feat: add frontend lib utilities and database migrations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: salamaashoush

frontend/src/lib/utils.ts

@@ -0,0 +1,6 @@
+import { type ClassValue, clsx } from 'clsx';
+import { twMerge } from 'tailwind-merge';
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs));
+}

migrations/0001_initial_schema.sql

@@ -0,0 +1,118 @@
+-- Users table
+CREATE TABLE users (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  email VARCHAR(255) NOT NULL UNIQUE,
+  password_hash VARCHAR(255) NOT NULL,
+  name VARCHAR(255) NOT NULL DEFAULT '',
+  role VARCHAR(20) NOT NULL DEFAULT 'user',
+  email_verified BOOLEAN NOT NULL DEFAULT false,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Organizations table
+CREATE TABLE organizations (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  name VARCHAR(255) NOT NULL,
+  slug VARCHAR(255) NOT NULL UNIQUE,
+  owner_id UUID NOT NULL REFERENCES users(id),
+  storage_provider VARCHAR(20),
+  storage_config JSONB,
+  billing_plan VARCHAR(50) NOT NULL DEFAULT 'free',
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Organization members (composite PK)
+CREATE TABLE org_members (
+  org_id UUID NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  role VARCHAR(20) NOT NULL DEFAULT 'member',
+  invited_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  joined_at TIMESTAMPTZ,
+  PRIMARY KEY (org_id, user_id)
+);
+
+-- Teams table
+CREATE TABLE teams (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  org_id UUID NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+  name VARCHAR(255) NOT NULL,
+  slug VARCHAR(255) NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  UNIQUE (org_id, slug)
+);
+
+-- Team members (composite PK)
+CREATE TABLE team_members (
+  team_id UUID NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  role VARCHAR(20) NOT NULL DEFAULT 'member',
+  added_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  PRIMARY KEY (team_id, user_id)
+);
+
+-- API tokens
+CREATE TABLE api_tokens (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  org_id UUID NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+  team_id UUID REFERENCES teams(id) ON DELETE CASCADE,
+  name VARCHAR(255) NOT NULL,
+  token_hash VARCHAR(128) NOT NULL UNIQUE,
+  token_prefix VARCHAR(12) NOT NULL,
+  scopes TEXT[] NOT NULL DEFAULT ARRAY['read', 'write'],
+  created_by UUID NOT NULL REFERENCES users(id),
+  expires_at TIMESTAMPTZ,
+  last_used_at TIMESTAMPTZ,
+  revoked BOOLEAN NOT NULL DEFAULT false,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Sessions (refresh tokens)
+CREATE TABLE sessions (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  token_hash VARCHAR(128) NOT NULL UNIQUE,
+  expires_at TIMESTAMPTZ NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Cache events (analytics)
+CREATE TABLE cache_events (
+  id BIGSERIAL PRIMARY KEY,
+  org_id UUID NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
+  team_id UUID,
+  artifact_hash VARCHAR(255) NOT NULL,
+  event_type VARCHAR(10) NOT NULL,
+  size_bytes BIGINT NOT NULL DEFAULT 0,
+  duration_ms INTEGER NOT NULL DEFAULT 0,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+-- Indexes for performance
+CREATE INDEX idx_org_members_user_id ON org_members(user_id);
+CREATE INDEX idx_team_members_user_id ON team_members(user_id);
+CREATE INDEX idx_api_tokens_org_id ON api_tokens(org_id);
+CREATE INDEX idx_api_tokens_token_hash ON api_tokens(token_hash);
+CREATE INDEX idx_sessions_user_id ON sessions(user_id);
+CREATE INDEX idx_sessions_token_hash ON sessions(token_hash);
+CREATE INDEX idx_cache_events_org_id ON cache_events(org_id);
+CREATE INDEX idx_cache_events_created_at ON cache_events(created_at);
+CREATE INDEX idx_cache_events_org_created ON cache_events(org_id, created_at);
+
+-- Auto-update updated_at trigger
+CREATE OR REPLACE FUNCTION update_updated_at_column()
+RETURNS TRIGGER AS $$
+BEGIN
+  NEW.updated_at = now();
+  RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER update_users_updated_at
+  BEFORE UPDATE ON users
+  FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
+
+CREATE TRIGGER update_organizations_updated_at
+  BEFORE UPDATE ON organizations
+  FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

migrations/0002_remove_billing_plan.sql

@@ -0,0 +1,15 @@
+-- Remove billing_plan (dead code for self-hosted)
+ALTER TABLE organizations DROP COLUMN IF EXISTS billing_plan;
+
+-- Email verification & password reset tokens
+CREATE TABLE email_tokens (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  token_hash VARCHAR(128) NOT NULL UNIQUE,
+  token_type VARCHAR(20) NOT NULL,
+  expires_at TIMESTAMPTZ NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+CREATE INDEX idx_email_tokens_hash ON email_tokens(token_hash);
+CREATE INDEX idx_email_tokens_user ON email_tokens(user_id);

migrations/0003_two_factor_auth.sql

@@ -0,0 +1,26 @@
+-- Two-factor authentication support
+
+ALTER TABLE users
+  ADD COLUMN twofa_method VARCHAR(10) NOT NULL DEFAULT 'none',
+  ADD COLUMN totp_secret VARCHAR(255),
+  ADD COLUMN totp_enabled BOOLEAN NOT NULL DEFAULT false;
+
+CREATE TABLE recovery_codes (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  code_hash VARCHAR(128) NOT NULL,
+  used BOOLEAN NOT NULL DEFAULT false,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX idx_recovery_codes_user ON recovery_codes(user_id);
+
+CREATE TABLE twofa_pending (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  token_hash VARCHAR(128) NOT NULL UNIQUE,
+  method VARCHAR(10) NOT NULL,
+  expires_at TIMESTAMPTZ NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX idx_twofa_pending_token ON twofa_pending(token_hash);
+CREATE INDEX idx_twofa_pending_user ON twofa_pending(user_id);

migrations/0004_admin_enhancements.sql

@@ -0,0 +1,8 @@
+-- User activation/deactivation
+ALTER TABLE users
+  ADD COLUMN is_active BOOLEAN NOT NULL DEFAULT true;
+
+-- Organization limits
+ALTER TABLE organizations
+  ADD COLUMN cache_size_limit_bytes BIGINT,
+  ADD COLUMN max_tokens INT;