jQFSrSSKrSSKrSSKrSSKJrJr SSKrSSK r Sr \R"S5r /SQ/SQ/SQS .r\"\R#\S \S -\S -55rS rSrSr"SS\5rS-SjrSrSrSrSrSrSrSrSr Sr!Sr"Sr#Sr$Sr%S r&S!r'S"r(S#r)S$r*S%r+S&r,S.S'jr-S(r.S)r/S*r0S+r1S,r2g)/zAccounts and tenancy: admin (platform) -> parent (tenant) -> kid (sub-tenant). Every parent owns only the kids whose parent_id is theirs; a parent may own at most max_kids kids. A suspended parent blocks its own login and the logins of all its kids.N)generate_password_hashcheck_password_hash)adminparentkidz^[a-z0-9][a-z0-9._-]{2,29}$)u🐱u🐶u🦊u🐼u🐨u🐯🦁u🐸u🐵u🦄u🐰u🐻u🐧u🦉u🐙u🦖u🐬u🦋u🐢🚀⚽u🌟)u 🧑‍🚀u🦸u🥷u🧙🐺🦅u🐉u🦈🎧🎮🏀r 🎸🛹📷u🧭⚡🔥🌍r 🏆🎯)r ru🧠u📚u🖋️u💻rrr u🏎️rru🌌r r ru🏔️rrrrr)kidsjuniorteenrrrc[R"U5(a&[R"U5RSS5OSn[RU[S5S$)zcFirst avatar of the age band of the kid's course level (a cat for 8 years old, an explorer for 11).bandrr)CURlevelgetAVATARS_BY_BAND)rrs accounts.pydefault_avatarr#sJ3699U3C3C399U    /D   t_V%< =a @@a CREATE TABLE users ( id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT UNIQUE NOT NULL, role TEXT NOT NULL CHECK(role IN ('admin','parent','kid')), password_hash TEXT NOT NULL, display_name TEXT NOT NULL, parent_id INTEGER, max_kids INTEGER DEFAULT 3, active INTEGER DEFAULT 1, avatar TEXT DEFAULT '', unlock_all INTEGER DEFAULT 0, course_level INTEGER DEFAULT 1, created_at TEXT DEFAULT (datetime('now','localtime')), last_login TEXT )c\rSrSrSrSrg) AccountError/z:A user-facing problem (shown in Arabic in the dashboards).N)__name__ __module__ __qualname____firstlineno____doc____static_attributes__r(r$r"r&r&/sDr$r&c  [R"5nURS5R5=(d SS0S=(d SnSU;Ga=U(Ga5SGHnURSU45R5nUR UR 5S35=(d SR 5R5UR UR 5S35peU(dMU(dMU(dMURS XTS 45R5(aMURS U[U5UR UR 5S 35=(d UUS 45 GM! UR5 SU;GahURS 5 URS5 URS5R5Vs/sHowSPM nnURS5 UR[5 SV s/sH oU;dM U PM n n URSSRU 5SSRU 5S35 URS5 URS5R5n U (aURSU S 45 URS[R45 UR5 URS5 URS5 SURS5R5Vs/sHowSPM sn;aURS5 URS[S 45 UR5 UR!5 g!s snfs sn fs snf)"aUpgrade the old users table (kid/parent only) to the tenancy schema, keeping ids and data. The old app copied PARENT_*/KID_* from .env into its single parent and kid at every start; that copy is done one last time here, so the family keeps the login it had in .env and its progress.z0SELECT sql FROM sqlite_master WHERE name='users'sqlz'admin')rrz5SELECT id FROM users WHERE role=? ORDER BY id LIMIT 1 _USERNAME _PASSWORDz.SELECT 1 FROM users WHERE username=? AND id<>?idzGUPDATE users SET username=?, password_hash=?, display_name=? WHERE id=? _DISPLAY_NAMEzPRAGMA foreign_keys=OFFzPRAGMA legacy_alter_table=ONzPRAGMA table_info(users)namez%ALTER TABLE users RENAME TO users_old)r4usernamerole password_hash display_name created_atzINSERT INTO users (,z ) SELECT z FROM users_oldzDROP TABLE users_oldz