-- Kratkotrajni izazov za potvrdu vlasništva SMS-om.
-- Kod se čuva samo kao SHA-256 otisak; sam kod nikad ne ulazi u bazu.
CREATE TABLE "ProfileClaimChallenge" (
    "id" TEXT NOT NULL,
    "companyId" TEXT NOT NULL,
    "phone" TEXT NOT NULL,
    "codeHash" TEXT NOT NULL,
    "attempts" INTEGER NOT NULL DEFAULT 0,
    "expiresAt" TIMESTAMP(3) NOT NULL,
    "usedAt" TIMESTAMP(3),
    "ip" TEXT,
    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,

    CONSTRAINT "ProfileClaimChallenge_pkey" PRIMARY KEY ("id")
);

CREATE INDEX "ProfileClaimChallenge_companyId_idx" ON "ProfileClaimChallenge"("companyId");
CREATE INDEX "ProfileClaimChallenge_expiresAt_idx" ON "ProfileClaimChallenge"("expiresAt");

ALTER TABLE "ProfileClaimChallenge" ADD CONSTRAINT "ProfileClaimChallenge_companyId_fkey"
    FOREIGN KEY ("companyId") REFERENCES "Company"("id") ON DELETE CASCADE ON UPDATE CASCADE;