Add user avatar management and moderation

src/lib/server/auth/account-deletion.ts

@@ -1,5 +1,6 @@
 import type { Database } from '@tursodatabase/database';
 import { randomUUID } from 'node:crypto';
+import { deleteUploadedAvatar } from '$lib/server/avatars';
 
 export async function softDeleteAccount(
 	database: Database,
@@ -32,6 +33,7 @@ export async function softDeleteAccount(
 	await (await database.prepare('DELETE FROM discord_profiles WHERE user_id=?')).run(userId);
 	await (await database.prepare('DELETE FROM user_roles WHERE user_id=?')).run(userId);
 	await (await database.prepare('DELETE FROM user_permissions WHERE user_id=?')).run(userId);
+	await deleteUploadedAvatar(database, userId);
 	await (await database.prepare(
 		'INSERT INTO audit_log(id,actor_id,entity_type,entity_id,action,before_json,after_json,created_at) VALUES(?,?,?,?,?,?,?,?)'
 	)).run(

src/lib/server/auth/session.ts

@@ -2,6 +2,7 @@ import { dev } from '$app/environment';
 import { getDatabase } from '$lib/server/database';
 import type { Cookies } from '@sveltejs/kit';
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { avatarUrl } from '$lib/avatar';
 
 const COOKIE_NAME = 'shd_session';
 const SESSION_SECONDS = 60 * 60 * 24 * 30;
@@ -12,6 +13,7 @@ export type AuthUser = {
 	displayName: string;
 	role: string;
 	discordLinked: boolean;
+	avatarUrl: string;
 };
 
 function hashToken(token: string): string {
@@ -57,12 +59,14 @@ export async function getSessionUser(cookies: Cookies): Promise<AuthUser | null>
 	const database = await getDatabase();
 	const statement = await database.prepare(`
 		SELECT users.id, users.username, COALESCE(user_profiles.display_name,users.username) AS display_name,
-			users.role, users.discord_id,
+			users.role, users.discord_id, user_avatars.source AS avatar_source,
+			user_avatars.value AS avatar_value, user_avatars.updated_at AS avatar_updated_at,
 			user_status.last_active_at,user_status.blocked_at,user_status.banned_until,
 			deleted_accounts.deleted_at
 		FROM sessions
 		JOIN users ON users.id = sessions.user_id
 		LEFT JOIN user_profiles ON user_profiles.user_id=users.id
+		LEFT JOIN user_avatars ON user_avatars.user_id=users.id
 		LEFT JOIN user_status ON user_status.user_id=users.id
 		LEFT JOIN deleted_accounts ON deleted_accounts.user_id=users.id
 		WHERE sessions.token_hash = ? AND sessions.expires_at > ?
@@ -91,7 +95,8 @@ export async function getSessionUser(cookies: Cookies): Promise<AuthUser | null>
 		username: String(user.username),
 		displayName: String(user.display_name),
 		role: String(user.role),
-		discordLinked: typeof user.discord_id === 'string'
+		discordLinked: typeof user.discord_id === 'string',
+		avatarUrl: avatarUrl(user.avatar_source, user.avatar_value, String(user.id), user.avatar_updated_at)
 	};
 }