feat: implement file deletion functionality and enhance deployment script

frontend/lib/store.ts

@@ -92,3 +92,16 @@ export function getUploadPath(token: string, originalName: string): string {
   return path.join(UPLOADS_DIR, token, originalName)
 }
 
+export async function deleteFile(token: string): Promise<void> {
+  await ensureReady()
+  const record = await getFile(token)
+  if (!record) throw new Error('File not found')
+
+  // Remove from DB first
+  await getDb().execute({ sql: 'DELETE FROM files WHERE token = ?', args: [token] })
+
+  // Remove upload directory (best-effort — don't fail if already gone)
+  const dir = path.join(UPLOADS_DIR, token)
+  await fs.rm(dir, { recursive: true, force: true })
+}
+

frontend/lib/users.ts

@@ -152,20 +152,32 @@ export async function countUsers(): Promise<number> {
 }
 
 /**
- * Seeds an initial admin user if no users exist yet.
- * Reads ADMIN_USERNAME (default "admin") and ADMIN_PASSWORD from environment.
+ * Ensures the admin user defined by ADMIN_USERNAME / ADMIN_PASSWORD env vars
+ * exists and has the correct password. Runs on every login attempt so that
+ * changing the env var (and restarting the container) takes effect immediately.
+ * Does nothing when ADMIN_PASSWORD is not set.
  */
 export async function seedAdminIfEmpty(): Promise<void> {
-  const count = await countUsers()
-  if (count > 0) return
   const password = process.env.ADMIN_PASSWORD
   if (!password) return
+
   const username = process.env.ADMIN_USERNAME ?? 'admin'
+
   try {
-    await createUser(username, password, 'admin')
-    console.log(`[auth] Seeded initial admin user: "${username}"`)
+    const existing = await findUserByUsername(username)
+    if (!existing) {
+      await createUser(username, password, 'admin')
+      console.log(`[auth] Created admin user: "${username}"`)
+    } else {
+      // Always sync the password so env-var changes take effect after restart
+      const matches = await verifyPassword(password, existing.passwordHash, existing.salt)
+      if (!matches) {
+        await updatePassword(existing.id, password)
+        console.log(`[auth] Synced password for admin user: "${username}"`)
+      }
+    }
   } catch (e) {
-    console.error('[auth] Failed to seed admin user:', e)
+    console.error('[auth] Failed to sync admin user:', e)
   }
 }