@varaos/db 1.4.4 → 1.4.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varaos/db",
-  "version": "1.4.4",
+  "version": "1.4.6",
   "private": false,
   "main": "index.js",
   "files": [

package/prisma/migrations/20260328155000_add_admin_hardening_impersonation/migration.sql

@@ -0,0 +1,75 @@
+-- CreateTable
+CREATE TABLE "AdminSession" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "role" "Role" NOT NULL,
+    "ip" TEXT,
+    "userAgent" TEXT,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "revokedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AdminSession_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "AdminOTP" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "code" TEXT NOT NULL,
+    "used" BOOLEAN NOT NULL DEFAULT false,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AdminOTP_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "ImpersonationSession" (
+    "id" TEXT NOT NULL,
+    "actorId" TEXT NOT NULL,
+    "targetId" TEXT NOT NULL,
+    "token" TEXT NOT NULL,
+    "reason" TEXT NOT NULL,
+    "used" BOOLEAN NOT NULL DEFAULT false,
+    "usedAt" TIMESTAMP(3),
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "revokedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "ImpersonationSession_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AdminSession_token_key" ON "AdminSession"("token");
+
+-- CreateIndex
+CREATE INDEX "AdminSession_userId_idx" ON "AdminSession"("userId");
+
+-- CreateIndex
+CREATE INDEX "AdminSession_token_idx" ON "AdminSession"("token");
+
+-- CreateIndex
+CREATE INDEX "AdminOTP_userId_used_idx" ON "AdminOTP"("userId", "used");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ImpersonationSession_token_key" ON "ImpersonationSession"("token");
+
+-- CreateIndex
+CREATE INDEX "ImpersonationSession_actorId_idx" ON "ImpersonationSession"("actorId");
+
+-- CreateIndex
+CREATE INDEX "ImpersonationSession_targetId_idx" ON "ImpersonationSession"("targetId");
+
+-- AddForeignKey
+ALTER TABLE "AdminSession" ADD CONSTRAINT "AdminSession_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "AdminOTP" ADD CONSTRAINT "AdminOTP_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "ImpersonationSession" ADD CONSTRAINT "ImpersonationSession_actorId_fkey" FOREIGN KEY ("actorId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "ImpersonationSession" ADD CONSTRAINT "ImpersonationSession_targetId_fkey" FOREIGN KEY ("targetId") REFERENCES "User"("id") ON DELETE RESTRICT ON UPDATE CASCADE;

package/prisma/schema.prisma

@@ -369,6 +369,12 @@ model User {
 
   toolRequests ToolRequest[]
 
+  /// Admin panel relations
+  adminSessions        AdminSession[]
+  adminOTPs            AdminOTP[]
+  impersonationsAsActor  ImpersonationSession[] @relation("ImpersonationActor")
+  impersonationsAsTarget ImpersonationSession[] @relation("ImpersonationTarget")
+
   @@index([status])
 }
 
@@ -2049,3 +2055,57 @@ model DeadLetterJob {
   @@index([reviewed])
   @@index([createdAt])
 }
+
+
+/// ─────────────────────────────────────────────────────────────
+/// ADMIN USER MANAGEMENT (For SaaS Admin Panel)
+/// ─────────────────────────────────────────────────────────────
+
+model AdminSession {
+  id        String   @id @default(uuid())
+  userId    String
+  token     String   @unique
+  role      Role
+  ip        String?
+  userAgent String?
+  expiresAt DateTime
+  revokedAt DateTime?
+  createdAt DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([token])
+}
+
+model AdminOTP {
+  id        String   @id @default(uuid())
+  userId    String
+  code      String
+  used      Boolean  @default(false)
+  expiresAt DateTime
+  createdAt DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId, used])
+}
+
+model ImpersonationSession {
+  id        String    @id @default(uuid())
+  actorId   String
+  targetId  String
+  token     String    @unique
+  reason    String
+  used      Boolean   @default(false)
+  usedAt    DateTime?
+  expiresAt DateTime
+  revokedAt DateTime?
+  createdAt DateTime  @default(now())
+
+  actor  User @relation("ImpersonationActor",  fields: [actorId],  references: [id])
+  target User @relation("ImpersonationTarget", fields: [targetId], references: [id])
+
+  @@index([actorId])
+  @@index([targetId])
+}