oa-email-code-login 实现邮箱验证码登录

server/prisma/schema.prisma

@@ -680,6 +680,7 @@ model Employee {
   approval_transfers_from              ApprovalTransfer[]            @relation("TransferFrom")
   approval_transfers_to                ApprovalTransfer[]            @relation("TransferTo")
   password_reset_codes                 PasswordResetCode[]
+  email_login_codes                    EmailLoginCode[]
   lifecycle_events                     EmployeeLifecycleEvent[]
   checklist_tasks                      EmployeeChecklistTask[]
   presence_records                     EmployeePresence[]
@@ -731,6 +732,24 @@ model PasswordResetCode {
   @@map("password_reset_codes")
 }
 
+model EmailLoginCode {
+  id                 String    @id @default(uuid()) @db.Uuid
+  employee_id        String    @db.Uuid
+  code_hash          String
+  expires_at         DateTime
+  used_at            DateTime?
+  attempts_count     Int       @default(0)
+  created_at         DateTime  @default(now())
+  created_ip         String?
+  created_user_agent String?
+
+  employee Employee @relation(fields: [employee_id], references: [id], onDelete: Restrict)
+
+  @@index([employee_id, created_at])
+  @@index([expires_at])
+  @@map("email_login_codes")
+}
+
 model EmployeeRole {
   employee_id String   @db.Uuid
   role_code   RoleCode