@varaos/db 1.1.17 → 1.1.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@varaos/db",
-  "version": "1.1.17",
+  "version": "1.1.19",
   "private": false,
   "main": "index.js",
   "files": [

package/prisma/migrations/20260106173419_upload_intent_and_file_category/migration.sql

@@ -0,0 +1,36 @@
+/*
+  Warnings:
+
+  - Changed the type of `category` on the `UserFile` table. No cast exists, the column would be dropped and recreated, which cannot be done if there is data, since the column is required.
+
+*/
+-- CreateEnum
+CREATE TYPE "public"."FileCategory" AS ENUM ('avatar', 'media', 'attachment', 'memory', 'export');
+
+-- AlterTable
+ALTER TABLE "public"."UserFile" DROP COLUMN "category",
+ADD COLUMN     "category" "public"."FileCategory" NOT NULL;
+
+-- CreateTable
+CREATE TABLE "public"."UploadIntent" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "category" "public"."FileCategory" NOT NULL,
+    "size" BIGINT NOT NULL,
+    "objectKey" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "UploadIntent_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "UploadIntent_userId_idx" ON "public"."UploadIntent"("userId");
+
+-- CreateIndex
+CREATE INDEX "UploadIntent_userId_category_idx" ON "public"."UploadIntent"("userId", "category");
+
+-- CreateIndex
+CREATE INDEX "UserFile_category_idx" ON "public"."UserFile"("category");
+
+-- CreateIndex
+CREATE INDEX "UserFile_userId_category_idx" ON "public"."UserFile"("userId", "category");

package/prisma/migrations/20260109090928_add_user_two_factor_auth/migration.sql

@@ -0,0 +1,37 @@
+/*
+  Warnings:
+
+  - You are about to drop the column `twoFactorSecret` on the `User` table. All the data in the column will be lost.
+
+*/
+-- CreateEnum
+CREATE TYPE "public"."TwoFactorMethod" AS ENUM ('totp', 'email', 'webauthn');
+
+-- AlterTable
+ALTER TABLE "public"."User" DROP COLUMN "twoFactorSecret";
+
+-- CreateTable
+CREATE TABLE "public"."UserTwoFactor" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "method" "public"."TwoFactorMethod" NOT NULL DEFAULT 'totp',
+    "secret" TEXT,
+    "enabled" BOOLEAN NOT NULL DEFAULT false,
+    "lastVerifiedAt" TIMESTAMP(3),
+    "enabledAt" TIMESTAMP(3),
+    "recoveryEmailVerifiedAt" TIMESTAMP(3),
+    "backupCodes" JSONB,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "UserTwoFactor_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "UserTwoFactor_userId_key" ON "public"."UserTwoFactor"("userId");
+
+-- CreateIndex
+CREATE INDEX "UserTwoFactor_userId_idx" ON "public"."UserTwoFactor"("userId");
+
+-- AddForeignKey
+ALTER TABLE "public"."UserTwoFactor" ADD CONSTRAINT "UserTwoFactor_userId_fkey" FOREIGN KEY ("userId") REFERENCES "public"."User"("id") ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/schema.prisma

@@ -68,6 +68,20 @@ enum ReactionType {
   WOW
 }
 
+enum FileCategory {
+  avatar
+  media
+  attachment
+  memory
+  export
+}
+
+enum TwoFactorMethod {
+  totp
+  email
+  webauthn
+}
+
 /// ─────────────────────────────────────────────
 /// USERS & AUTH
 /// ─────────────────────────────────────────────
@@ -90,12 +104,14 @@ model User {
   lastLogin          DateTime?
   lastPasswordChange DateTime?
   twoFactorEnabled   Boolean   @default(false)
-  twoFactorSecret    String?
-  metadata           Json?
-  plan               Plan      @default(free)
-  tokenBalance       Int       @default(0)
-  creditsUsed        Int       @default(0)
-  deletedAt          DateTime?
+
+  userTwoFactor UserTwoFactor?
+
+  metadata     Json?
+  plan         Plan      @default(free)
+  tokenBalance Int       @default(0)
+  creditsUsed  Int       @default(0)
+  deletedAt    DateTime?
 
   authType AuthType @default(oauth)
 
@@ -133,10 +149,10 @@ model UserFile {
   id     String @id @default(uuid())
   userId String
 
-  path     String // local path or CDN URL
+  path     String // Spaces object key (users/{userId}/{category}/{fileId}.ext)
   size     BigInt // bytes
   mimeType String
-  category String // avatar | memory | export | attachment
+  category FileCategory
 
   checksum String? // sha256 or md5 for integrity verification
   metadata Json?
@@ -147,6 +163,7 @@ model UserFile {
 
   @@index([userId])
   @@index([category])
+  @@index([userId, category])
 }
 
 model UserSession {
@@ -167,6 +184,18 @@ model UserSession {
   @@index([userId])
 }
 
+model UploadIntent {
+  id        String       @id
+  userId    String
+  category  FileCategory
+  size      BigInt
+  objectKey String
+  createdAt DateTime     @default(now())
+
+  @@index([userId])
+  @@index([userId, category])
+}
+
 model UserEmail {
   id        String   @id @default(uuid())
   userId    String
@@ -179,6 +208,29 @@ model UserEmail {
   user User @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
+model UserTwoFactor {
+  id     String @id @default(uuid())
+  userId String @unique
+
+  method  TwoFactorMethod @default(totp)
+  secret  String? // null when disabled or method != totp
+  enabled Boolean         @default(false)
+
+  lastVerifiedAt DateTime?
+  enabledAt      DateTime?
+
+  recoveryEmailVerifiedAt DateTime?
+
+  backupCodes Json? // [{ hash, used, usedAt }]
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+}
+
 model Account {
   id                String  @id @default(uuid())
   userId            String