-- Which mission a scoped session was minted for, so it can be revoked when
-- the mission ends.
--
-- The skills-door token is minted once per mission with a 24 h TTL — long
-- enough to outlive the longest mission — and nothing revoked it sooner. A
-- mission that finished in twenty minutes left a live credential in its
-- container for the other twenty-three hours: Lingering Authority (arXiv
-- 2606.22504) is the paper on exactly this, and its fix is a capability
-- bound to the task that ends with it.
--
-- ON DELETE CASCADE, so purging a mission revokes its sessions with it.
ALTER TABLE auth_sessions
    ADD COLUMN IF NOT EXISTS mission_id UUID REFERENCES missions (id) ON DELETE CASCADE;

CREATE INDEX IF NOT EXISTS auth_sessions_mission_idx
    ON auth_sessions (mission_id)
    WHERE mission_id IS NOT NULL;

COMMENT ON COLUMN auth_sessions.mission_id IS
    'The mission this session was minted for; revoked when it reaches a terminal status. NULL for user and service sessions.';