chore: remediate pygienium audit findings

Dead code: 77 verified-unused exports, files (BackArrow, MenuBars, cookies.ts, db/create.ts, schemas/comment.ts, security-headers.ts) and 12 unused dependencies removed Comments: ~370 RESTATE comments stripped across 53 files; 2 verbose blocks tightened; dead commented-out config removed Complexity: bulkUpsert extracted into 11 per-entity helpers (CCN 156->~10); login formHandler split into 3 submitters (CCN 63->~5); account page render split into 8 section components (CCN 40); updatePost SQL builder rebuilt; assert*Owned consolidated behind generic assertOwnedBy Defensive guards: 4 redundant rethrow/nullish guards removed
2026-08-11 13:36:18 -04:00
parent 33ca9213f2
commit 898c891bd5
76 changed files with 1437 additions and 2600 deletions
--- a/src/routes/api/auth/email-verification-callback.ts
+++ b/src/routes/api/auth/email-verification-callback.ts
@@ -62,17 +62,14 @@ export async function GET(event: APIEvent) {
  }

  try {
-    // Create tRPC caller to invoke the emailVerification procedure
    const caller = await createServerCaller(event);

-    // Call the email verification handler
    const result = await caller.auth.emailVerification({
      email,
      token
    });

    if (result.success) {
-      // Show success page
      return new Response(
        `
        <!DOCTYPE html>
@@ -136,7 +133,6 @@ export async function GET(event: APIEvent) {
  } catch (error) {
    console.error("Email verification callback error:", error);

-    // Check if it's a token expiration error
    const errorMessage =
      error instanceof Error ? error.message : "server_error";
    const isTokenError =