modify provisioning

prisma/migrations/20260713093000_add_device_authorizations/migration.sql

@@ -0,0 +1,23 @@
+CREATE TABLE "device_authorizations" (
+    "id" UUID NOT NULL,
+    "device_code_hash" TEXT NOT NULL,
+    "user_code" TEXT NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'PENDING',
+    "auth_user_id" UUID,
+    "account_email" TEXT,
+    "auth_user_name" TEXT,
+    "auth_user_role" TEXT,
+    "auth_user_roles" JSONB,
+    "device" JSONB,
+    "expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "approved_at" TIMESTAMPTZ(3),
+    "consumed_at" TIMESTAMPTZ(3),
+    "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "device_authorizations_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX "device_authorizations_device_code_hash_key" ON "device_authorizations"("device_code_hash");
+CREATE UNIQUE INDEX "device_authorizations_user_code_key" ON "device_authorizations"("user_code");
+CREATE INDEX "device_authorizations_status_expires_at_idx" ON "device_authorizations"("status", "expires_at");

prisma/schema.prisma

@@ -227,6 +227,27 @@ model ProvisionedDevice {
   @@map("provisioned_devices")
 }
 
+model DeviceAuthorization {
+  id             String   @id @default(uuid()) @db.Uuid
+  deviceCodeHash String   @unique @map("device_code_hash")
+  userCode       String   @unique @map("user_code")
+  status         String   @default("PENDING")
+  authUserId     String?  @map("auth_user_id") @db.Uuid
+  accountEmail   String?  @map("account_email")
+  authUserName   String?  @map("auth_user_name")
+  authUserRole   String?  @map("auth_user_role")
+  authUserRoles  Json?    @map("auth_user_roles")
+  device         Json?
+  expiresAt      DateTime @map("expires_at") @db.Timestamptz(3)
+  approvedAt     DateTime? @map("approved_at") @db.Timestamptz(3)
+  consumedAt     DateTime? @map("consumed_at") @db.Timestamptz(3)
+  createdAt      DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt      DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+
+  @@index([status, expiresAt])
+  @@map("device_authorizations")
+}
+
 model LauncherSshKey {
   id                String   @id @default(uuid()) @db.Uuid
   accountEmail      String   @map("account_email")