···

       
14
       
 
       
    avatar_cid TEXT,                                                -- CID of avatar image blob

     

       
15
       
 
       
    banner_cid TEXT,                                                -- CID of banner image blob

     

       
16
       
 
       


     

       
17
       
-
       
    -- Ownership & hosting

     

       
18
       
-
       
    owner_did TEXT NOT NULL,                                        -- DID of community owner (instance in V1)

     

       
19
       
 
       
    created_by_did TEXT NOT NULL,                                   -- DID of user who created community

     

       
20
       
 
       
    hosted_by_did TEXT NOT NULL,                                    -- DID of hosting instance

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
21
       
 
       


     

       
22
       
 
       
    -- Visibility & federation

     

       
23
       
 
       
    visibility TEXT NOT NULL DEFAULT 'public' CHECK (visibility IN ('public', 'unlisted', 'private')),

     
···

       
53
       
 
       
CREATE INDEX idx_communities_created_at ON communities(created_at);

     

       
54
       
 
       
CREATE INDEX idx_communities_name_trgm ON communities USING gin(name gin_trgm_ops);  -- For fuzzy search

     

       
55
       
 
       
CREATE INDEX idx_communities_description_trgm ON communities USING gin(description gin_trgm_ops);

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
56
       
 
       


     

       
57
       
 
       
-- Subscriptions table: lightweight feed following

     

       
58
       
 
       
CREATE TABLE community_subscriptions (

     
···

       
120
       
 
       
CREATE INDEX idx_moderation_created_at ON community_moderation(created_at);

     

       
121
       
 
       


     

       
122
       
 
       
-- +goose Down

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
123
       
 
       
DROP INDEX IF EXISTS idx_moderation_created_at;

     

       
124
       
 
       
DROP INDEX IF EXISTS idx_moderation_action;

     

       
125
       
 
       
DROP INDEX IF EXISTS idx_moderation_instance;

     

···

       
14
       
 
       
    avatar_cid TEXT,                                                -- CID of avatar image blob

     

       
15
       
 
       
    banner_cid TEXT,                                                -- CID of banner image blob

     

       
16
       
 
       


     

       
17
       
+
       
    -- Ownership & hosting (V2: community owns its own repo)

     

       
18
       
+
       
    owner_did TEXT NOT NULL,                                        -- V1: instance DID, V2: same as did (self-owned)

     

       
19
       
 
       
    created_by_did TEXT NOT NULL,                                   -- DID of user who created community

     

       
20
       
 
       
    hosted_by_did TEXT NOT NULL,                                    -- DID of hosting instance

     

       
21
       
+
       


     

       
22
       
+
       
    -- V2: PDS Account Credentials (community has its own PDS account)

     

       
23
       
+
       
    pds_email TEXT,                                                 -- System email for community PDS account

     

       
24
       
+
       
    pds_password_hash TEXT,                                         -- bcrypt hash for re-authentication

     

       
25
       
+
       
    pds_access_token TEXT,                                          -- JWT for API calls (expires)

     

       
26
       
+
       
    pds_refresh_token TEXT,                                         -- For refreshing sessions

     

       
27
       
+
       
    pds_url TEXT DEFAULT 'http://localhost:2583',                   -- PDS hosting this community's repo

     

       
28
       
 
       


     

       
29
       
 
       
    -- Visibility & federation

     

       
30
       
 
       
    visibility TEXT NOT NULL DEFAULT 'public' CHECK (visibility IN ('public', 'unlisted', 'private')),

     
···

       
60
       
 
       
CREATE INDEX idx_communities_created_at ON communities(created_at);

     

       
61
       
 
       
CREATE INDEX idx_communities_name_trgm ON communities USING gin(name gin_trgm_ops);  -- For fuzzy search

     

       
62
       
 
       
CREATE INDEX idx_communities_description_trgm ON communities USING gin(description gin_trgm_ops);

     

       
63
       
+
       
CREATE INDEX idx_communities_pds_email ON communities(pds_email);  -- V2: For credential lookups

     

       
64
       
+
       


     

       
65
       
+
       
-- Security comments for V2 credentials

     

       
66
       
+
       
COMMENT ON COLUMN communities.pds_password_hash IS 'V2: bcrypt hash - NEVER return in API responses';

     

       
67
       
+
       
COMMENT ON COLUMN communities.pds_access_token IS 'V2: JWT - rotate frequently, NEVER log';

     

       
68
       
+
       
COMMENT ON COLUMN communities.pds_refresh_token IS 'V2: Refresh token - NEVER log or expose in APIs';

     

       
69
       
 
       


     

       
70
       
 
       
-- Subscriptions table: lightweight feed following

     

       
71
       
 
       
CREATE TABLE community_subscriptions (

     
···

       
133
       
 
       
CREATE INDEX idx_moderation_created_at ON community_moderation(created_at);

     

       
134
       
 
       


     

       
135
       
 
       
-- +goose Down

     

       
136
       
+
       
-- Drop security comments

     

       
137
       
+
       
COMMENT ON COLUMN communities.pds_refresh_token IS NULL;

     

       
138
       
+
       
COMMENT ON COLUMN communities.pds_access_token IS NULL;

     

       
139
       
+
       
COMMENT ON COLUMN communities.pds_password_hash IS NULL;

     

       
140
       
+
       


     

       
141
       
+
       
DROP INDEX IF EXISTS idx_communities_pds_email;

     

       
142
       
 
       
DROP INDEX IF EXISTS idx_moderation_created_at;

     

       
143
       
 
       
DROP INDEX IF EXISTS idx_moderation_action;

     

       
144
       
 
       
DROP INDEX IF EXISTS idx_moderation_instance;