vibe coded v1

api/services/user-service.ts

@@ -51,7 +51,7 @@ export async function createUser(
 
 export function getUserById(userId: string): User {
   const userRow = db.prepare(
-    `SELECT id, username, password_hash, is_admin, created_at
+    `SELECT id, username, password_hash, is_admin, created_at, avatar_mime
       FROM users WHERE id = ?`,
   ).get(userId);
 
@@ -64,7 +64,7 @@ export function getUserById(userId: string): User {
 
 export function getUserByUsername(username: string): User {
   const userRow = db.prepare(
-    `SELECT id, username, password_hash, is_admin, created_at
+    `SELECT id, username, password_hash, is_admin, created_at, avatar_mime
       FROM users WHERE username = ?`,
   ).get(username);
 
@@ -77,7 +77,7 @@ export function getUserByUsername(username: string): User {
 
 export function listUsers(): User[] {
   const userRows = db.prepare(
-    `SELECT id, username, password_hash, is_admin, created_at FROM users`,
+    `SELECT id, username, password_hash, is_admin, created_at, avatar_mime FROM users`,
   ).all();
 
   if (!userRows || !userRows.every(isUserRow)) {
@@ -119,6 +119,16 @@ export async function updateUser(
   return updatedUser;
 }
 
+export function updateUserAvatar(userId: string, mime: string): void {
+  const result = db.prepare(
+    `UPDATE users SET avatar_mime = ? WHERE id = ?`,
+  ).run(mime, userId);
+
+  if (result.changes === 0) {
+    throw new APIException(APIErrorCode.NOT_FOUND, 404, "User not found");
+  }
+}
+
 export function deleteUser(userId: string): void {
   const result = db.prepare(
     `DELETE FROM users WHERE id = ?;`,