bump

convex/auth.ts

@@ -217,6 +217,12 @@ export const getPublicKeys = query({
     const users = await ctx.db.query("userProfiles").collect();
     const results = [];
     for (const u of users) {
+      // Ghost profiles are import-only — they have no real public
+      // identity key, can't log in, and shouldn't surface in
+      // mention autocomplete / DM pickers. Rendering of imported
+      // messages goes through `messages.enrichMessage` which hits
+      // `userProfiles` directly, so filtering here is safe.
+      if (u.isGhost) continue;
       let avatarUrl: string | null = null;
       if (u.avatarStorageId) {
         avatarUrl = await getPublicStorageUrl(ctx, u.avatarStorageId);