R1 cross-audit app fixes: send-email err.message leak + UserFacingError class + perfil ImageApiError + completar-asignacion actor + bulk-ops batched UPDATE

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-14
• wi-cli-venus completed · 2026-06-14
  R1 cross-audit app fixes. Items 1-3 (live v1.69.35, d811696): NEW UserFacingError class (safe-to-surface marker, ImageApiError extends it) closing the send-email/route raw-err.message leak + perfil ImageApiError surfacing (dropped 100-char band-aid). Item 4 (completar-asignacion actorUserId): closed-as-already-covered (unauth lookup, actor present on authenticated path). Item 5 Commit B (fec7fc4 v1.69.38): bulk-ops de-loop — bulkDeactivate ANY()-batch + bulkAssignRole unnest+ON CONFLICT (exact addUserRole cols) + bulkInvite eligibility-SELECT-collapse; atomic per-batch (accepted, non-silent rollback via logCaughtError); audit verified all 3 triggers FOR EACH ROW live + setArchiveContext SET LOCAL same-client. audit PASS:fec7fc4. R2 baseline. mars-team R1 fully remediated.