-- ------------------------------------------------------------
-- Migration 003: Passport photo (with face-detection flag) +
-- password-change tracking.
-- Run this ONLY if you already have an existing ltda_association
-- database from before this feature was added. Fresh installs
-- using schema.sql already include these columns.
-- ------------------------------------------------------------

ALTER TABLE users
    ADD COLUMN passport_photo VARCHAR(255) DEFAULT NULL AFTER national_id,
    ADD COLUMN passport_face_verified TINYINT(1) NOT NULL DEFAULT 0 AFTER passport_photo,
    ADD COLUMN password_changed_at DATETIME DEFAULT NULL AFTER password_hash;