commit d066b80fb96ed11cc3a7d2ec1717d2951286dfda · bretton.dev/coves

+21 -2
internal/db/migrations/005_create_communities_tables.sql
···

       14
       14
        
           avatar_cid TEXT,                                                -- CID of avatar image blob

     

       15
       15
        
           banner_cid TEXT,                                                -- CID of banner image blob

     

       16
       16
        
       

     

       17
       17
       -
           -- Ownership & hosting

     

       18
       18
       -
           owner_did TEXT NOT NULL,                                        -- DID of community owner (instance in V1)

     

       17
       17
       +
           -- Ownership & hosting (V2: community owns its own repo)

     

       18
       18
       +
           owner_did TEXT NOT NULL,                                        -- V1: instance DID, V2: same as did (self-owned)

     

       19
       19
        
           created_by_did TEXT NOT NULL,                                   -- DID of user who created community

     

       20
       20
        
           hosted_by_did TEXT NOT NULL,                                    -- DID of hosting instance

     

       21
       21
       +
       

     

       22
       22
       +
           -- V2: PDS Account Credentials (community has its own PDS account)

     

       23
       23
       +
           pds_email TEXT,                                                 -- System email for community PDS account

     

       24
       24
       +
           pds_password_hash TEXT,                                         -- bcrypt hash for re-authentication

     

       25
       25
       +
           pds_access_token TEXT,                                          -- JWT for API calls (expires)

     

       26
       26
       +
           pds_refresh_token TEXT,                                         -- For refreshing sessions

     

       27
       27
       +
           pds_url TEXT DEFAULT 'http://localhost:2583',                   -- PDS hosting this community's repo

     

       21
       28
        
       

     

       22
       29
        
           -- Visibility & federation

     

       23
       30
        
           visibility TEXT NOT NULL DEFAULT 'public' CHECK (visibility IN ('public', 'unlisted', 'private')),

     
···

       53
       60
        
       CREATE INDEX idx_communities_created_at ON communities(created_at);

     

       54
       61
        
       CREATE INDEX idx_communities_name_trgm ON communities USING gin(name gin_trgm_ops);  -- For fuzzy search

     

       55
       62
        
       CREATE INDEX idx_communities_description_trgm ON communities USING gin(description gin_trgm_ops);

     

       63
       63
       +
       CREATE INDEX idx_communities_pds_email ON communities(pds_email);  -- V2: For credential lookups

     

       64
       64
       +
       

     

       65
       65
       +
       -- Security comments for V2 credentials

     

       66
       66
       +
       COMMENT ON COLUMN communities.pds_password_hash IS 'V2: bcrypt hash - NEVER return in API responses';

     

       67
       67
       +
       COMMENT ON COLUMN communities.pds_access_token IS 'V2: JWT - rotate frequently, NEVER log';

     

       68
       68
       +
       COMMENT ON COLUMN communities.pds_refresh_token IS 'V2: Refresh token - NEVER log or expose in APIs';

     

       56
       69
        
       

     

       57
       70
        
       -- Subscriptions table: lightweight feed following

     

       58
       71
        
       CREATE TABLE community_subscriptions (

     
···

       120
       133
        
       CREATE INDEX idx_moderation_created_at ON community_moderation(created_at);

     

       121
       134
        
       

     

       122
       135
        
       -- +goose Down

     

       136
       136
       +
       -- Drop security comments

     

       137
       137
       +
       COMMENT ON COLUMN communities.pds_refresh_token IS NULL;

     

       138
       138
       +
       COMMENT ON COLUMN communities.pds_access_token IS NULL;

     

       139
       139
       +
       COMMENT ON COLUMN communities.pds_password_hash IS NULL;

     

       140
       140
       +
       

     

       141
       141
       +
       DROP INDEX IF EXISTS idx_communities_pds_email;

     

       123
       142
        
       DROP INDEX IF EXISTS idx_moderation_created_at;

     

       124
       143
        
       DROP INDEX IF EXISTS idx_moderation_action;

     

       125
       144
        
       DROP INDEX IF EXISTS idx_moderation_instance;