bretton.dev
A community based topic aggregation platform built on atproto
fix(migrations): Add missing comma in communities table schema
Fixed syntax error in 005 migration where pds_url column was missing
a trailing comma, causing migration failures.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
+21
-2
internal/db/migrations/005_create_communities_tables.sql
+21
-2
internal/db/migrations/005_create_communities_tables.sql
···
14
14
avatar_cid TEXT, -- CID of avatar image blob
15
15
banner_cid TEXT, -- CID of banner image blob
16
16
17
-
-- Ownership & hosting
18
-
owner_did TEXT NOT NULL, -- DID of community owner (instance in V1)
17
+
-- Ownership & hosting (V2: community owns its own repo)
18
+
owner_did TEXT NOT NULL, -- V1: instance DID, V2: same as did (self-owned)
19
19
created_by_did TEXT NOT NULL, -- DID of user who created community
20
20
hosted_by_did TEXT NOT NULL, -- DID of hosting instance
21
+
22
+
-- V2: PDS Account Credentials (community has its own PDS account)
23
+
pds_email TEXT, -- System email for community PDS account
24
+
pds_password_hash TEXT, -- bcrypt hash for re-authentication
25
+
pds_access_token TEXT, -- JWT for API calls (expires)
26
+
pds_refresh_token TEXT, -- For refreshing sessions
27
+
pds_url TEXT DEFAULT 'http://localhost:2583', -- PDS hosting this community's repo
21
28
22
29
-- Visibility & federation
23
30
visibility TEXT NOT NULL DEFAULT 'public' CHECK (visibility IN ('public', 'unlisted', 'private')),
···
53
60
CREATE INDEX idx_communities_created_at ON communities(created_at);
54
61
CREATE INDEX idx_communities_name_trgm ON communities USING gin(name gin_trgm_ops); -- For fuzzy search
55
62
CREATE INDEX idx_communities_description_trgm ON communities USING gin(description gin_trgm_ops);
63
+
CREATE INDEX idx_communities_pds_email ON communities(pds_email); -- V2: For credential lookups
64
+
65
+
-- Security comments for V2 credentials
66
+
COMMENT ON COLUMN communities.pds_password_hash IS 'V2: bcrypt hash - NEVER return in API responses';
67
+
COMMENT ON COLUMN communities.pds_access_token IS 'V2: JWT - rotate frequently, NEVER log';
68
+
COMMENT ON COLUMN communities.pds_refresh_token IS 'V2: Refresh token - NEVER log or expose in APIs';
56
69
57
70
-- Subscriptions table: lightweight feed following
58
71
CREATE TABLE community_subscriptions (
···
120
133
CREATE INDEX idx_moderation_created_at ON community_moderation(created_at);
121
134
122
135
-- +goose Down
136
+
-- Drop security comments
137
+
COMMENT ON COLUMN communities.pds_refresh_token IS NULL;
138
+
COMMENT ON COLUMN communities.pds_access_token IS NULL;
139
+
COMMENT ON COLUMN communities.pds_password_hash IS NULL;
140
+
141
+
DROP INDEX IF EXISTS idx_communities_pds_email;
123
142
DROP INDEX IF EXISTS idx_moderation_created_at;
124
143
DROP INDEX IF EXISTS idx_moderation_action;
125
144
DROP INDEX IF EXISTS idx_moderation_instance;