Initial commit after re-install

db/schema.sql

@@ -0,0 +1,41 @@
+-- NCUE user table for admin gating / auditing
+-- Run: psql -h $DB_HOST -p $DB_PORT -U $DB_USER -d $DB_NAME -f db/schema.sql
+
+DO $$
+BEGIN
+  IF NOT EXISTS (
+    SELECT 1
+    FROM information_schema.tables
+    WHERE table_schema = 'public'
+      AND table_name = 'ncue_user'
+  ) THEN
+    CREATE TABLE public.ncue_user (
+      sub            text PRIMARY KEY,
+      email          text,
+      name           text,
+      picture        text,
+      provider       text,
+      first_login_at timestamptz,
+      last_login_at  timestamptz,
+      last_logout_at timestamptz,
+      can_manage     boolean NOT NULL DEFAULT false,
+      created_at     timestamptz NOT NULL DEFAULT now(),
+      updated_at     timestamptz NOT NULL DEFAULT now()
+    );
+
+    CREATE INDEX idx_ncue_user_email ON public.ncue_user (email);
+  END IF;
+END $$;
+
+-- Backward-compatible migration (if table already exists)
+ALTER TABLE public.ncue_user ADD COLUMN IF NOT EXISTS first_login_at timestamptz;
+ALTER TABLE public.ncue_user ADD COLUMN IF NOT EXISTS last_logout_at timestamptz;
+
+-- App config (shared across browsers)
+CREATE TABLE IF NOT EXISTS public.ncue_app_config (
+  key        text PRIMARY KEY,
+  value      jsonb NOT NULL,
+  updated_at timestamptz NOT NULL DEFAULT now()
+);
+
+