migration: User.password_hash length to 97, Session.token index

off by one hell fml
also why's the index only applying now? what'd I do lol

backend/linkpulse/migrations/007_password_hash_length_adjust_session_token_index.py

@@ -0,0 +1,50 @@
+"""Peewee migrations -- 007_password_hash_length_adjust_session_token_index.py.
+
+Some examples (model - class or model name)::
+
+    > Model = migrator.orm['table_name']            # Return model in current state by name
+    > Model = migrator.ModelClass                   # Return model in current state by name
+
+    > migrator.sql(sql)                             # Run custom SQL
+    > migrator.run(func, *args, **kwargs)           # Run python function with the given args
+    > migrator.create_model(Model)                  # Create a model (could be used as decorator)
+    > migrator.remove_model(model, cascade=True)    # Remove a model
+    > migrator.add_fields(model, **fields)          # Add fields to a model
+    > migrator.change_fields(model, **fields)       # Change fields
+    > migrator.remove_fields(model, *field_names, cascade=True)
+    > migrator.rename_field(model, old_field_name, new_field_name)
+    > migrator.rename_table(model, new_table_name)
+    > migrator.add_index(model, *col_names, unique=False)
+    > migrator.add_not_null(model, *field_names)
+    > migrator.add_default(model, field_name, default)
+    > migrator.add_constraint(model, name, sql)
+    > migrator.drop_index(model, *col_names)
+    > migrator.drop_not_null(model, *field_names)
+    > migrator.drop_constraints(model, *constraints)
+
+"""
+
+from contextlib import suppress
+
+import peewee as pw
+from peewee_migrate import Migrator
+
+
+with suppress(ImportError):
+    import playhouse.postgres_ext as pw_pext
+
+
+def migrate(migrator: Migrator, database: pw.Database, *, fake=False):
+    """Write your migrations here."""
+    
+    migrator.change_fields('user', password_hash=pw.CharField(max_length=97))
+
+    migrator.add_index('session', 'token', unique=True)
+
+
+def rollback(migrator: Migrator, database: pw.Database, *, fake=False):
+    """Write your rollback migrations here."""
+    
+    migrator.drop_index('session', 'token')
+
+    migrator.change_fields('user', password_hash=pw.CharField(max_length=96))

backend/linkpulse/models.py

@@ -43,7 +43,7 @@ class User(BaseModel):
     email = CharField(unique=True, max_length=45)
     flags = BitField()
     # full hash with encoded salt/parameters, argon2 but assume nothing
-    password_hash = CharField(max_length=96)
+    password_hash = CharField(max_length=97)
     created_at = DateTimeField(default=utc_now)
     updated_at = DateTimeField(default=utc_now)
     # prefer soft deletes before hard deletes