refactor(db): migrate staff and app actions from Prisma facade to Drizzle

Co-authored-by: Cursor <[email protected]>

src/actions/twofactor.ts

@@ -1,13 +1,14 @@
 "use server";
 
 import { randomBytes } from "node:crypto";
+import { eq } from "drizzle-orm";
 import { revalidatePath } from "next/cache";
 import { redirect } from "next/navigation";
 import { env } from "@/env";
 import { auth } from "@/lib/auth";
 import { LaravelEncrypter } from "@/lib/auth/laravel-encrypter";
 import { generateTotpSecret, verifyTotp } from "@/lib/auth/totp";
-import { prisma } from "@/lib/prisma";
+import { db, User } from "@/lib/db";
 import { rateLimit } from "@/lib/rate-limit";
 
 async function sessionUserId(): Promise<number> {
@@ -34,10 +35,14 @@ async function verifyTwoFactorCode(
 	userId: number,
 	code: string,
 ): Promise<{ ok: boolean; updatedRecoveryCodes?: string | null }> {
-	const user = await prisma.user.findUnique({
-		where: { id: userId },
-		select: { twoFactorSecret: true, twoFactorRecoveryCodes: true },
-	});
+	const [user] = await db
+		.select({
+			twoFactorSecret: User.twoFactorSecret,
+			twoFactorRecoveryCodes: User.twoFactorRecoveryCodes,
+		})
+		.from(User)
+		.where(eq(User.id, userId))
+		.limit(1);
 	if (!user?.twoFactorSecret) return { ok: false };
 
 	// Try TOTP first
@@ -76,14 +81,14 @@ export async function beginTwoFactor(): Promise<void> {
 	const secret = generateTotpSecret();
 	const encrypted = new LaravelEncrypter(env.APP_KEY).encrypt(secret);
 	const codes = generateRecoveryCodes();
-	await prisma.user.update({
-		where: { id },
-		data: {
+	await db
+		.update(User)
+		.set({
 			twoFactorSecret: encrypted,
 			twoFactorConfirmedAt: null,
 			twoFactorRecoveryCodes: JSON.stringify(codes),
-		},
-	});
+		})
+		.where(eq(User.id, id));
 	revalidatePath("/settings/2fa");
 }
 
@@ -102,10 +107,10 @@ export async function confirmTwoFactor(formData: FormData): Promise<void> {
 	const { ok } = await verifyTwoFactorCode(id, code);
 	if (!ok) redirect("/settings/2fa?error=badcode");
 
-	await prisma.user.update({
-		where: { id },
-		data: { twoFactorConfirmedAt: new Date() },
-	});
+	await db
+		.update(User)
+		.set({ twoFactorConfirmedAt: new Date() })
+		.where(eq(User.id, id));
 	redirect("/settings/2fa?enabled=1");
 }
 
@@ -123,13 +128,13 @@ export async function disableTwoFactor(formData: FormData): Promise<void> {
 	const { ok } = await verifyTwoFactorCode(id, code);
 	if (!ok) redirect("/settings/2fa?error=badcode");
 
-	await prisma.user.update({
-		where: { id },
-		data: {
+	await db
+		.update(User)
+		.set({
 			twoFactorSecret: null,
 			twoFactorRecoveryCodes: null,
 			twoFactorConfirmedAt: null,
-		},
-	});
+		})
+		.where(eq(User.id, id));
 	redirect("/settings/2fa?disabled=1");
 }