v3: added customizable site emoji (logo), small visual tweaks

api/db/migrations/0007_password_reset_tokens.ts

@@ -0,0 +1,23 @@
+import type { DatabaseSync } from "node:sqlite";
+
+// Idempotent: safe to run against a fresh db (already created from schema.sql
+// with password_reset_tokens) or an existing one that predates the table.
+export function up(db: DatabaseSync): void {
+  const tables = new Set(
+    (db.prepare(
+      `SELECT name FROM sqlite_master WHERE type = 'table';`,
+    ).all() as { name: string }[]).map((r) => r.name),
+  );
+
+  if (!tables.has("password_reset_tokens")) {
+    db.exec(
+      `CREATE TABLE password_reset_tokens (
+        token      TEXT PRIMARY KEY,
+        user_id    TEXT NOT NULL,
+        expires_at TEXT NOT NULL,
+        used_at    TEXT,
+        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+      );`,
+    );
+  }
+}