-- =============================================================================
-- MIGRATION: Password reset — resetTokenHash/resetTokenExpiresAt on users
-- Convention: Prisma maps createdAt→createdOn, updatedAt→updatedOn in DB
-- Run: idempotent — safe to re-execute
-- =============================================================================

BEGIN;

ALTER TABLE admin.users
  ADD COLUMN IF NOT EXISTS "resetTokenHash" TEXT,
  ADD COLUMN IF NOT EXISTS "resetTokenExpiresAt" TIMESTAMP(3);

CREATE INDEX IF NOT EXISTS "users_resetTokenHash_idx" ON admin.users ("resetTokenHash");

COMMIT;