Add special orders API and related media/auth updates.

Co-authored-by: Cursor <cursoragent@cursor.com>

prisma/migrations/20260924120000_special_orders/migration.sql

@@ -0,0 +1,44 @@
+-- CreateEnum
+CREATE TYPE "SpecialOrderCategory" AS ENUM ('specialCake', 'specialPastry');
+
+-- CreateTable
+CREATE TABLE "SpecialOrder" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "category" "SpecialOrderCategory" NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT NOT NULL DEFAULT '',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "SpecialOrder_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "SpecialOrderImage" (
+    "id" TEXT NOT NULL,
+    "specialOrderId" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "storageKey" TEXT NOT NULL,
+    "sortOrder" INTEGER NOT NULL DEFAULT 0,
+
+    CONSTRAINT "SpecialOrderImage_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "SpecialOrder_userId_idx" ON "SpecialOrder"("userId");
+
+-- CreateIndex
+CREATE INDEX "SpecialOrder_category_idx" ON "SpecialOrder"("category");
+
+-- CreateIndex
+CREATE INDEX "SpecialOrder_createdAt_idx" ON "SpecialOrder"("createdAt");
+
+-- CreateIndex
+CREATE INDEX "SpecialOrderImage_specialOrderId_idx" ON "SpecialOrderImage"("specialOrderId");
+
+-- AddForeignKey
+ALTER TABLE "SpecialOrder" ADD CONSTRAINT "SpecialOrder_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "SpecialOrderImage" ADD CONSTRAINT "SpecialOrderImage_specialOrderId_fkey" FOREIGN KEY ("specialOrderId") REFERENCES "SpecialOrder"("id") ON DELETE CASCADE ON UPDATE CASCADE;

prisma/schema.prisma

@@ -49,6 +49,7 @@ model User {
   refreshTokens    RefreshToken[]
   addresses        UserAddress[]
   orders           Order[]
+  specialOrders    SpecialOrder[]
   discounts        Discount[]        @relation("DiscountAssignee")
   discountsCreated Discount[]        @relation("DiscountCreatedBy")
 
@@ -304,3 +305,36 @@ model Discount {
   @@index([categoryId])
   @@index([active, expiresAt])
 }
+
+enum SpecialOrderCategory {
+  specialCake
+  specialPastry
+}
+
+/// Custom request form (no payment / product link) — shown to admins.
+model SpecialOrder {
+  id          String                @id @default(cuid())
+  userId      String
+  user        User                  @relation(fields: [userId], references: [id], onDelete: Cascade)
+  category    SpecialOrderCategory
+  name        String
+  description String                @default("")
+  createdAt   DateTime              @default(now())
+  updatedAt   DateTime              @updatedAt
+  images      SpecialOrderImage[]
+
+  @@index([userId])
+  @@index([category])
+  @@index([createdAt])
+}
+
+model SpecialOrderImage {
+  id             String       @id @default(cuid())
+  specialOrderId String
+  specialOrder   SpecialOrder @relation(fields: [specialOrderId], references: [id], onDelete: Cascade)
+  url            String
+  storageKey     String
+  sortOrder      Int          @default(0)
+
+  @@index([specialOrderId])
+}