| 1 | -- Reasonix accounts: users, sessions, email tokens. |
| 2 | -- Apply: wrangler d1 migrations apply reasonix-accounts --local (or --remote) |
| 3 | |
| 4 | CREATE TABLE IF NOT EXISTS users ( |
| 5 | id INTEGER PRIMARY KEY AUTOINCREMENT, |
| 6 | handle TEXT NOT NULL UNIQUE, -- public identity, /u/<handle> |
| 7 | email TEXT NOT NULL UNIQUE, -- stored lowercased |
| 8 | email_verified INTEGER NOT NULL DEFAULT 0, |
| 9 | password_hash TEXT, -- nullable: reserved for future OAuth-only users |
| 10 | display_name TEXT NOT NULL DEFAULT '', |
| 11 | avatar_url TEXT NOT NULL DEFAULT '', |
| 12 | bio TEXT NOT NULL DEFAULT '', |
| 13 | role TEXT NOT NULL DEFAULT 'member', -- member | admin |
| 14 | status TEXT NOT NULL DEFAULT 'active', -- active | suspended | deleted |
| 15 | created_at TEXT NOT NULL, |
| 16 | updated_at TEXT NOT NULL |
| 17 | ); |
| 18 | |
| 19 | -- Sessions store sha256(raw cookie token); the raw token only ever lives in the |
| 20 | -- cookie, so a DB read can't resurrect a live session. `kind` is reserved so the |
| 21 | -- future desktop/CLI device-flow login reuses this same table. |
| 22 | CREATE TABLE IF NOT EXISTS sessions ( |
| 23 | token_hash TEXT PRIMARY KEY, |
| 24 | user_id INTEGER NOT NULL, |
| 25 | kind TEXT NOT NULL DEFAULT 'web', -- web | cli |
| 26 | user_agent TEXT NOT NULL DEFAULT '', |
| 27 | created_at TEXT NOT NULL, |
| 28 | last_seen_at TEXT NOT NULL, |
| 29 | expires_at TEXT NOT NULL |
| 30 | ); |
| 31 | CREATE INDEX IF NOT EXISTS sessions_user ON sessions (user_id); |
| 32 | CREATE INDEX IF NOT EXISTS sessions_expires ON sessions (expires_at); |
| 33 | |
| 34 | -- Single-use, hashed tokens for email verification and password reset. |
| 35 | CREATE TABLE IF NOT EXISTS email_tokens ( |
| 36 | token_hash TEXT PRIMARY KEY, |
| 37 | user_id INTEGER NOT NULL, |
| 38 | purpose TEXT NOT NULL, -- verify | reset |
| 39 | created_at TEXT NOT NULL, |
| 40 | expires_at TEXT NOT NULL, |
| 41 | used_at TEXT |
| 42 | ); |
| 43 | CREATE INDEX IF NOT EXISTS email_tokens_user ON email_tokens (user_id); |
| 44 |