feat: secure KYC storage, Google OAuth, terms gating

server/repositories/organizer.repo.ts

@@ -10,8 +10,8 @@ export const organizerRepo = {
     return prisma.organizerVerification.findUnique({ where: { id } });
   },
 
-  async findByNik(nik: string) {
-    return prisma.organizerVerification.findUnique({ where: { nik } });
+  async findByNikHash(nikHash: string) {
+    return prisma.organizerVerification.findUnique({ where: { nikHash } });
   },
 
   async upsertForUser(

server/repositories/user.repo.ts

@@ -27,4 +27,11 @@ export const userRepo = {
   async create(data: Prisma.UserCreateInput) {
     return prisma.user.create({ data });
   },
+
+  async markAcceptedTerms(id: string) {
+    return prisma.user.update({
+      where: { id },
+      data: { acceptedTermsAndPrivacy: true, acceptedAt: new Date() },
+    });
+  },
 };