feat: implement hard-delete functionality for user accounts and update user management UI

src/models/index.js

@@ -84,7 +84,11 @@ const Users = {
   },
 
   getAllUsers() {
-    return db.prepare("SELECT id, username, COALESCE(display_name, username) as display_name, is_admin, is_organizer, created_at FROM users WHERE password_hash != '' ORDER BY COALESCE(display_name, username) ASC").all();
+    return db.prepare("SELECT id, username, COALESCE(display_name, username) as display_name, password_hash, is_admin, is_organizer, created_at FROM users ORDER BY password_hash = '' ASC, COALESCE(display_name, username) ASC").all();
+  },
+
+  isDeleted(user) {
+    return user.password_hash === '';
   },
 
   getTotalPoints(userId) {
@@ -150,6 +154,15 @@ const Users = {
       .run(scrambled, '[deleted]', '', userId);
     db.prepare('UPDATE password_reset_tokens SET used = 1 WHERE user_id = ?').run(userId);
     db.prepare("DELETE FROM sessions WHERE sess LIKE ?").run('%"userId":' + userId + '%');
+  },
+
+  hardDeleteUser(userId) {
+    db.prepare('DELETE FROM scans WHERE user_id = ?').run(userId);
+    db.prepare('UPDATE packages SET first_scanned_by = NULL, first_scan_image = NULL WHERE first_scanned_by = ?').run(userId);
+    db.prepare('UPDATE packages SET last_scanned_by = NULL, last_scan_hint = NULL WHERE last_scanned_by = ?').run(userId);
+    db.prepare('DELETE FROM password_reset_tokens WHERE user_id = ?').run(userId);
+    db.prepare("DELETE FROM sessions WHERE sess LIKE ?").run('%"userId":' + userId + '%');
+    db.prepare('DELETE FROM users WHERE id = ?').run(userId);
   }
 };