-- 0002_tokens: HTTP basic-auth git tokens.
--
-- Tokens are long-lived push/clone credentials. Only the SHA-256 digest is
-- stored; the plaintext is shown once at creation. hint is the non-secret
-- prefix kept for display.
CREATE TABLE tokens (
    id           INTEGER PRIMARY KEY,
    user_id      INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
    name         TEXT    NOT NULL,
    hint         TEXT    NOT NULL,
    token_hash   TEXT    NOT NULL UNIQUE,
    created_at   INTEGER NOT NULL DEFAULT (unixepoch()),
    last_used_at INTEGER
);

CREATE INDEX tokens_user_id_idx ON tokens (user_id);