fix first online resevation

packages/database/prisma/migrations/20260507000000_add_company_containers/migration.sql

@@ -0,0 +1,2 @@
+-- Empty placeholder migration (no schema changes)
+SELECT 1;

packages/database/prisma/migrations/20260508000000_add_employee_password_hash/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "employees" ADD COLUMN IF NOT EXISTS "passwordHash" TEXT;

packages/database/prisma/migrations/20260508000001_add_password_reset_tokens/migration.sql

@@ -0,0 +1,7 @@
+-- AlterTable employees
+ALTER TABLE "employees" ADD COLUMN IF NOT EXISTS "passwordResetToken" TEXT UNIQUE;
+ALTER TABLE "employees" ADD COLUMN IF NOT EXISTS "passwordResetExpiresAt" TIMESTAMPTZ;
+
+-- AlterTable admin_users
+ALTER TABLE "admin_users" ADD COLUMN IF NOT EXISTS "passwordResetToken" TEXT UNIQUE;
+ALTER TABLE "admin_users" ADD COLUMN IF NOT EXISTS "passwordResetExpiresAt" TIMESTAMPTZ;

packages/database/prisma/migrations/migration_lock.toml

@@ -0,0 +1 @@
+provider = "postgresql"

packages/database/prisma/schema.prisma

@@ -435,16 +435,19 @@ model BrandSettings {
 }
 
 model Employee {
-  id          String       @id @default(cuid())
-  companyId   String
-  company     Company      @relation(fields: [companyId], references: [id], onDelete: Cascade)
-  clerkUserId String       @unique
-  firstName   String
-  lastName    String
-  email       String
-  phone       String?
-  role        EmployeeRole @default(AGENT)
-  isActive    Boolean      @default(true)
+  id                      String       @id @default(cuid())
+  companyId               String
+  company                 Company      @relation(fields: [companyId], references: [id], onDelete: Cascade)
+  clerkUserId             String       @unique
+  firstName               String
+  lastName                String
+  email                   String
+  phone                   String?
+  passwordHash            String?
+  passwordResetToken      String?      @unique
+  passwordResetExpiresAt  DateTime?
+  role                    EmployeeRole @default(AGENT)
+  isActive                Boolean      @default(true)
 
   notifications           Notification[]           @relation("EmployeeNotifications")
   notificationPreferences NotificationPreference[]
@@ -1027,17 +1030,19 @@ model AccountingSettings {
 // ═══════════════════════════════════════════════════════════════
 
 model AdminUser {
-  id           String    @id @default(cuid())
-  email        String    @unique
-  firstName    String
-  lastName     String
-  passwordHash String
-  role         AdminRole @default(SUPPORT)
-  isActive     Boolean   @default(true)
-  totpSecret   String?
-  totpEnabled  Boolean   @default(false)
-  lastLoginAt  DateTime?
-  lastLoginIp  String?
+  id                     String    @id @default(cuid())
+  email                  String    @unique
+  firstName              String
+  lastName               String
+  passwordHash           String
+  role                   AdminRole @default(SUPPORT)
+  isActive               Boolean   @default(true)
+  totpSecret             String?
+  totpEnabled            Boolean   @default(false)
+  lastLoginAt            DateTime?
+  lastLoginIp            String?
+  passwordResetToken     String?   @unique
+  passwordResetExpiresAt DateTime?
 
   auditLogs   AuditLog[]
   permissions AdminPermission[]