v3: added content slugs, fixed real-time updates in client, added @mentions across the app, added new file selector and drop zone

api/services/user-service.ts

@@ -81,6 +81,25 @@ export function getUserByUsername(username: string): User {
   return userRowToApi(userRow);
 }
 
+export function searchUsers(
+  query: string,
+  limit: number,
+): { id: string; username: string; avatarMime: string | null }[] {
+  if (!query) return [];
+  const rows = db.prepare(
+    `SELECT id, username, avatar_mime FROM users WHERE username LIKE ? ORDER BY username LIMIT ?;`,
+  ).all(`${query}%`, limit) as {
+    id: string;
+    username: string;
+    avatar_mime: string | null;
+  }[];
+  return rows.map((r) => ({
+    id: r.id,
+    username: r.username,
+    avatarMime: r.avatar_mime,
+  }));
+}
+
 export function listUsers(): User[] {
   const userRows = db.prepare(
     `${USER_SELECT}`,
@@ -101,20 +120,23 @@ export async function updateUser(
 
   const { password, ...requestFields } = request;
 
+  const now = new Date();
   const updatedUser: User = {
     ...user,
     passwordHash: password ? await hashPassword(password) : user.passwordHash,
     ...requestFields,
+    updatedAt: now,
   };
 
   const updatedUserRow = userApiToRow(updatedUser);
 
   const userResult = db.prepare(
-    `UPDATE users SET username = ?, password_hash = ?, is_admin = ? WHERE id = ?`,
+    `UPDATE users SET username = ?, password_hash = ?, is_admin = ?, updated_at = ? WHERE id = ?`,
   ).run(
     updatedUserRow.username,
     updatedUserRow.password_hash,
     updatedUserRow.is_admin,
+    now.toISOString(),
     updatedUserRow.id,
   );
 
@@ -127,8 +149,8 @@ export async function updateUser(
 
 export function updateUserAvatar(userId: string, mime: string): void {
   const result = db.prepare(
-    `UPDATE users SET avatar_mime = ? WHERE id = ?`,
-  ).run(mime, userId);
+    `UPDATE users SET avatar_mime = ?, updated_at = ? WHERE id = ?`,
+  ).run(mime, new Date().toISOString(), userId);
 
   if (result.changes === 0) {
     throw new APIException(APIErrorCode.NOT_FOUND, 404, "User not found");