Magic-link sign in UI and APIs

prisma/migrations/20260405120000_remove_otp_challenge/migration.sql

@@ -0,0 +1,2 @@
+-- Drop legacy email OTP table (product uses magic link only).
+DROP TABLE IF EXISTS "OtpChallenge";

prisma/migrations/20260406015738_add_magic_link_token/migration.sql

@@ -0,0 +1,17 @@
+-- CreateTable
+CREATE TABLE "MagicLinkToken" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "tokenHash" TEXT NOT NULL,
+    "expiresAt" TIMESTAMP(3) NOT NULL,
+    "nextPath" TEXT,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "MagicLinkToken_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "MagicLinkToken_tokenHash_key" ON "MagicLinkToken"("tokenHash");
+
+-- CreateIndex
+CREATE INDEX "MagicLinkToken_email_idx" ON "MagicLinkToken"("email");

prisma/migrations/migration_lock.toml

@@ -1,3 +1,3 @@
 # Please do not edit this file manually
-# It should be added in your version-control system (i.e. Git)
+# It should be added in your version-control system (e.g., Git)
 provider = "postgresql"

prisma/schema.prisma

@@ -29,12 +29,12 @@ model Session {
   @@index([userId])
 }
 
-model OtpChallenge {
+model MagicLinkToken {
   id        String   @id @default(cuid())
   email     String
-  codeHash  String
+  tokenHash String   @unique
   expiresAt DateTime
-  attempts  Int      @default(0)
+  nextPath  String?
   createdAt DateTime @default(now())
 
   @@index([email])