(requireConsoleSession).mockResolvedValue({
+    externalUserId: "session-user",
+  } as never);
+  preview.enabled.mockReturnValue(true);
+  preview.usage.mockReturnValue({
+    balance: { externalUserId: "session-user", balanceUsdMicros: "4986174" },
+  });
+  const response = await GET(
+    new NextRequest(
+      "http://localhost/api/pymthouse/account-usage?days=7&window=rolling&includePrior=0"
+    )
+  );
+  expect(response.status).toBe(200);
+  expect(preview.usage).toHaveBeenCalledWith({
+    externalUserId: "session-user",
+    periodDays: 7,
+    window: "rolling",
+    includePrior: false,
+  });
+  expect(fetchAccountUsageForExternalUser).not.toHaveBeenCalled();
 });
 afterEach(cleanup);
 
diff --git a/tests/contracts/ui-primitive-dependencies.test.ts b/tests/contracts/ui-primitive-dependencies.test.ts
new file mode 100644
index 00000000..9546320c
--- /dev/null
+++ b/tests/contracts/ui-primitive-dependencies.test.ts
@@ -0,0 +1,18 @@
+import { readFile } from "node:fs/promises";
+import { describe, expect, it } from "vitest";
+
+describe("registry UI primitive policy", () => {
+  it("does not introduce Radix packages or imports", async () => {
+    const files = [
+      "package.json",
+      "components/ui/dialog.tsx",
+      "components/ui/tooltip.tsx",
+      "components/ui/badge.tsx",
+      "components/ui/button.tsx",
+    ];
+    const contents = await Promise.all(
+      files.map((file) => readFile(new URL(`../../${file}`, import.meta.url), "utf8"))
+    );
+    expect(contents.join("\n")).not.toMatch(/(?:@radix-ui\/|["']radix-ui["'])/);
+  });
+});
diff --git a/tests/integration/mcp-assets.test.ts b/tests/integration/mcp-assets.test.ts
index 4fe51454..133a6e75 100644
--- a/tests/integration/mcp-assets.test.ts
+++ b/tests/integration/mcp-assets.test.ts
@@ -32,9 +32,11 @@ describe("mcp asset store helpers", () => {
       createdAt: "2026-09-05T01:00:00.000Z",
     });
     expect(asset.gatewayRequestId).toBe("job_abc");
-    expect(serializeAsset(asset)).toEqual({
+    expect(serializeAsset(asset, "eu_test")).toEqual({
       id: "asset_1",
-      url: "https://v3b.fal.media/files/x.jpg",
+      url: expect.stringMatching(
+        /^http:\/\/localhost:3000\/api\/assets\/asset_1\?exp=\d+&sig=[A-Za-z0-9_-]+$/
+      ),
       capability: "livepeer-example/fal-flux-schnell",
       created_at: "2026-09-05T01:00:00.000Z",
       gateway_request_id: "job_abc",
diff --git a/tests/integration/preview-run-repair.test.ts b/tests/integration/preview-run-repair.test.ts
new file mode 100644
index 00000000..8f352a55
--- /dev/null
+++ b/tests/integration/preview-run-repair.test.ts
@@ -0,0 +1,175 @@
+import { randomUUID, createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { drizzle } from "drizzle-orm/postgres-js";
+import { sql, eq } from "drizzle-orm";
+import { expect, it, vi } from "vitest";
+import { openIntegrationDatabase } from "@/tests/support/isolated-db";
+import * as schema from "@/lib/db/schema";
+vi.mock("server-only", () => ({}));
+vi.mock("@/lib/db", () => ({ getDb: vi.fn() }));
+vi.mock("@/lib/external-accounts/service", () => ({
+  configuredPymthouseScope: () => ({
+    service: "pymthouse",
+    issuer: "https://issuer.invalid",
+    appId: "run-tests",
+  }),
+  findExternalAccountOwner: vi.fn(),
+}));
+import { getDb } from "@/lib/db";
+import { ensurePreviewRunFixtures } from "@/lib/runs/preview-fixtures";
+import {
+  createRun,
+  transitionRun,
+  withPreviewRunFixtures,
+} from "@/lib/runs/store";
+
+it.skipIf(!process.env.TEST_DATABASE_URL)(
+  "serializes fixture seeding, rolls back failures, and repairs partial owner-scoped fixtures",
+  async () => {
+    const { client } = await openIntegrationDatabase(process.env);
+    const db = drizzle(client, { schema });
+    const namespace = `fixture_${randomUUID().replaceAll("-", "")}`;
+    const transaction: typeof db.transaction = (work, config) =>
+      db.transaction(async (tx) => {
+        await tx.execute(
+          sql.raw(`SET LOCAL search_path TO "${namespace}", public`)
+        );
+        return work(tx);
+      }, config);
+    try {
+      await db.execute(sql.raw(`CREATE SCHEMA "${namespace}"`));
+      await transaction(async (tx) => {
+        const journal = JSON.parse(
+          readFileSync("drizzle-baseline/meta/_journal.json", "utf8")
+        );
+        for (const { tag } of journal.entries)
+          for (const statement of readFileSync(
+            `drizzle-baseline/${tag}.sql`,
+            "utf8"
+          ).split("--> statement-breakpoint"))
+            if (statement.trim())
+              await tx.execute(
+                sql.raw(statement.replaceAll('"public".', `"${namespace}".`))
+              );
+      });
+      vi.mocked(getDb).mockReturnValue({ ...db, transaction } as typeof db);
+      vi.stubEnv("VERCEL_ENV", "preview");
+      vi.stubEnv("CONSOLE_PREVIEW_FIXTURES", "1");
+      vi.stubEnv("NEXT_PUBLIC_APP_URL", "https://preview.example");
+      const makeOwner = async (principalId: string) =>
+        transaction(async (tx) => {
+          const [user] = await tx.insert(schema.users).values({}).returning();
+          const [account] = await tx
+            .insert(schema.externalAccounts)
+            .values({
+              userId: user!.id,
+              externalUserId: principalId,
+              service: "pymthouse",
+              issuer: "https://issuer.invalid",
+              appId: "run-tests",
+              source: "test",
+            })
+            .returning();
+          return {
+            principalId,
+            userId: user!.id,
+            externalAccountId: account!.id,
+          };
+        });
+      const owner = await makeOwner("eu_fixture_one"),
+        other = await makeOwner("eu_fixture_two");
+      const suffix = createHash("sha256")
+        .update(owner.principalId)
+        .digest("hex")
+        .slice(0, 12);
+      const id = `run_preview_v2_${suffix}_portrait`;
+      const input = {
+        id,
+        gatewayRequestId: `job_preview_v2_${suffix}_portrait`,
+        capability: "fal-ai/flux/schnell",
+        submittedArguments: { inputs: { prompt: "preserved" } },
+      };
+      await expect(
+        withPreviewRunFixtures(owner, async (store) => {
+          await store.createRun(owner, input);
+          throw Error("injected_failure");
+        })
+      ).rejects.toThrow("injected_failure");
+      expect(
+        await transaction((tx) => tx.select().from(schema.runs))
+      ).toHaveLength(0);
+      await createRun(owner, input);
+      await transitionRun(owner, id, {
+        eventKey: "dispatch-returned",
+        status: "succeeded",
+        result: { value: { text: "preserved result" } },
+      });
+      const results = await Promise.all([
+        ensurePreviewRunFixtures(owner, "https://preview.example"),
+        ensurePreviewRunFixtures(owner, "https://preview.example"),
+      ]);
+      expect(results.map((r) => r.createdCount).sort()).toEqual([0, 3]);
+      expect(
+        (await ensurePreviewRunFixtures(owner, "https://preview.example"))
+          .createdCount
+      ).toBe(0);
+      await ensurePreviewRunFixtures(other, "https://preview.example");
+      await transaction(async (tx) => {
+        expect(await tx.select().from(schema.runs)).toHaveLength(8);
+        const receipts = await tx.select().from(schema.runUsageReceipts);
+        expect(receipts).toHaveLength(8);
+        const assets = await tx.select().from(schema.mcpAssets);
+        expect(assets).toHaveLength(4);
+        const links = await tx.select().from(schema.runAssetLinks);
+        expect(links).toHaveLength(6);
+        const [original] = await tx
+          .select()
+          .from(schema.runs)
+          .where(eq(schema.runs.id, id));
+        expect(original!.submittedArguments).toEqual(input.submittedArguments);
+        expect(original!.result).toEqual({
+          value: { text: "preserved result" },
+        });
+        expect(
+          assets.filter((a) => a.principalId === owner.principalId)
+        ).toHaveLength(2);
+      });
+      const expiry = "2026-12-01T00:00:00.000Z";
+      const captured = {
+        id: `asset_preview_v2_${suffix}_portrait`,
+        url: "https://preview.example/images/console/explore/flux-schnell.webp",
+        mediaType: "image/webp",
+      };
+      await withPreviewRunFixtures(owner, (store) =>
+        store.transitionRun(owner, id, {
+          eventKey: "dispatch-returned",
+          status: "succeeded",
+          assets: [{ ...captured, expiresAt: expiry }],
+        })
+      );
+      await withPreviewRunFixtures(owner, (store) =>
+        store.transitionRun(owner, id, {
+          eventKey: "dispatch-returned",
+          status: "succeeded",
+          assets: [captured],
+        })
+      );
+      await transaction(async (tx) => {
+        const [asset] = await tx
+          .select()
+          .from(schema.mcpAssets)
+          .where(eq(schema.mcpAssets.id, captured.id));
+        expect(asset!.expiresAt?.toISOString()).toBe(expiry);
+      });
+      vi.stubEnv("VERCEL_ENV", "production");
+      await expect(
+        ensurePreviewRunFixtures(owner, "https://preview.example")
+      ).rejects.toThrow("preview_fixtures_disabled");
+    } finally {
+      vi.unstubAllEnvs();
+      await db.execute(sql.raw(`DROP SCHEMA IF EXISTS "${namespace}" CASCADE`));
+      await client.end();
+    }
+  },
+  90000
+);
diff --git a/tests/integration/run-records.test.ts b/tests/integration/run-records.test.ts
index 8b0bad36..5c0d4063 100644
--- a/tests/integration/run-records.test.ts
+++ b/tests/integration/run-records.test.ts
@@ -15,6 +15,10 @@ vi.mock("@/lib/external-accounts/service", () => ({
   }),
   findExternalAccountOwner: vi.fn(),
 }));
+import {
+  recordRunPaymentManifest,
+  recordManifestUsage,
+} from "@/lib/runs/store";
 import { getDb } from "@/lib/db";
 import {
   claimReconciliationJobs,
@@ -31,6 +35,7 @@ import { forgetAssets, listAssets } from "@/lib/mcp/store";
 it.skipIf(!process.env.TEST_DATABASE_URL)(
   "stores complete run lifecycle and hidden assets with transactional idempotency and owner isolation",
   async () => {
+    vi.stubEnv("NEXT_PUBLIC_APP_URL", "https://preview.example");
     const { client } = await openIntegrationDatabase(process.env);
     const rollback = new Error("rollback_run_store");
     try {
@@ -111,6 +116,44 @@ it.skipIf(!process.env.TEST_DATABASE_URL)(
             ],
           });
           expect(succeeded.assets).toHaveLength(2);
+          expect(
+            await tx
+              .select()
+              .from(schema.runAssetLinks)
+              .where(eq(schema.runAssetLinks.runId, created.id))
+          ).toHaveLength(2);
+          const reusedAsset = succeeded.assets[0]!;
+          const consumer = await createRun(owner, {
+            id: "run-consumer",
+            gatewayRequestId: "job-consumer",
+            capability: "image-to-image",
+            submittedArguments: {
+              inputs: {
+                reference_image: `https://preview.example/api/assets/${reusedAsset.id}?exp=9999999999&sig=fixture`,
+              },
+            },
+          });
+          expect(consumer.assets).toEqual([
+            expect.objectContaining({ id: reusedAsset.id, role: "input" }),
+          ]);
+          expect(
+            await tx
+              .select()
+              .from(schema.runAssetLinks)
+              .where(eq(schema.runAssetLinks.runId, consumer.id))
+          ).toEqual([
+            expect.objectContaining({
+              assetId: reusedAsset.id,
+              direction: "input",
+              role: "reference_image",
+              parameterPath: "inputs.reference_image",
+              ordinal: 0,
+            }),
+          ]);
+          await tx
+            .update(schema.runs)
+            .set({ createdAt: new Date("2023-01-01"), updatedAt: new Date() })
+            .where(eq(schema.runs.id, consumer.id));
           expect(succeeded.result?.value).toEqual(["a", { image: "b" }]);
           expect(
             (
@@ -165,7 +208,7 @@ it.skipIf(!process.env.TEST_DATABASE_URL)(
           const first = await listOwnRuns(owner, { limit: 1 });
           expect(first.items.map((row) => row.id)).toEqual(["run-1"]);
           expect(first.items[0]).not.toHaveProperty("submittedArguments");
-          expect(first.counts.total).toBe(2);
+          expect(first.counts.total).toBe(3);
           const next = await listOwnRuns(owner, {
             limit: 1,
             cursor: first.nextCursor!,
@@ -203,7 +246,12 @@ it.skipIf(!process.env.TEST_DATABASE_URL)(
             {
               eventId: "event-1",
               gatewayRequestId: "job-1",
-              metadata: { fee: "0.01" },
+              metadata: { networkFeeUsdMicros: "0.932" },
+            },
+            {
+              eventId: "event-2",
+              gatewayRequestId: "job-1",
+              metadata: { networkFeeUsdMicros: "2.068" },
             },
           ];
           await recordRunUsage(owner, usage);
@@ -216,9 +264,118 @@ it.skipIf(!process.env.TEST_DATABASE_URL)(
             afterUsage?.events.filter((event) =>
               event.eventKey.startsWith("usage:")
             )
-          ).toHaveLength(1);
+          ).toHaveLength(2);
+          expect(afterUsage?.billing).toEqual({
+            networkFeeUsdMicros: "3",
+            receiptCount: 2,
+          });
+          expect(
+            await tx
+              .select()
+              .from(schema.runUsageReceipts)
+              .where(eq(schema.runUsageReceipts.runId, created.id))
+          ).toHaveLength(2);
+          expect(
+            (await listOwnRuns(owner, { limit: 10 })).items.find(
+              (item) => item.id === created.id
+            )?.billing
+          ).toEqual({ networkFeeUsdMicros: "3", receiptCount: 2 });
           expect(afterUsage?.version).toBe(beforeUsage?.version);
           expect(afterUsage?.status).toBe("succeeded");
+          // Snapshot refresh replaces amounts and must never add receipt totals again.
+          await recordRunPaymentManifest(owner, created.id, {
+            manifestId: "paid-1",
+            phase: "prepared",
+          });
+          await recordRunPaymentManifest(owner, created.id, {
+            manifestId: "paid-1",
+            phase: "accepted",
+          });
+          await recordRunPaymentManifest(owner, created.id, {
+            manifestId: "paid-1",
+            phase: "prepared",
+          });
+          await recordRunPaymentManifest(owner, created.id, {
+            manifestId: "paid-2",
+            phase: "accepted",
+          });
+          await expect(
+            recordRunPaymentManifest(
+              { ...owner, userId: randomUUID() },
+              created.id,
+              { manifestId: "foreign", phase: "prepared" }
+            )
+          ).rejects.toThrow("run_owner_mismatch");
+          await expect(
+            recordRunPaymentManifest(owner, "run-2", {
+              manifestId: "paid-1",
+              phase: "prepared",
+            })
+          ).rejects.toThrow("payment_manifest_already_linked");
+          const snapshots = [
+            {
+              manifestId: "paid-1",
+              networkFeeUsdMicros: "2982",
+              feeWei: "123",
+            },
+            { manifestId: "paid-2", networkFeeUsdMicros: "10", feeWei: "1" },
+          ];
+          expect(
+            await recordManifestUsage(
+              owner,
+              [created.id],
+              snapshots.slice(0, 1),
+              new Date("2026-09-11T00:00:00Z")
+            )
+          ).toEqual([created.id]);
+          expect((await getOwnRun(owner, created.id))?.billing).toBeNull();
+          await recordManifestUsage(
+            owner,
+            [created.id],
+            snapshots,
+            new Date("2026-09-11T00:01:00Z")
+          );
+          expect(
+            await recordManifestUsage(
+              owner,
+              [created.id],
+              snapshots,
+              new Date("2026-09-11T00:02:00Z")
+            )
+          ).toEqual([]);
+          await recordManifestUsage(
+            owner,
+            [created.id],
+            [{ ...snapshots[0], networkFeeUsdMicros: "1" }],
+            new Date("2026-09-10")
+          );
+          expect((await getOwnRun(owner, created.id))?.billing).toEqual({
+            networkFeeUsdMicros: "2992",
+            manifestCount: 2,
+          });
+          expect(
+            (await listOwnRuns(owner, { limit: 100 })).items.find(
+              (r) => r.id === created.id
+            )?.billing
+          ).toEqual({ networkFeeUsdMicros: "2992", manifestCount: 2 });
+          await recordManifestUsage(
+            owner,
+            [created.id],
+            [{ ...snapshots[0], networkFeeUsdMicros: "3000" }],
+            new Date("2026-09-11T00:03:00Z")
+          );
+          expect(
+            (await getOwnRun(owner, created.id))?.billing?.networkFeeUsdMicros
+          ).toBe("3010");
+          await recordManifestUsage(
+            { ...owner, userId: randomUUID() },
+            [created.id],
+            snapshots,
+            new Date("2026-09-12")
+          );
+          expect(
+            (await getOwnRun(owner, created.id))?.billing?.networkFeeUsdMicros
+          ).toBe("3010");
           const stale = await createRun(owner, {
             id: "stale",
             gatewayRequestId: "job-stale",
@@ -368,10 +525,55 @@ it.skipIf(!process.env.TEST_DATABASE_URL)(
             (await tx.select().from(schema.runReconciliationJobs))[0]
               .completedAt
           ).not.toBeNull();
+          // Filter obsolete preview records before both pagination and totals.
+          for (const id of [
+            "run_preview_v2_page_1",
+            "run_preview_v2_page_2",
+            "run_preview_v2_page_3",
+            "run_preview_legacy_1",
+            "run_preview_legacy_2",
+          ]) {
+            await createRun(owner, {
+              id,
+              gatewayRequestId: `job_${id}`,
+              capability: "pagination-regression",
+              submittedArguments: {},
+            });
+          }
+          const firstPage = await listOwnRuns(
+            owner,
+            { limit: 2, search: "pagination-regression" },
+            { excludeLegacyPreview: true }
+          );
+          expect(firstPage.items).toHaveLength(2);
+          expect(firstPage.counts.total).toBe(3);
+          expect(firstPage.nextCursor).not.toBeNull();
+          const lastPage = await listOwnRuns(
+            owner,
+            {
+              limit: 2,
+              search: "pagination-regression",
+              cursor: firstPage.nextCursor!,
+            },
+            { excludeLegacyPreview: true }
+          );
+          expect(lastPage.items).toHaveLength(1);
+          expect(lastPage.counts.total).toBe(3);
+          expect(lastPage.nextCursor).toBeNull();
+          expect(
+            new Set(
+              [...firstPage.items, ...lastPage.items].map((item) => item.id)
+            ).size
+          ).toBe(3);
+          expect(
+            (await listOwnRuns(owner, { search: "pagination-regression" }))
+              .counts.total
+          ).toBe(5);
           throw rollback;
         })
       ).rejects.toBe(rollback);
     } finally {
+      vi.unstubAllEnvs();
       await client.end();
     }
   },