-- ==============================================================
-- ACTUALIZACIÓN: SOPORTE 2FA (DOBLE FACTOR) Y ROLES DETALLADOS
-- Ejecutar en phpMyAdmin si ya importaste la base de datos previa
-- ==============================================================

ALTER TABLE `users` 
ADD COLUMN `two_factor_secret` TEXT NULL AFTER `status`,
ADD COLUMN `two_factor_recovery_codes` TEXT NULL AFTER `two_factor_secret`,
ADD COLUMN `two_factor_confirmed_at` TIMESTAMP NULL AFTER `two_factor_recovery_codes`;

-- Actualizar enum de roles para incluir supervisor de cliente
ALTER TABLE `users` 
MODIFY COLUMN `role` ENUM('admin', 'supervisor_it', 'technician', 'client_supervisor', 'client') DEFAULT 'client';