-- 013_user_is_approved.sql
-- Self-signup accounts stay locked out of login until an admin sets
-- is_approved on Settings → Approvals. Existing active staff keep access.
-- Applied at startup by alembic_setup.run_manual_sql().

ALTER TABLE app.users
    ADD COLUMN IF NOT EXISTS is_approved BOOLEAN NOT NULL DEFAULT FALSE;

UPDATE app.users
SET is_approved = TRUE
WHERE is_active = TRUE
  AND is_deleted = FALSE
  AND is_approved = FALSE;