feat(auth,privacy,web): step-by-step login, privacy settings persistence, TOTP QR, and API docs

alembic/versions/0019_user_privacy_fields.py

@@ -0,0 +1,39 @@
+"""add user privacy fields
+
+Revision ID: 0019_user_privacy_fields
+Revises: 0018_user_twofa
+Create Date: 2026-03-08 23:59:00.000000
+"""
+
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision: str = "0019_user_privacy_fields"
+down_revision: Union[str, Sequence[str], None] = "0018_user_twofa"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "users",
+        sa.Column("privacy_last_seen", sa.String(length=16), nullable=False, server_default=sa.text("'everyone'")),
+    )
+    op.add_column(
+        "users",
+        sa.Column("privacy_avatar", sa.String(length=16), nullable=False, server_default=sa.text("'everyone'")),
+    )
+    op.add_column(
+        "users",
+        sa.Column("privacy_group_invites", sa.String(length=16), nullable=False, server_default=sa.text("'everyone'")),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("users", "privacy_group_invites")
+    op.drop_column("users", "privacy_avatar")
+    op.drop_column("users", "privacy_last_seen")
+