@varaos/db 1.1.18 → 1.1.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varaos/db",
-  "version": "1.1.18",
+  "version": "1.1.19",
   "private": false,
   "main": "index.js",
   "files": [

package/prisma/migrations/20260109090928_add_user_two_factor_auth/migration.sql

@@ -0,0 +1,37 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `twoFactorSecret` on the `User` table. All the data in the column will be lost.
+
+*/
+-- CreateEnum
+CREATE TYPE "public"."TwoFactorMethod" AS ENUM ('totp', 'email', 'webauthn');
+
+-- AlterTable
+ALTER TABLE "public"."User" DROP COLUMN "twoFactorSecret";
+
+-- CreateTable
+CREATE TABLE "public"."UserTwoFactor" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "method" "public"."TwoFactorMethod" NOT NULL DEFAULT 'totp',
+    "secret" TEXT,
+    "enabled" BOOLEAN NOT NULL DEFAULT false,
+    "lastVerifiedAt" TIMESTAMP(3),
+    "enabledAt" TIMESTAMP(3),
+    "recoveryEmailVerifiedAt" TIMESTAMP(3),
+    "backupCodes" JSONB,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "UserTwoFactor_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "UserTwoFactor_userId_key" ON "public"."UserTwoFactor"("userId");
+
+-- CreateIndex
+CREATE INDEX "UserTwoFactor_userId_idx" ON "public"."UserTwoFactor"("userId");
+
+-- AddForeignKey
+ALTER TABLE "public"."UserTwoFactor" ADD CONSTRAINT "UserTwoFactor_userId_fkey" FOREIGN KEY ("userId") REFERENCES "public"."User"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/schema.prisma

@@ -76,6 +76,12 @@ enum FileCategory {
   export
 }
 
+enum TwoFactorMethod {
+  totp
+  email
+  webauthn
+}
+
 /// ─────────────────────────────────────────────
 /// USERS & AUTH
 /// ─────────────────────────────────────────────
@@ -98,12 +104,14 @@ model User {
   lastLogin          DateTime?
   lastPasswordChange DateTime?
   twoFactorEnabled   Boolean   @default(false)
-  twoFactorSecret    String?
-  metadata           Json?
-  plan               Plan      @default(free)
-  tokenBalance       Int       @default(0)
-  creditsUsed        Int       @default(0)
-  deletedAt          DateTime?
+
+  userTwoFactor UserTwoFactor?
+
+  metadata     Json?
+  plan         Plan      @default(free)
+  tokenBalance Int       @default(0)
+  creditsUsed  Int       @default(0)
+  deletedAt    DateTime?
 
   authType AuthType @default(oauth)
 
@@ -177,12 +185,12 @@ model UserSession {
 }
 
 model UploadIntent {
-  id        String   @id
+  id        String       @id
   userId    String
   category  FileCategory
   size      BigInt
   objectKey String
-  createdAt DateTime @default(now())
+  createdAt DateTime     @default(now())
 
   @@index([userId])
   @@index([userId, category])
@@ -200,6 +208,29 @@ model UserEmail {
   user User @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
+model UserTwoFactor {
+  id     String @id @default(uuid())
+  userId String @unique
+
+  method  TwoFactorMethod @default(totp)
+  secret  String? // null when disabled or method != totp
+  enabled Boolean         @default(false)
+
+  lastVerifiedAt DateTime?
+  enabledAt      DateTime?
+
+  recoveryEmailVerifiedAt DateTime?
+
+  backupCodes Json? // [{ hash, used, usedAt }]
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
 model Account {
   id                String  @id @default(uuid())
   userId            String