Lucas Berger 6232aa0d68 feat(19-02): admin create-member, reset-password, hasLocalCredential on GET /members ...

- POST /api/admin/members: atomic tx (users + local_credentials), 409 on dup username
- POST /api/admin/members/:id/password: admin reset (no current-pwd required), 404 if no local cred
- GET /api/admin/members: LEFT JOIN local_credentials, hasLocalCredential in each member row
- noEchoHook on both POST routes (T-19-06); requireAdmin via router.use('*') remains first statement
- Dup-entry detection via error message string match (Drizzle wraps mysql2 ER_DUP_ENTRY)

2026-06-17 16:31:37 -04:00

..

api

feat(19-02): admin create-member, reset-password, hasLocalCredential on GET /members

2026-06-17 16:31:37 -04:00

pwa

fix(12): unblock CI security + harness jobs

2026-06-16 18:24:10 -04:00