feat: Implement identity lock screen for sensitive user actions and introduce avatar generation.

src/app/api/swarm/chat/conversations/route.ts

@@ -71,8 +71,8 @@ export async function GET(request: NextRequest) {
           }
         }
 
-        // LAZY LOAD: If remote and not cached, try to fetch it now
-        if (!cachedUser && isRemote) {
+        // LAZY LOAD: If remote and (not cached OR missing avatar), try to fetch it now
+        if (isRemote && (!cachedUser || !cachedUser.avatarUrl)) {
           try {
             const [rHandle, rDomain] = participant2Handle.split('@');
             const { fetchSwarmUserProfile } = await import('@/lib/swarm/interactions');

src/app/api/swarm/chat/messages/route.ts

@@ -7,7 +7,7 @@
 
 import { NextRequest, NextResponse } from 'next/server';
 import { db, chatConversations, chatMessages, users } from '@/db';
-import { eq, desc, and, lt, isNull, sql } from 'drizzle-orm';
+import { eq, desc, and, lt, isNull, sql, inArray } from 'drizzle-orm';
 import { getSession } from '@/lib/auth';
 
 
@@ -73,7 +73,7 @@ export async function GET(request: NextRequest) {
 
     if (senderDids.size > 0) {
       const found = await db.query.users.findMany({
-        where: sql`${users.did} IN ${Array.from(senderDids)}`
+        where: inArray(users.did, Array.from(senderDids))
       });
       found.forEach(u => usersByDid[u.did] = u);
     }
@@ -81,7 +81,7 @@ export async function GET(request: NextRequest) {
     // Also fetch local users by handle if needed
     if (senderHandles.size > 0) {
       const found = await db.query.users.findMany({
-        where: sql`${users.handle} IN ${Array.from(senderHandles)}`
+        where: inArray(users.handle, Array.from(senderHandles))
       });
       found.forEach(u => usersByHandle[u.handle] = u);
     }