CREATE TABLE `audit_events` (
	`id` text PRIMARY KEY NOT NULL,
	`subject_id` text,
	`event_type` text NOT NULL,
	`actor_subject_id` text,
	`ip_hash` text,
	`user_agent_hash` text,
	`created_at_ms` integer NOT NULL,
	`data_json` text NOT NULL,
	FOREIGN KEY (`subject_id`) REFERENCES `subjects`(`id`) ON UPDATE no action ON DELETE set null
);
--> statement-breakpoint
CREATE INDEX `audit_events_subject_created_idx` ON `audit_events` (`subject_id`,`created_at_ms`);--> statement-breakpoint
CREATE INDEX `audit_events_type_created_idx` ON `audit_events` (`event_type`,`created_at_ms`);--> statement-breakpoint
CREATE INDEX `audit_events_actor_created_idx` ON `audit_events` (`actor_subject_id`,`created_at_ms`);--> statement-breakpoint
CREATE TABLE `pat_projections` (
	`id` text PRIMARY KEY NOT NULL,
	`subject_id` text NOT NULL,
	`name` text NOT NULL,
	`scopes_json` text NOT NULL,
	`created_at_ms` integer NOT NULL,
	`expires_at_ms` integer,
	`revoked_at_ms` integer,
	`last_used_at_ms` integer,
	FOREIGN KEY (`subject_id`) REFERENCES `subjects`(`id`) ON UPDATE no action ON DELETE cascade
);
--> statement-breakpoint
CREATE INDEX `pat_projections_subject_created_idx` ON `pat_projections` (`subject_id`,`created_at_ms`);--> statement-breakpoint
CREATE INDEX `pat_projections_subject_active_idx` ON `pat_projections` (`subject_id`,`revoked_at_ms`,`expires_at_ms`);--> statement-breakpoint
CREATE TABLE `subjects` (
	`id` text PRIMARY KEY NOT NULL,
	`storage_id` text NOT NULL,
	`host_label` text NOT NULL,
	`email` text,
	`display_name` text,
	`created_at_ms` integer NOT NULL,
	`last_login_at_ms` integer,
	`host_rotated_at_ms` integer,
	`disabled_at_ms` integer
);
--> statement-breakpoint
CREATE UNIQUE INDEX `subjects_storage_id_unique` ON `subjects` (`storage_id`);--> statement-breakpoint
CREATE UNIQUE INDEX `subjects_host_label_unique` ON `subjects` (`host_label`);--> statement-breakpoint
CREATE INDEX `subjects_disabled_idx` ON `subjects` (`disabled_at_ms`);