mirror of
https://tangled.org/tranquil.farm/tranquil-pds
synced 2026-09-06 02:07:00 +00:00
268 lines
9.0 KiB
SQL
268 lines
9.0 KiB
SQL
CREATE TYPE notification_channel AS ENUM ('email', 'discord', 'telegram', 'signal');
|
|
CREATE TYPE notification_status AS ENUM ('pending', 'processing', 'sent', 'failed');
|
|
CREATE TYPE notification_type AS ENUM (
|
|
'welcome',
|
|
'email_verification',
|
|
'password_reset',
|
|
'email_update',
|
|
'account_deletion',
|
|
'admin_email'
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS users (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
handle TEXT NOT NULL UNIQUE,
|
|
email TEXT NOT NULL UNIQUE,
|
|
did TEXT NOT NULL UNIQUE,
|
|
password_hash TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
|
|
deactivated_at TIMESTAMPTZ,
|
|
invites_disabled BOOLEAN DEFAULT FALSE,
|
|
takedown_ref TEXT,
|
|
|
|
preferred_notification_channel notification_channel NOT NULL DEFAULT 'email',
|
|
|
|
password_reset_code TEXT,
|
|
password_reset_code_expires_at TIMESTAMPTZ,
|
|
|
|
email_pending_verification TEXT,
|
|
email_confirmation_code TEXT,
|
|
email_confirmation_code_expires_at TIMESTAMPTZ
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS idx_users_password_reset_code ON users(password_reset_code) WHERE password_reset_code IS NOT NULL;
|
|
CREATE INDEX IF NOT EXISTS idx_users_email_confirmation_code ON users(email_confirmation_code) WHERE email_confirmation_code IS NOT NULL;
|
|
|
|
CREATE TABLE IF NOT EXISTS invite_codes (
|
|
code TEXT PRIMARY KEY,
|
|
available_uses INT NOT NULL DEFAULT 1,
|
|
created_by_user UUID NOT NULL REFERENCES users(id),
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
disabled BOOLEAN DEFAULT FALSE
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS invite_code_uses (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
code TEXT NOT NULL REFERENCES invite_codes(code),
|
|
used_by_user UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
|
used_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
UNIQUE(code, used_by_user)
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS user_keys (
|
|
user_id UUID PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
|
|
key_bytes BYTEA NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
encrypted_at TIMESTAMPTZ,
|
|
encryption_version INTEGER DEFAULT 0
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS repos (
|
|
user_id UUID PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
|
|
repo_root_cid TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS blocks (
|
|
cid BYTEA PRIMARY KEY,
|
|
data BYTEA NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS records (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
repo_id UUID NOT NULL REFERENCES repos(user_id) ON DELETE CASCADE,
|
|
collection TEXT NOT NULL,
|
|
rkey TEXT NOT NULL,
|
|
record_cid TEXT NOT NULL,
|
|
takedown_ref TEXT,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
UNIQUE(repo_id, collection, rkey)
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS blobs (
|
|
cid TEXT PRIMARY KEY,
|
|
mime_type TEXT NOT NULL,
|
|
size_bytes BIGINT NOT NULL,
|
|
created_by_user UUID NOT NULL REFERENCES users(id),
|
|
storage_key TEXT NOT NULL,
|
|
takedown_ref TEXT,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS app_passwords (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
|
name TEXT NOT NULL,
|
|
password_hash TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
privileged BOOLEAN NOT NULL DEFAULT FALSE,
|
|
UNIQUE(user_id, name)
|
|
);
|
|
|
|
CREATE TABLE reports (
|
|
id BIGINT PRIMARY KEY,
|
|
reason_type TEXT NOT NULL,
|
|
reason TEXT,
|
|
subject_json JSONB NOT NULL,
|
|
reported_by_did TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS account_deletion_requests (
|
|
token TEXT PRIMARY KEY,
|
|
did TEXT NOT NULL REFERENCES users(did) ON DELETE CASCADE,
|
|
expires_at TIMESTAMPTZ NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS notification_queue (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
|
channel notification_channel NOT NULL DEFAULT 'email',
|
|
notification_type notification_type NOT NULL,
|
|
status notification_status NOT NULL DEFAULT 'pending',
|
|
recipient TEXT NOT NULL,
|
|
subject TEXT,
|
|
body TEXT NOT NULL,
|
|
metadata JSONB,
|
|
attempts INT NOT NULL DEFAULT 0,
|
|
max_attempts INT NOT NULL DEFAULT 3,
|
|
last_error TEXT,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
scheduled_for TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
processed_at TIMESTAMPTZ
|
|
);
|
|
|
|
CREATE INDEX idx_notification_queue_status_scheduled
|
|
ON notification_queue(status, scheduled_for)
|
|
WHERE status = 'pending';
|
|
|
|
CREATE INDEX idx_notification_queue_user_id ON notification_queue(user_id);
|
|
|
|
CREATE TABLE IF NOT EXISTS reserved_signing_keys (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
did TEXT,
|
|
public_key_did_key TEXT NOT NULL,
|
|
private_key_bytes BYTEA NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
expires_at TIMESTAMPTZ NOT NULL DEFAULT NOW() + INTERVAL '24 hours',
|
|
used_at TIMESTAMPTZ
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS idx_reserved_signing_keys_did ON reserved_signing_keys(did) WHERE did IS NOT NULL;
|
|
CREATE INDEX IF NOT EXISTS idx_reserved_signing_keys_expires ON reserved_signing_keys(expires_at) WHERE used_at IS NULL;
|
|
|
|
CREATE TABLE repo_seq (
|
|
seq BIGSERIAL PRIMARY KEY,
|
|
did TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
event_type TEXT NOT NULL,
|
|
commit_cid TEXT,
|
|
prev_cid TEXT,
|
|
ops JSONB,
|
|
blobs TEXT[],
|
|
blocks_cids TEXT[]
|
|
);
|
|
|
|
CREATE INDEX idx_repo_seq_seq ON repo_seq(seq);
|
|
CREATE INDEX idx_repo_seq_did ON repo_seq(did);
|
|
|
|
CREATE TABLE IF NOT EXISTS session_tokens (
|
|
id SERIAL PRIMARY KEY,
|
|
did TEXT NOT NULL REFERENCES users(did) ON DELETE CASCADE,
|
|
access_jti TEXT NOT NULL UNIQUE,
|
|
refresh_jti TEXT NOT NULL UNIQUE,
|
|
access_expires_at TIMESTAMPTZ NOT NULL,
|
|
refresh_expires_at TIMESTAMPTZ NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE INDEX idx_session_tokens_did ON session_tokens(did);
|
|
CREATE INDEX idx_session_tokens_access_jti ON session_tokens(access_jti);
|
|
CREATE INDEX idx_session_tokens_refresh_jti ON session_tokens(refresh_jti);
|
|
|
|
CREATE TABLE IF NOT EXISTS used_refresh_tokens (
|
|
refresh_jti TEXT PRIMARY KEY,
|
|
session_id INTEGER NOT NULL REFERENCES session_tokens(id) ON DELETE CASCADE,
|
|
used_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE INDEX idx_used_refresh_tokens_session_id ON used_refresh_tokens(session_id);
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_device (
|
|
id TEXT PRIMARY KEY,
|
|
session_id TEXT NOT NULL UNIQUE,
|
|
user_agent TEXT,
|
|
ip_address TEXT NOT NULL,
|
|
last_seen_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_authorization_request (
|
|
id TEXT PRIMARY KEY,
|
|
did TEXT REFERENCES users(did) ON DELETE CASCADE,
|
|
device_id TEXT REFERENCES oauth_device(id) ON DELETE SET NULL,
|
|
client_id TEXT NOT NULL,
|
|
client_auth JSONB,
|
|
parameters JSONB NOT NULL,
|
|
expires_at TIMESTAMPTZ NOT NULL,
|
|
code TEXT UNIQUE
|
|
);
|
|
|
|
CREATE INDEX idx_oauth_auth_request_expires ON oauth_authorization_request(expires_at);
|
|
CREATE INDEX idx_oauth_auth_request_code ON oauth_authorization_request(code) WHERE code IS NOT NULL;
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_token (
|
|
id SERIAL PRIMARY KEY,
|
|
did TEXT NOT NULL REFERENCES users(did) ON DELETE CASCADE,
|
|
token_id TEXT NOT NULL UNIQUE,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
expires_at TIMESTAMPTZ NOT NULL,
|
|
client_id TEXT NOT NULL,
|
|
client_auth JSONB NOT NULL,
|
|
device_id TEXT REFERENCES oauth_device(id) ON DELETE SET NULL,
|
|
parameters JSONB NOT NULL,
|
|
details JSONB,
|
|
code TEXT UNIQUE,
|
|
current_refresh_token TEXT UNIQUE,
|
|
scope TEXT
|
|
);
|
|
|
|
CREATE INDEX idx_oauth_token_did ON oauth_token(did);
|
|
CREATE INDEX idx_oauth_token_code ON oauth_token(code) WHERE code IS NOT NULL;
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_account_device (
|
|
did TEXT NOT NULL REFERENCES users(did) ON DELETE CASCADE,
|
|
device_id TEXT NOT NULL REFERENCES oauth_device(id) ON DELETE CASCADE,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
PRIMARY KEY (did, device_id)
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_authorized_client (
|
|
did TEXT NOT NULL REFERENCES users(did) ON DELETE CASCADE,
|
|
client_id TEXT NOT NULL,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
data JSONB NOT NULL,
|
|
PRIMARY KEY (did, client_id)
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_used_refresh_token (
|
|
refresh_token TEXT PRIMARY KEY,
|
|
token_id INTEGER NOT NULL REFERENCES oauth_token(id) ON DELETE CASCADE
|
|
);
|
|
|
|
CREATE TABLE oauth_dpop_jti (
|
|
jti TEXT PRIMARY KEY,
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
CREATE INDEX idx_oauth_dpop_jti_created_at ON oauth_dpop_jti(created_at);
|