refactor(db): migrate app pages and APIs from Prisma facade to Drizzle (5)

Co-authored-by: Cursor <[email protected]>

src/app/mod/layout.tsx

@@ -1,3 +1,4 @@
+import { eq } from "drizzle-orm";
 import {
 	Ban,
 	Gavel,
@@ -16,9 +17,9 @@ import type { ReactNode } from "react";
 import { LanguageSwitcher } from "@/components/language-switcher";
 import { ThemeSwitcher } from "@/components/theme-switcher";
 import { requireMod } from "@/lib/admin/guard";
+import { db, User } from "@/lib/db";
 import { setCsrfCookie } from "@/lib/foundation/security";
 import { canAccess, getAdminContext, PERMS } from "@/lib/permissions";
-import { prisma } from "@/lib/prisma";
 import { siteSettings } from "@/lib/services/site-settings";
 
 export const dynamic = "force-dynamic";
@@ -32,12 +33,12 @@ export default async function ModLayout({ children }: { children: ReactNode }) {
 		csrfToken = "";
 	}
 	if (await siteSettings.getBool("force_staff_2fa", false)) {
-		const u = await prisma.user
-			.findUnique({
-				where: { id: staff.id },
-				select: { twoFactorConfirmedAt: true },
-			})
-			.catch(() => null);
+		const [u] = await db
+			.select({ twoFactorConfirmedAt: User.twoFactorConfirmedAt })
+			.from(User)
+			.where(eq(User.id, staff.id))
+			.limit(1)
+			.catch(() => [] as { twoFactorConfirmedAt: Date | null }[]);
 		if (!u?.twoFactorConfirmedAt) redirect("/settings/2fa?error=staffrequired");
 	}